Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Pw4z6_6lhbxNicoGsBnkaF17Fo8.roa
File: Pw4z6_6lhbxNicoGsBnkaF17Fo8.roa (raw, json)
Hash identifier: rmT8wwfAwBIFnbxvywgc8Mrqpd4ags9Kmr3UVLXtOpA=
Subject key identifier: 3F:0E:33:EB:FE:A5:85:BC:4D:89:CA:06:B0:19:E4:68:5D:7B:16:8F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018EBD418AD3F3B3C5DAF1068BB50F8FB001
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Pw4z6_6lhbxNicoGsBnkaF17Fo8.roa
Signing time: Mon 08 Apr 2024 10:29:32 +0000
ROA not before: Mon 08 Apr 2024 10:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58057
IP address blocks: 31.42.183.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
45.136.136.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
85.202.203.0/24 maxlen: 24
94.177.122.0/24 maxlen: 24
109.61.104.0/21 maxlen: 24
139.28.96.0/22 maxlen: 24
185.232.117.0/24 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.85.0/24 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c1:200::/40 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:41:8a:d3:f3:b3:c5:da:f1:06:8b:b5:0f:8f:b0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 8 10:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f0e33ebfea585bc4d89ca06b019e4685d7b168f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2f:6b:d1:21:e4:ec:be:39:25:84:3e:3d:a9:
42:80:69:7a:82:d3:b4:0c:23:4a:41:10:30:19:38:
3a:1d:83:8f:73:34:bc:34:1d:5d:64:8d:e9:b8:ab:
a1:3e:42:23:6a:ba:32:89:de:df:81:8e:db:e7:4c:
d0:05:c0:57:5f:b4:c6:99:e3:d7:3e:f5:01:d0:67:
d3:b0:3a:a8:88:9c:f6:48:6d:51:b5:e3:9a:08:0b:
e3:ad:3e:71:5d:94:a4:4d:76:fc:58:04:de:7b:50:
71:42:95:cf:31:e6:7d:9e:6a:c8:37:bd:64:9d:2e:
9c:3c:bd:e8:8a:f3:ba:53:1e:30:fc:2e:02:70:ed:
1a:5b:cc:50:7c:b3:6c:f1:00:94:f5:44:85:35:05:
34:53:a7:3c:f8:5c:98:01:34:a7:05:b3:49:9f:68:
a3:1b:f5:b0:9b:a6:cf:e9:fb:b7:bd:bc:a0:d7:11:
be:03:4a:70:c4:40:a0:56:c8:40:09:ca:95:a8:3c:
1f:6f:eb:c3:ff:e6:50:14:b9:38:33:19:88:64:22:
67:0f:8f:9c:05:66:ca:53:07:c7:b0:2a:ca:02:cd:
a7:33:1a:13:3e:ed:a5:57:cd:72:e2:b4:b9:c6:a2:
7f:2b:2d:43:17:e8:3c:a7:70:2b:9c:48:82:21:5c:
ac:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0E:33:EB:FE:A5:85:BC:4D:89:CA:06:B0:19:E4:68:5D:7B:16:8F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Pw4z6_6lhbxNicoGsBnkaF17Fo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.136.136.0/22
77.81.50.0/23
85.202.203.0/24
94.177.122.0/24
109.61.104.0/21
139.28.96.0/22
185.232.117.0/24
193.33.94.0/23
193.163.85.0-193.163.86.255
194.50.92.0/24
194.50.94.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0e:b107:2220::/44
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
67:44:5c:db:c2:2c:80:5d:6c:01:15:65:e1:29:ce:22:19:0b:
ef:10:90:7f:e0:10:f7:b2:40:21:0f:1c:f7:70:3f:cc:b0:dd:
c0:6d:ae:33:ac:3e:64:b6:73:48:84:22:35:28:cd:80:db:c3:
4b:d2:a6:91:5e:81:80:76:9a:b6:5b:0b:d6:b6:07:b5:a0:15:
5d:33:f5:15:d8:11:e9:78:96:6f:ae:3b:65:ef:c4:6f:09:de:
3a:d2:22:94:16:3c:5b:44:dc:71:31:57:11:49:47:9a:f1:d9:
37:20:0c:90:08:48:65:02:df:3a:46:98:55:23:f9:41:6f:93:
e3:ae:e8:ed:57:00:6c:fc:08:63:17:12:82:db:b2:24:ac:bc:
81:65:12:a0:64:e3:4c:29:8e:88:27:15:c3:23:2a:37:be:0d:
30:99:ed:5a:15:5c:29:cd:5d:2a:5f:3b:81:cf:27:8e:7d:55:
96:e8:ba:b4:ab:d6:e8:02:44:0c:3d:c7:80:c9:6b:0a:eb:db:
6c:01:39:58:9c:3a:56:e8:28:fd:19:b5:fb:e5:42:e8:93:f2:
e2:f1:ec:c5:2d:8b:52:82:6b:72:03:5c:fd:cd:26:fe:e8:be:
ae:62:5f:db:1d:92:6e:fb:ed:60:55:be:8c:d5:f4:c1:5f:6a:
48:fc:08:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:06 2024 by rpki-client on console-fra.rpki-client.org