Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/1sPQe-KZya98qO_HifW0tMMjQhk.roa
File: 1sPQe-KZya98qO_HifW0tMMjQhk.roa (raw, json)
Hash identifier: mw86P19VMqiaEODM6+ORKWgMnPrn9pza5/4jXqilhUI=
Subject key identifier: D6:C3:D0:7B:E2:99:C9:AF:7C:A8:EF:C7:89:F5:B4:B4:C3:23:42:19
Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial: 019011F6F1134C94D00FCD2BCEC4BD50A622
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/1sPQe-KZya98qO_HifW0tMMjQhk.roa
Signing time: Thu 13 Jun 2024 14:18:34 +0000
ROA not before: Thu 13 Jun 2024 14:18:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 5.79.64.0/18 maxlen: 18
37.48.64.0/18 maxlen: 18
62.212.64.0/19 maxlen: 19
81.17.47.0/24 maxlen: 24
81.17.49.0/24 maxlen: 24
81.17.50.0/24 maxlen: 24
81.17.51.0/24 maxlen: 24
81.17.52.0/24 maxlen: 24
81.17.53.0/24 maxlen: 24
81.17.54.0/24 maxlen: 24
81.17.55.0/24 maxlen: 24
81.171.0.0/19 maxlen: 19
82.192.64.0/19 maxlen: 19
83.149.64.0/18 maxlen: 18
85.17.0.0/16 maxlen: 16
89.149.192.0/18 maxlen: 18
89.149.192.0/20 maxlen: 20
94.75.192.0/18 maxlen: 18
95.168.160.0/20 maxlen: 20
95.211.0.0/16 maxlen: 16
95.211.85.0/24 maxlen: 24
173.234.68.0/22 maxlen: 22
178.162.128.0/18 maxlen: 18
178.162.162.0/23 maxlen: 23
178.162.164.0/22 maxlen: 22
178.162.168.0/22 maxlen: 22
178.162.176.0/20 maxlen: 20
185.17.184.0/22 maxlen: 22
212.7.192.0/20 maxlen: 20
212.7.208.0/22 maxlen: 22
212.32.224.0/19 maxlen: 19
213.227.128.0/19 maxlen: 19
2001:1af8::/32 maxlen: 32
2001:1af8:8000::/36 maxlen: 36
2001:1af8:8000::/40 maxlen: 40
2001:1af8:8100::/44 maxlen: 44
2001:1af8:8110::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:11:f6:f1:13:4c:94:d0:0f:cd:2b:ce:c4:bd:50:a6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Validity
Not Before: Jun 13 14:18:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6c3d07be299c9af7ca8efc789f5b4b4c3234219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:16:a6:7d:52:0e:ef:8d:a7:43:ff:9b:a6:21:
0a:ec:b7:5d:15:2d:f5:38:31:2a:ff:a8:46:80:d0:
e1:a9:fb:cc:21:96:13:4e:63:6d:d6:0f:4a:cb:30:
04:fb:63:32:5d:a6:fc:c8:4c:23:3e:7b:ac:d5:b8:
bc:89:1b:1e:c5:bb:34:ff:08:1c:9f:a1:b0:46:60:
0c:cc:12:23:26:01:73:6c:25:b4:df:4c:d0:86:f9:
1b:fd:68:da:8b:4d:80:d2:84:38:df:ef:a0:93:e8:
22:31:7a:72:b6:b5:5f:30:2e:6e:5a:a3:4d:d1:0a:
a4:91:59:cb:7e:25:5f:d2:82:1b:66:ed:1c:01:ab:
06:cd:bc:6a:52:3f:53:98:fa:12:37:1b:5d:66:e5:
01:bd:67:42:ac:d9:dd:78:94:c1:74:2c:5e:65:48:
9f:d2:2c:a5:c5:cf:c2:11:2d:c2:84:8f:ae:2c:c9:
b4:9d:f0:f1:fc:79:74:98:49:e6:56:a5:3c:54:78:
09:4d:03:ea:e0:7a:3a:86:f6:b1:fc:ae:22:24:20:
b4:12:7e:7f:f3:68:13:fa:45:96:63:76:d3:66:e1:
94:20:95:fa:7d:38:3f:68:51:05:dc:4a:f8:28:0f:
b1:fa:f6:e1:0a:ff:25:1f:89:8d:9c:c7:e6:a8:ec:
ac:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C3:D0:7B:E2:99:C9:AF:7C:A8:EF:C7:89:F5:B4:B4:C3:23:42:19
X509v3 Authority Key Identifier:
keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/1sPQe-KZya98qO_HifW0tMMjQhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.79.64.0/18
37.48.64.0/18
62.212.64.0/19
81.17.47.0/24
81.17.49.0-81.17.55.255
81.171.0.0/19
82.192.64.0/19
83.149.64.0/18
85.17.0.0/16
89.149.192.0/18
94.75.192.0/18
95.168.160.0/20
95.211.0.0/16
173.234.68.0/22
178.162.128.0/18
185.17.184.0/22
212.7.192.0-212.7.211.255
212.32.224.0/19
213.227.128.0/19
IPv6:
2001:1af8::/32
Signature Algorithm: sha256WithRSAEncryption
ad:7a:af:88:8d:af:c6:00:3f:de:ce:87:c4:11:28:9c:aa:51:
d9:66:f4:15:f3:96:b4:8a:de:a3:0d:8a:e9:f4:56:6f:13:3d:
27:a1:1a:bd:23:8f:2f:2b:91:7c:04:1b:d8:f2:88:f3:5d:49:
4a:39:6e:cc:41:8f:6c:b9:fb:32:1f:e4:3d:20:60:4b:5a:09:
5e:68:14:ac:14:d9:f3:97:cc:53:62:43:b1:35:ab:97:3d:b7:
bb:bc:b0:2d:99:b5:5c:e8:55:2c:79:b4:e1:be:0b:3c:03:cf:
c1:52:b6:9b:90:d7:0a:1c:ac:a1:86:02:fd:6c:67:4b:3d:b1:
e0:03:45:0e:08:e2:87:82:b5:be:9d:8c:1f:87:9a:61:6a:4b:
71:36:f7:fc:fa:57:46:fb:77:03:2f:df:dc:4c:e0:cf:a7:a7:
03:f8:08:76:ea:97:7b:9d:b8:64:2a:39:86:9e:16:3c:9a:d9:
60:b1:8b:5f:96:f7:5e:9e:77:b7:a6:ab:4e:96:63:20:48:03:
b6:54:84:a3:37:98:e0:ee:ae:51:9d:b4:f4:f3:69:dd:ca:5a:
40:34:fb:c1:ff:b5:6a:49:5d:06:8d:88:fb:bd:5c:58:5a:a4:
a1:dd:e8:cf:a0:9c:b6:84:d3:15:18:03:78:07:c2:ac:1a:30:
5b:1c:28:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:46:10 2024 by rpki-client on console-fra.rpki-client.org