Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/DSoHPTExQ2GPu49Q8ITWNFncI_Y.roa
File: DSoHPTExQ2GPu49Q8ITWNFncI_Y.roa (raw, json)
Hash identifier: GTBm2Zn+cabRU10m7zKFPc/wroUHi+LD9Nug1yXUkuo=
Subject key identifier: 0D:2A:07:3D:31:31:43:61:8F:BB:8F:50:F0:84:D6:34:59:DC:23:F6
Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial: 018DA71E4683579C81536D8D62504D221F77
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/DSoHPTExQ2GPu49Q8ITWNFncI_Y.roa
Signing time: Wed 14 Feb 2024 10:16:35 +0000
ROA not before: Wed 14 Feb 2024 10:16:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197071
IP address blocks: 31.214.149.0/24 maxlen: 32
31.214.240.0/21 maxlen: 32
46.251.225.0/24 maxlen: 32
46.251.227.0/24 maxlen: 32
95.156.225.0/24 maxlen: 32
95.156.226.0/23 maxlen: 32
95.156.228.0/22 maxlen: 32
95.156.232.0/24 maxlen: 32
109.230.195.0/24 maxlen: 32
109.230.224.0/20 maxlen: 32
109.230.252.0/22 maxlen: 32
134.255.220.0/22 maxlen: 32
134.255.224.0/22 maxlen: 32
134.255.228.0/23 maxlen: 32
134.255.230.0/24 maxlen: 32
134.255.235.0/24 maxlen: 32
134.255.236.0/22 maxlen: 32
134.255.252.0/22 maxlen: 32
185.87.20.0/22 maxlen: 32
193.25.201.0/24 maxlen: 32
2a05:bec0::/29 maxlen: 128
2a05:bec0:53::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:1e:46:83:57:9c:81:53:6d:8d:62:50:4d:22:1f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Validity
Not Before: Feb 14 10:16:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d2a073d313143618fbb8f50f084d63459dc23f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c0:9a:f7:fb:b7:5e:49:e9:39:3a:d2:1c:33:
68:e0:c9:69:2c:03:a8:9b:33:fb:58:25:f5:cb:49:
80:81:ca:35:c0:3b:af:40:9b:5d:73:2a:6f:b8:c4:
5c:19:b0:d8:b4:07:13:8c:48:97:96:02:5b:83:38:
83:8e:06:e6:33:b4:a7:69:fc:80:9f:3b:28:0b:cb:
a5:3d:d0:bd:4c:f3:c6:df:64:85:ac:da:7e:b8:17:
ff:32:91:9a:73:a1:cc:85:3a:c7:de:75:f8:4a:f5:
c1:a5:6d:7f:ec:96:72:b9:79:d4:6d:3d:07:3e:79:
c4:0c:d4:b0:65:f7:d5:22:55:53:6c:41:cf:b2:3e:
a5:51:ac:e0:c6:78:a9:32:19:cc:ef:ec:23:a7:6d:
62:20:85:4c:24:ca:45:8c:1f:a0:18:72:78:83:d1:
5d:dd:54:95:24:25:3f:45:b9:d9:2b:de:fe:bd:ba:
72:e1:b3:5c:c5:df:df:6c:6c:33:29:2b:3d:a9:b0:
35:ec:55:18:a0:66:e0:55:c6:02:b4:8d:0c:db:65:
97:f5:11:e8:b8:02:c6:00:23:6a:84:91:a7:54:70:
e7:1a:37:06:af:97:be:d1:fa:d7:af:cd:66:34:e5:
2c:c9:b4:0b:16:75:75:91:75:f2:cc:41:ef:c7:0e:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2A:07:3D:31:31:43:61:8F:BB:8F:50:F0:84:D6:34:59:DC:23:F6
X509v3 Authority Key Identifier:
keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/DSoHPTExQ2GPu49Q8ITWNFncI_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.149.0/24
31.214.240.0/21
46.251.225.0/24
46.251.227.0/24
95.156.225.0-95.156.232.255
109.230.195.0/24
109.230.224.0/20
109.230.252.0/22
134.255.220.0-134.255.230.255
134.255.235.0-134.255.239.255
134.255.252.0/22
185.87.20.0/22
193.25.201.0/24
IPv6:
2a05:bec0::/29
Signature Algorithm: sha256WithRSAEncryption
23:90:97:fe:a5:f2:e3:b0:8a:b1:34:a3:57:eb:22:8d:f7:ae:
08:e2:1d:d6:14:82:08:d4:d1:28:cc:eb:a8:dd:65:bb:fa:ab:
ec:9a:52:d0:e3:22:02:dc:fa:f1:f6:94:14:7e:b9:eb:e4:d2:
49:c9:4b:7d:6d:3c:41:4b:a2:50:6a:0b:f6:ff:a3:c2:e2:9b:
46:38:47:cc:c3:b2:f1:b8:03:51:af:a4:9f:ee:66:94:16:e8:
b8:05:50:98:52:e8:e7:02:47:0b:3b:e0:55:4f:00:19:c0:44:
e2:d1:e9:93:1f:bb:fe:ae:d0:59:b4:bd:4a:cf:4e:8c:81:95:
10:bb:6d:22:37:a2:21:e5:33:21:ea:c8:d3:cf:c0:8a:4e:df:
e0:f0:77:ae:65:33:22:14:e5:80:3f:d9:27:b3:db:f8:da:6f:
ed:04:7a:58:b9:85:60:3e:f0:ef:c0:89:25:9c:32:3b:76:41:
1f:6b:a2:98:ba:77:bf:ed:e4:68:b0:fd:ae:0e:39:85:a2:6e:
c9:a4:3f:e1:f0:91:3d:a7:9f:d5:c7:71:47:79:70:89:f1:9c:
06:50:6e:6c:43:e9:4b:88:81:cd:3b:59:06:59:de:b4:49:6f:
3a:be:ec:42:dd:d1:41:f1:7a:8d:93:18:7f:54:86:de:d7:9e:
81:1b:3b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 18:36:46 2024 by rpki-client on console-fra.rpki-client.org