Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/Lh37iGLpW1DKs0bC0nsT1rvisSQ.roa
File: Lh37iGLpW1DKs0bC0nsT1rvisSQ.roa (raw, json)
Hash identifier: I/Iplq1qcz+yjoVGa2ad8NM2Sc96iHQO7SYLslDVXTw=
Subject key identifier: 2E:1D:FB:88:62:E9:5B:50:CA:B3:46:C2:D2:7B:13:D6:BB:E2:B1:24
Certificate issuer: /CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Certificate serial: 018F70DD863338A356E20FC1DA715CD7EFD9
Authority key identifier: C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/Lh37iGLpW1DKs0bC0nsT1rvisSQ.roa
Signing time: Mon 13 May 2024 07:31:56 +0000
ROA not before: Mon 13 May 2024 07:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58322
IP address blocks: 91.106.32.0/22 maxlen: 22
91.106.32.0/23 maxlen: 23
91.106.32.0/24 maxlen: 24
91.106.33.0/24 maxlen: 24
91.106.34.0/23 maxlen: 23
91.106.34.0/24 maxlen: 24
91.106.35.0/24 maxlen: 24
91.106.40.0/21 maxlen: 21
91.106.40.0/22 maxlen: 22
91.106.40.0/23 maxlen: 23
91.106.40.0/24 maxlen: 24
91.106.41.0/24 maxlen: 24
91.106.42.0/23 maxlen: 23
91.106.42.0/24 maxlen: 24
91.106.43.0/24 maxlen: 24
91.106.44.0/22 maxlen: 22
91.106.44.0/23 maxlen: 23
91.106.44.0/24 maxlen: 24
91.106.45.0/24 maxlen: 24
91.106.46.0/23 maxlen: 23
91.106.46.0/24 maxlen: 24
91.106.47.0/24 maxlen: 24
91.106.48.0/24 maxlen: 24
91.106.50.0/24 maxlen: 24
91.106.51.0/24 maxlen: 24
109.61.4.0/22 maxlen: 22
109.61.4.0/23 maxlen: 23
109.61.4.0/24 maxlen: 24
109.61.5.0/24 maxlen: 24
109.61.6.0/23 maxlen: 23
109.61.6.0/24 maxlen: 24
109.61.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft
rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:70:dd:86:33:38:a3:56:e2:0f:c1:da:71:5c:d7:ef:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Validity
Not Before: May 13 07:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e1dfb8862e95b50cab346c2d27b13d6bbe2b124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:60:0e:84:cf:33:0a:0d:64:d6:f1:4f:65:
04:a5:13:5d:c5:b4:42:eb:a4:2c:5e:90:7b:e7:cc:
1c:9e:fd:3b:e9:ec:8a:0a:5c:58:cf:4f:8f:f4:dd:
d3:09:29:4b:c2:71:05:04:33:85:a3:73:04:cc:c6:
e8:c9:74:33:c8:ec:41:71:a0:f5:d8:41:4c:2d:ad:
87:d5:26:8f:d7:e2:b0:b8:74:f2:da:4d:e1:b1:7b:
ed:cd:4c:4b:32:ef:aa:22:56:05:a0:5a:08:87:f0:
94:e2:d6:1f:d0:30:46:75:4d:72:4e:d4:98:ab:fb:
ed:ba:78:8e:f4:ca:fb:d2:ea:7c:59:3c:0d:fa:c5:
9e:62:6e:11:1d:b8:b3:10:88:dd:3a:5c:b2:e6:63:
d7:9f:04:39:c7:4f:19:e8:63:7c:bf:18:57:dc:13:
02:b2:f3:b1:d7:6a:50:aa:a3:d9:44:c9:40:bd:05:
50:23:41:c8:0f:97:63:4c:85:4a:b0:83:24:fd:33:
0f:d9:6a:74:8e:62:2e:34:6a:88:01:d3:c4:fd:a2:
36:84:f4:3c:a4:6e:2e:07:41:d4:0d:4b:f8:0c:05:
88:6b:40:7a:27:21:d2:3f:40:42:69:c5:81:67:b4:
f1:c6:57:f4:aa:2e:9a:5c:e5:f3:2e:f7:e9:e0:c0:
ef:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1D:FB:88:62:E9:5B:50:CA:B3:46:C2:D2:7B:13:D6:BB:E2:B1:24
X509v3 Authority Key Identifier:
keyid:C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/Lh37iGLpW1DKs0bC0nsT1rvisSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.32.0/22
91.106.40.0-91.106.48.255
91.106.50.0/23
109.61.4.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:b2:91:ee:87:fc:4b:61:34:6e:00:9e:6c:4e:25:27:4e:16:
a5:cc:bb:e1:4b:68:58:d3:6b:a8:c1:ea:fa:29:8b:8b:dd:35:
32:61:c6:f7:c0:1b:54:d3:44:b3:3d:93:97:d9:67:0f:ce:49:
6e:30:70:65:ce:22:64:6f:52:ae:90:90:0d:e3:62:55:f7:a2:
e3:7a:92:8a:bb:c8:b1:f0:98:ad:ab:28:ce:30:c4:4c:fe:12:
3c:a7:04:4b:24:09:76:67:ae:07:16:4e:7d:e9:75:fc:bc:6d:
b0:10:a8:5f:05:13:6f:2d:90:2c:1a:ab:1d:9d:6f:8a:7e:1e:
9d:32:4f:83:7d:51:aa:0a:ae:75:2b:d5:ac:aa:40:2e:8d:a6:
8d:88:aa:2a:14:37:a1:e8:f1:63:03:66:80:f7:e3:c3:0f:a8:
98:51:3a:01:17:d1:df:77:a2:91:ca:d2:9b:0b:63:55:01:c3:
06:29:59:f4:a6:ed:b1:10:19:78:e4:43:e2:9f:4a:00:cf:04:
91:3d:e7:72:a2:d7:1a:59:18:81:06:88:74:cf:7e:d5:59:77:
f0:8c:77:40:00:0b:ca:a9:06:f4:f1:f9:fd:99:2f:42:27:75:
fe:59:b5:e8:e5:6a:26:c7:f5:70:9f:4e:34:c4:08:9d:15:96:
e5:a7:5b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:47:28 2024 by rpki-client on console-fra.rpki-client.org