Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/gYWRW67XbhEYEAtBzXVGyMJ2iV8.roa
File: gYWRW67XbhEYEAtBzXVGyMJ2iV8.roa (raw, json)
Hash identifier: xn5Qu6TrHpydk557pLufqdlLEgVHlgWw7N1ZzCJhZE0=
Subject key identifier: 81:85:91:5B:AE:D7:6E:11:18:10:0B:41:CD:75:46:C8:C2:76:89:5F
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 018CC26D32143D272A594E8165FB7F77874F
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/gYWRW67XbhEYEAtBzXVGyMJ2iV8.roa
Signing time: Mon 01 Jan 2024 00:29:45 +0000
ROA not before: Mon 01 Jan 2024 00:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18530
IP address blocks: 203.17.237.0/24 maxlen: 24
46.243.160.0/24 maxlen: 24
203.78.163.0/24 maxlen: 24
203.78.164.0/24 maxlen: 24
203.78.161.0/24 maxlen: 24
203.78.166.0/23 maxlen: 23
94.156.43.0/24 maxlen: 24
94.156.40.0/23 maxlen: 23
37.61.225.0/24 maxlen: 24
192.175.2.0/24 maxlen: 24
94.156.132.0/23 maxlen: 23
37.60.142.0/24 maxlen: 24
94.156.145.0/24 maxlen: 24
37.61.230.0/24 maxlen: 24
94.156.62.0/23 maxlen: 23
87.120.247.0/24 maxlen: 24
158.120.252.0/23 maxlen: 23
188.212.110.0/24 maxlen: 24
94.156.224.0/23 maxlen: 23
203.25.139.0/24 maxlen: 24
31.13.214.0/24 maxlen: 24
87.121.102.0/24 maxlen: 24
93.123.25.0/24 maxlen: 24
87.120.58.0/24 maxlen: 24
87.120.62.0/24 maxlen: 24
93.123.111.0/24 maxlen: 24
198.160.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 14:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:32:14:3d:27:2a:59:4e:81:65:fb:7f:77:87:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Jan 1 00:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8185915baed76e1118100b41cd7546c8c276895f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:64:9d:e3:32:5f:ba:0c:09:d5:c5:05:d2:a9:
3a:fa:d2:18:e0:58:e7:ea:65:51:b3:bc:3d:63:00:
e8:d4:20:5b:32:f2:d5:66:f1:4e:13:ec:c9:c0:2f:
68:1b:b5:ef:7f:05:59:fa:92:cc:d0:b1:f1:8f:65:
4f:3f:af:7d:39:de:c9:ca:2c:bf:48:f7:93:3a:f5:
d5:38:85:12:d0:b7:65:19:21:1c:7d:af:03:7a:fa:
26:8b:29:cd:e6:65:0f:45:43:c6:ab:16:ec:0b:e0:
01:22:41:b3:c7:49:ad:61:cf:38:45:90:98:74:29:
52:55:1e:06:aa:89:b7:c2:42:6f:77:cd:cc:b0:41:
71:c7:3d:e6:c3:bc:0f:45:7b:4d:4a:8c:85:5f:25:
58:8b:4b:fc:44:32:d0:ce:76:59:f1:73:2a:43:5e:
73:85:bb:74:14:a5:69:b1:54:61:f9:fb:e0:a2:4e:
fe:7c:76:06:8d:37:cc:cb:f8:b8:37:0f:06:dd:16:
a1:1d:83:8e:43:74:c7:9d:b9:56:f7:60:1e:90:8a:
17:8c:a6:37:82:e9:b1:bb:ba:3a:4e:fe:40:36:aa:
76:67:1e:06:51:d5:33:9f:9d:f8:b5:ad:e8:77:62:
59:48:fb:f5:8e:3f:de:18:1f:06:15:20:cc:8c:d6:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:85:91:5B:AE:D7:6E:11:18:10:0B:41:CD:75:46:C8:C2:76:89:5F
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/gYWRW67XbhEYEAtBzXVGyMJ2iV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.214.0/24
37.60.142.0/24
37.61.225.0/24
37.61.230.0/24
46.243.160.0/24
87.120.58.0/24
87.120.62.0/24
87.120.247.0/24
87.121.102.0/24
93.123.25.0/24
93.123.111.0/24
94.156.40.0/23
94.156.43.0/24
94.156.62.0/23
94.156.132.0/23
94.156.145.0/24
94.156.224.0/23
158.120.252.0/23
188.212.110.0/24
192.175.2.0/24
198.160.152.0/24
203.17.237.0/24
203.25.139.0/24
203.78.161.0/24
203.78.163.0-203.78.164.255
203.78.166.0/23
Signature Algorithm: sha256WithRSAEncryption
26:83:2a:39:28:57:1d:c3:62:af:fa:ca:04:78:c8:30:57:dc:
3d:8b:b0:d3:97:51:8a:4f:87:8c:b2:5f:4b:48:58:32:59:39:
43:b1:7d:71:1c:25:21:37:24:c0:43:46:a2:54:18:b3:1b:e5:
a5:4d:78:8c:35:75:9e:16:e9:03:2d:b6:de:3b:63:20:5c:a0:
9f:03:90:b0:d3:80:89:5e:ae:46:d9:1e:05:4c:41:b2:85:d1:
f9:11:0a:47:d1:c3:fe:a4:04:43:fc:4d:24:92:80:2a:79:37:
b6:98:fa:17:0d:87:19:a6:76:83:ca:e5:8f:76:16:1f:e2:85:
06:ea:5e:2f:85:3e:b7:06:56:88:f0:77:84:62:da:ab:35:46:
6c:7f:cb:27:89:d4:1a:0a:bc:be:7e:4d:7e:ec:e0:31:f1:08:
98:33:53:b3:d9:29:02:0d:44:84:b9:2e:3a:0b:d1:c3:b5:22:
76:a8:2d:43:9a:8a:fc:d3:60:db:73:0b:dd:0e:80:d0:cd:c4:
37:99:9c:ed:7f:a7:39:3f:63:17:2e:b2:f9:06:41:13:1a:88:
1a:ec:4d:2d:16:b9:96:c7:d9:73:e8:40:5d:56:e2:a6:0b:0e:
47:54:8d:02:37:fe:e7:d4:b0:26:df:b9:0b:89:4e:d6:66:bd:
fe:ac:64:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 21:43:19 2024 by rpki-client on console-fra.rpki-client.org