Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/V1TVOt163pSN1ppBJXK2aWp6ktA.roa
File: V1TVOt163pSN1ppBJXK2aWp6ktA.roa (raw, json)
Hash identifier: T9IC5BgYI6zFI8Rm/CwxozNSt/p8CvmE4r4/sRBO3gs=
Subject key identifier: 57:54:D5:3A:DD:7A:DE:94:8D:D6:9A:41:25:72:B6:69:6A:7A:92:D0
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 018CC500E10905661203272765C19C20345D
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/V1TVOt163pSN1ppBJXK2aWp6ktA.roa
Signing time: Mon 01 Jan 2024 12:30:18 +0000
ROA not before: Mon 01 Jan 2024 12:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41079
IP address blocks: 185.204.216.0/22 maxlen: 24
195.114.0.0/23 maxlen: 24
193.17.184.0/24 maxlen: 24
178.250.40.0/21 maxlen: 24
185.201.112.0/22 maxlen: 24
185.208.164.0/24 maxlen: 24
194.169.227.0/24 maxlen: 24
195.242.116.0/23 maxlen: 24
193.218.152.0/22 maxlen: 24
195.2.254.0/23 maxlen: 24
91.228.196.0/22 maxlen: 24
91.237.52.0/24 maxlen: 24
185.193.112.0/22 maxlen: 24
185.25.148.0/22 maxlen: 24
185.5.96.0/22 maxlen: 24
91.199.22.0/24 maxlen: 24
91.239.66.0/23 maxlen: 24
185.123.160.0/22 maxlen: 24
185.243.52.0/22 maxlen: 24
195.78.66.0/23 maxlen: 24
91.234.146.0/24 maxlen: 24
185.180.204.0/22 maxlen: 24
2a02:1778::/32 maxlen: 32
2a02:1778::/48 maxlen: 64
2a02:1778:194::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e1:09:05:66:12:03:27:27:65:c1:9c:20:34:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jan 1 12:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5754d53add7ade948dd69a412572b6696a7a92d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:13:c7:be:97:96:ad:57:30:47:85:0f:10:0b:
68:ec:8a:09:f7:b5:81:47:02:f9:f9:29:9c:4c:9a:
49:17:8d:97:e5:84:c3:ad:cd:e5:ff:da:cb:47:64:
4b:dc:ee:ca:28:c5:da:5d:77:80:5c:ab:b0:2a:bc:
cf:14:de:d1:5b:d5:9b:28:79:78:cc:5f:13:c2:fe:
19:fc:fb:7f:a9:a3:0a:ab:86:f3:20:20:cb:72:8a:
12:e0:b0:44:54:4c:03:a0:96:ad:94:21:f3:52:8c:
ee:42:65:ed:f6:86:6a:28:b0:a1:0f:00:36:5f:0f:
16:fe:65:1f:23:e6:65:dc:19:95:a5:25:09:ef:69:
34:f8:47:6f:63:65:dc:ea:04:7a:a8:29:7d:1d:4b:
f2:fb:ea:be:ff:86:a3:d9:52:06:ef:da:1f:01:93:
51:e3:59:00:f4:2b:f4:af:37:c7:2f:42:a4:d8:bd:
84:64:ce:b8:cc:e2:1e:d6:22:41:66:51:d0:4f:6e:
e8:07:03:97:e3:5a:45:0f:71:c6:0e:ce:1c:0f:e0:
aa:12:e5:e4:2a:34:3a:4a:ca:74:cc:0e:e3:50:6e:
e8:14:44:ce:e5:2a:23:70:a7:4f:16:27:7f:9d:5b:
6d:c6:fe:ae:39:c8:94:a6:75:6d:8c:f5:77:14:c8:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:54:D5:3A:DD:7A:DE:94:8D:D6:9A:41:25:72:B6:69:6A:7A:92:D0
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/V1TVOt163pSN1ppBJXK2aWp6ktA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.22.0/24
91.228.196.0/22
91.234.146.0/24
91.237.52.0/24
91.239.66.0/23
178.250.40.0/21
185.5.96.0/22
185.25.148.0/22
185.123.160.0/22
185.180.204.0/22
185.193.112.0/22
185.201.112.0/22
185.204.216.0/22
185.208.164.0/24
185.243.52.0/22
193.17.184.0/24
193.218.152.0/22
194.169.227.0/24
195.2.254.0/23
195.78.66.0/23
195.114.0.0/23
195.242.116.0/23
IPv6:
2a02:1778::/32
Signature Algorithm: sha256WithRSAEncryption
1b:d1:d0:de:08:21:72:fe:fb:4b:26:47:2e:c5:59:35:36:3b:
73:e0:87:68:1a:50:8b:13:5e:73:22:91:6b:6e:ee:af:44:ed:
53:3a:e8:da:8c:4e:6a:50:dc:43:6e:dc:db:08:30:9b:88:77:
33:42:86:10:f9:a1:22:09:1b:04:56:70:09:5b:4a:2c:4d:4d:
e5:35:33:c4:b7:e3:f6:8c:7d:9c:8a:09:50:cd:39:f6:2f:f8:
e9:5a:e3:34:ef:c8:86:12:a9:a9:5b:cc:9c:9c:d2:1c:f6:5d:
1c:c4:5b:2e:de:31:5b:4c:2a:1f:8d:95:5f:ba:c0:b0:c6:a2:
b0:73:0c:f7:8e:42:d9:dc:18:a0:14:67:5f:a8:92:37:58:fd:
69:46:68:75:2b:6e:0d:a4:db:71:4b:61:e3:4c:17:f6:7f:c4:
9a:09:ce:b7:44:31:e0:bf:c0:7e:04:3c:e5:2d:aa:a9:26:df:
cf:06:53:0a:4f:58:1d:c2:24:2a:00:8f:3e:57:cb:a1:ce:c4:
25:ba:a6:1d:9c:4b:2c:0e:28:c4:3f:68:16:8d:d5:09:a8:4c:
9e:68:2c:6a:71:c2:8d:ea:07:7d:43:25:8e:99:ec:fd:a6:c1:
fc:2d:0c:a2:d4:ee:42:49:f2:4a:f8:c5:fa:ef:58:ff:e5:05:
77:f5:ee:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:45:58 2024 by rpki-client on console-fra.rpki-client.org