Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/W1HRPB1uELCeNkGDqCkuri2Pnm4.roa
File: W1HRPB1uELCeNkGDqCkuri2Pnm4.roa (raw, json)
Hash identifier: JfsZIRMD/IdrMdPY804db98/3S7EruHYeDhjjiHotpE=
Subject key identifier: 5B:51:D1:3C:1D:6E:10:B0:9E:36:41:83:A8:29:2E:AE:2D:8F:9E:6E
Certificate issuer: /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial: 018FE282B46899A4C1386E294F53D67D36F4
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/W1HRPB1uELCeNkGDqCkuri2Pnm4.roa
Signing time: Tue 04 Jun 2024 09:09:27 +0000
ROA not before: Tue 04 Jun 2024 09:09:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43391
IP address blocks: 77.223.128.0/19 maxlen: 24
77.223.132.0/24 maxlen: 24
77.223.135.0/24 maxlen: 24
77.223.136.0/24 maxlen: 24
77.223.143.0/24 maxlen: 24
77.223.148.0/24 maxlen: 24
77.223.149.0/24 maxlen: 24
77.223.152.0/24 maxlen: 24
77.223.153.0/24 maxlen: 24
77.223.154.0/24 maxlen: 24
77.223.156.0/24 maxlen: 24
77.223.158.0/24 maxlen: 24
78.40.224.0/21 maxlen: 21
78.40.224.0/24 maxlen: 24
78.40.228.0/24 maxlen: 24
78.40.230.0/24 maxlen: 24
91.191.160.0/20 maxlen: 24
91.191.168.0/21 maxlen: 21
91.191.170.0/24 maxlen: 24
91.191.171.0/24 maxlen: 24
93.187.200.0/21 maxlen: 21
93.187.204.0/24 maxlen: 24
93.187.205.0/24 maxlen: 24
93.187.206.0/24 maxlen: 24
93.187.207.0/24 maxlen: 24
185.80.72.0/24 maxlen: 24
195.244.32.0/19 maxlen: 24
195.244.33.0/24 maxlen: 24
195.244.43.0/24 maxlen: 24
195.244.59.0/24 maxlen: 24
2a01:aac0::/32 maxlen: 32
2a0a:be80::/29 maxlen: 29
2a0a:be80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e2:82:b4:68:99:a4:c1:38:6e:29:4f:53:d6:7d:36:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Validity
Not Before: Jun 4 09:09:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b51d13c1d6e10b09e364183a8292eae2d8f9e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:83:05:57:17:88:1a:8d:69:96:b4:ff:99:
82:32:f5:e2:73:35:19:42:d2:cc:7b:71:68:e5:2d:
77:11:a8:59:b6:70:72:67:b7:12:90:75:bd:d0:2d:
c0:b1:cd:d3:8e:97:ac:2c:ef:d6:81:17:78:76:c6:
f9:bc:a9:5c:7f:d2:22:34:bd:9a:eb:bd:0d:85:06:
9e:ac:a2:c5:14:3a:3d:81:b7:cf:1c:9e:46:b1:6e:
13:76:39:6a:92:ae:e1:87:ab:83:93:24:93:5f:b6:
b6:3e:09:59:ac:5c:67:51:49:f0:85:36:2f:01:96:
08:05:a1:bd:c1:f9:36:d0:1a:f5:c6:fa:b4:0e:90:
f7:a9:fa:9d:a9:a2:26:93:9d:72:9b:85:e0:b8:8f:
2e:0c:d3:a3:27:6a:5d:57:63:1a:cf:4d:cc:58:c4:
aa:f2:3b:39:1a:22:d5:4e:c4:db:52:9c:33:f8:6a:
e7:e7:3e:e9:31:74:84:a4:d5:25:a8:3d:31:db:83:
2c:29:6b:39:ef:24:af:7a:d5:65:08:07:05:9c:fa:
72:ee:46:2f:7a:94:a6:b9:44:a8:e5:bf:80:76:60:
a0:e2:05:c3:ab:bd:61:ef:e8:fb:fb:ef:43:9a:d8:
a1:52:91:16:99:c4:33:5a:b1:73:df:39:dd:be:aa:
02:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:51:D1:3C:1D:6E:10:B0:9E:36:41:83:A8:29:2E:AE:2D:8F:9E:6E
X509v3 Authority Key Identifier:
keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/W1HRPB1uELCeNkGDqCkuri2Pnm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.128.0/19
78.40.224.0/21
91.191.160.0/20
93.187.200.0/21
185.80.72.0/24
195.244.32.0/19
IPv6:
2a01:aac0::/32
2a0a:be80::/29
Signature Algorithm: sha256WithRSAEncryption
30:ae:e2:9c:13:2f:b3:67:16:a2:9f:b9:de:cd:f0:aa:6c:34:
40:81:15:a3:2a:63:cd:a4:42:b3:d6:b3:e9:1b:14:ee:f7:ed:
f5:b4:a8:44:72:06:c7:16:00:fe:9f:4f:2b:64:76:76:ca:d5:
7f:22:d7:f8:b7:bc:e1:fd:50:1e:1e:e9:a8:33:5f:ec:7c:a6:
83:f0:6d:e5:36:e6:3d:7d:04:98:70:53:16:14:bf:95:e6:48:
83:8f:5b:82:0b:9e:b0:22:0c:ab:60:f8:fa:74:75:5f:e9:c5:
32:4d:9f:9a:a7:62:89:45:d9:a3:9b:12:7b:8b:e0:3f:11:ce:
8a:7f:f7:a7:fd:95:b9:6d:8a:45:6d:0d:2f:0f:85:f6:a1:43:
3a:05:83:14:98:ba:d9:d2:44:63:ea:41:a4:31:41:92:cf:b6:
39:6c:9e:c5:85:2d:da:a2:5f:60:9b:f0:d1:d9:3c:5b:7b:da:
ea:4f:1a:ce:66:11:ed:d6:52:96:61:03:8b:fb:88:c4:85:ed:
db:6f:11:c4:a5:f7:64:cd:ea:a4:b6:cd:c2:d4:74:a6:b6:d7:
0d:13:b6:8a:bb:ad:72:b0:c2:32:2d:40:b6:04:99:d2:29:57:
c3:4e:ff:e9:de:86:e5:d7:a0:12:3d:fe:2a:d9:89:5b:8c:b5:
f5:00:da:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:14:29 2024 by rpki-client on console-ams.rpki-client.org