Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/DpaRU9w7rnuQX0XFwPZ3CJQ2L0k.roa
File: DpaRU9w7rnuQX0XFwPZ3CJQ2L0k.roa (raw, json)
Hash identifier: +5vdpBGHUH2fE0wUPDtyN2ba/2LPKRfA4ub40yW+WpM=
Subject key identifier: 0E:96:91:53:DC:3B:AE:7B:90:5F:45:C5:C0:F6:77:08:94:36:2F:49
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 018CC5DC38E181A15DEA18335FB6C60B63B8
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/DpaRU9w7rnuQX0XFwPZ3CJQ2L0k.roa
Signing time: Mon 01 Jan 2024 16:29:53 +0000
ROA not before: Mon 01 Jan 2024 16:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57768
IP address blocks: 185.46.177.0/24 maxlen: 24
185.46.176.0/24 maxlen: 24
185.46.179.0/24 maxlen: 24
185.46.178.0/24 maxlen: 24
5.187.8.0/21 maxlen: 21
5.187.10.0/24 maxlen: 24
5.187.9.0/24 maxlen: 24
5.187.11.0/24 maxlen: 24
5.187.13.0/24 maxlen: 24
5.187.15.0/24 maxlen: 24
5.187.14.0/24 maxlen: 24
5.187.12.0/24 maxlen: 24
37.75.131.0/24 maxlen: 24
37.75.132.0/24 maxlen: 24
37.75.128.0/21 maxlen: 21
37.75.128.0/24 maxlen: 24
37.75.130.0/24 maxlen: 24
37.75.129.0/24 maxlen: 24
37.75.135.0/24 maxlen: 24
37.75.134.0/24 maxlen: 24
37.75.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:38:e1:81:a1:5d:ea:18:33:5f:b6:c6:0b:63:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Jan 1 16:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e969153dc3bae7b905f45c5c0f6770894362f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:08:81:db:0b:cb:33:cb:5b:39:af:a5:34:57:
de:d8:58:ee:d5:aa:b5:e2:f5:d3:0a:05:c1:d3:c1:
31:36:ab:a1:a1:65:30:2d:02:25:3f:61:ab:9e:d8:
0a:b4:88:89:88:a4:cf:ee:33:a0:b3:a1:b9:cf:da:
bf:d3:90:43:c9:5f:6b:e4:6a:3f:36:25:a3:a1:9f:
c5:65:48:0d:1e:0b:20:d0:57:a1:c6:14:37:b1:21:
5a:1d:2f:1c:ce:3f:b3:59:7a:52:65:b4:0c:f7:09:
ca:7c:36:e1:7e:69:48:0a:2e:3b:b9:27:f6:14:d2:
aa:d2:4d:65:5b:03:39:76:58:a4:09:13:ef:4c:01:
ac:ca:68:49:ac:c4:06:58:f2:40:7c:2d:dc:09:71:
e1:12:86:4a:03:e4:b9:29:13:03:75:a7:7c:28:33:
d5:8b:80:f5:8f:9b:f9:26:f4:fa:f8:81:f0:25:55:
68:13:3e:b0:60:44:50:85:dc:6a:8e:a1:4b:50:5c:
00:93:aa:fe:f3:eb:32:20:d6:95:cb:47:51:16:95:
ed:b0:dc:fb:f6:4e:4d:6f:95:bf:22:bb:ba:29:06:
e8:dc:1c:16:12:5a:c9:e3:cb:60:42:fb:43:bb:da:
52:cf:21:00:f3:15:c1:02:1d:38:46:72:7c:55:b0:
15:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:96:91:53:DC:3B:AE:7B:90:5F:45:C5:C0:F6:77:08:94:36:2F:49
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/DpaRU9w7rnuQX0XFwPZ3CJQ2L0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.8.0/21
37.75.128.0/21
185.46.176.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:ce:62:b7:c4:d5:bc:d3:3d:15:9f:20:09:63:b5:41:b0:33:
f2:93:f6:9c:7e:45:af:d7:85:06:29:f0:27:59:8d:e8:6c:7d:
72:e9:a4:53:1c:46:d9:e1:51:16:7a:c0:48:ec:6b:e9:51:82:
82:b7:89:a0:09:3e:f0:b2:29:82:12:fd:e4:e2:45:cc:e3:90:
17:32:ba:0c:76:e3:45:3a:a9:86:71:f8:1c:6a:bd:bc:df:c9:
79:ba:32:d2:c2:40:9a:78:2c:dd:f6:0d:25:97:48:93:9e:0d:
c9:a6:98:00:2c:5f:ef:b3:23:63:9f:f3:65:a5:35:d4:98:4e:
b7:b7:93:09:f9:83:27:e1:09:fd:cf:a3:a1:7c:d0:8c:e4:c3:
5a:2c:30:c1:ae:c4:e8:84:2a:51:e2:73:28:c6:5b:9a:56:3d:
57:71:3d:54:07:5e:60:fc:c5:ae:39:fc:fb:da:4c:a2:5a:67:
37:1c:13:16:75:c0:bc:ea:02:a8:a7:ce:78:ae:bb:43:f4:77:
fb:8e:45:3e:0c:44:23:26:0e:9a:ad:65:ec:a5:ab:31:27:7c:
cf:6b:04:d5:53:aa:47:a5:9d:ca:27:a7:65:3d:d4:65:a8:51:
f8:a2:77:ef:03:c7:61:f6:d1:cd:19:58:8b:c1:21:fd:84:c5:
14:e6:c0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:01 2024 by rpki-client on console-ams.rpki-client.org