Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/WR3JEgfwXT7BjNjBRINw7FK66HE.roa
File: WR3JEgfwXT7BjNjBRINw7FK66HE.roa (raw, json)
Hash identifier: ckb/Y3J91A/vDWlPi73+N28mi2pd9Diqa65qU5tPUAI=
Subject key identifier: 59:1D:C9:12:07:F0:5D:3E:C1:8C:D8:C1:44:83:70:EC:52:BA:E8:71
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 018E7AA1744C8BD906A428F970699AEAF145
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/WR3JEgfwXT7BjNjBRINw7FK66HE.roa
Signing time: Tue 26 Mar 2024 11:59:45 +0000
ROA not before: Tue 26 Mar 2024 11:59:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34471
IP address blocks: 2.59.108.0/22 maxlen: 24
31.25.176.0/21 maxlen: 24
37.122.219.0/24 maxlen: 24
45.92.132.0/22 maxlen: 24
46.28.160.0/21 maxlen: 24
89.40.84.0/22 maxlen: 24
91.242.148.0/22 maxlen: 24
109.235.16.0/21 maxlen: 24
176.56.64.0/19 maxlen: 24
185.4.32.0/22 maxlen: 24
185.5.84.0/22 maxlen: 24
185.10.248.0/22 maxlen: 24
185.70.152.0/22 maxlen: 24
185.83.132.0/22 maxlen: 24
185.153.16.0/22 maxlen: 24
185.176.104.0/22 maxlen: 24
185.205.253.0/24 maxlen: 24
185.205.254.0/24 maxlen: 24
185.223.216.0/22 maxlen: 24
185.228.124.0/22 maxlen: 24
185.239.160.0/22 maxlen: 24
193.246.154.0/23 maxlen: 24
193.246.156.0/23 maxlen: 24
194.156.72.0/22 maxlen: 24
2a02:5dc0::/32 maxlen: 32
2a02:5fc0::/32 maxlen: 48
2a03:440::/32 maxlen: 32
2a05:9b00::/29 maxlen: 29
2a05:a800::/29 maxlen: 29
2a06:3c00::/29 maxlen: 29
2a09:eac0::/29 maxlen: 29
2a0a:1280::/29 maxlen: 29
2a0b:c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:a1:74:4c:8b:d9:06:a4:28:f9:70:69:9a:ea:f1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Mar 26 11:59:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=591dc91207f05d3ec18cd8c1448370ec52bae871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:ff:2f:7a:ea:34:48:7d:f6:f5:c8:b5:f6:
8a:97:19:dc:7d:3b:6b:6d:2d:90:58:5c:56:a3:a2:
a0:74:be:bf:1d:a9:d0:da:26:dd:29:9d:c4:0e:b3:
6e:64:8b:ee:91:c4:28:50:4f:56:07:9c:73:f8:b5:
79:e3:c2:76:18:ee:19:34:a5:66:ca:1d:b5:cf:db:
0e:05:20:eb:a4:23:5f:c1:c4:65:5b:d1:77:43:9a:
97:91:10:0a:ee:5b:ad:13:a7:48:7f:ad:95:25:6a:
d5:00:13:9c:5a:c0:9f:59:b6:25:36:d1:96:64:47:
db:c6:4e:5c:af:49:c2:e6:54:27:3d:97:d3:69:e5:
e9:66:6c:0a:67:b8:47:c4:39:bb:52:1f:43:62:bf:
80:d6:b7:55:a4:21:d6:5d:91:29:36:06:1a:cc:07:
81:38:0d:c5:10:8c:ba:59:c4:40:1e:3e:46:26:37:
06:3a:6c:d1:bc:d6:c9:57:8b:79:3d:9d:c0:0b:9d:
6c:ef:6d:27:15:3e:e0:b1:89:29:cf:4a:b4:a1:0f:
c2:7e:d2:44:2d:dd:8d:06:31:48:d5:6a:a1:89:42:
d2:66:28:4e:53:58:58:35:77:c9:9f:28:c3:a9:26:
bb:44:49:61:22:80:ae:57:52:a8:b8:df:a5:75:c8:
bd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1D:C9:12:07:F0:5D:3E:C1:8C:D8:C1:44:83:70:EC:52:BA:E8:71
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/WR3JEgfwXT7BjNjBRINw7FK66HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.108.0/22
31.25.176.0/21
37.122.219.0/24
45.92.132.0/22
46.28.160.0/21
89.40.84.0/22
91.242.148.0/22
109.235.16.0/21
176.56.64.0/19
185.4.32.0/22
185.5.84.0/22
185.10.248.0/22
185.70.152.0/22
185.83.132.0/22
185.153.16.0/22
185.176.104.0/22
185.205.253.0-185.205.254.255
185.223.216.0/22
185.228.124.0/22
185.239.160.0/22
193.246.154.0-193.246.157.255
194.156.72.0/22
IPv6:
2a02:5dc0::/32
2a02:5fc0::/32
2a03:440::/32
2a05:9b00::/29
2a05:a800::/29
2a06:3c00::/29
2a09:eac0::/29
2a0a:1280::/29
2a0b:c40::/29
Signature Algorithm: sha256WithRSAEncryption
a6:ba:69:a9:c7:b7:da:2d:0d:a4:8d:bc:8f:43:9c:30:38:bd:
fe:36:7b:38:65:db:4e:81:97:08:7c:8f:d8:c1:b4:20:e7:c0:
de:99:6e:a7:49:5c:cc:d1:63:df:2f:f1:9e:f1:ec:f0:fd:a5:
96:a2:82:a4:58:26:af:77:94:6e:58:f8:82:10:a2:0e:b2:39:
9f:38:c7:cf:40:98:7c:5a:03:8b:92:81:d8:c0:4e:eb:cd:c1:
d1:fe:0a:9f:be:dd:65:69:50:ee:cb:4d:c1:fd:62:4c:64:ea:
ee:25:1f:6a:60:c1:2a:a2:5d:b4:09:b0:80:e8:40:57:79:53:
11:bf:ad:47:53:45:c3:12:a4:42:64:4f:25:b6:99:18:87:56:
2b:ac:a6:91:53:d1:85:b9:eb:1d:26:08:e8:ff:10:cd:18:9f:
74:d2:80:c9:8b:a4:45:21:b8:fe:9d:23:1a:f3:e5:59:70:ce:
f2:91:2a:0c:9e:8c:32:5b:ac:fa:6c:cb:61:54:48:51:ec:cf:
cc:53:e7:11:d3:62:7b:3a:dc:4b:c7:03:8a:b6:8d:c2:b8:89:
47:5e:5a:cb:e1:3a:05:99:73:f5:52:32:5f:cf:50:a0:cd:18:
5d:66:2f:71:b4:ca:bf:ab:10:ee:eb:e3:bb:ce:b9:ed:62:b8:
83:01:26:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:04:24 2024 by rpki-client on console-fra.rpki-client.org