Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/W2MqcTW8xek0UjMyjxkdeLyPA_E.roa
File: W2MqcTW8xek0UjMyjxkdeLyPA_E.roa (raw, json)
Hash identifier: zWi5Zp4J7mrDMU4EuUjmgkUct/nkEnsFvDuiRaVf5wA=
Subject key identifier: 5B:63:2A:71:35:BC:C5:E9:34:52:33:32:8F:19:1D:78:BC:8F:03:F1
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 018F108EC63A4D403ACF7796D971C2E6B456
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/W2MqcTW8xek0UjMyjxkdeLyPA_E.roa
Signing time: Wed 24 Apr 2024 14:42:23 +0000
ROA not before: Wed 24 Apr 2024 14:42:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25540
IP address blocks: 45.81.212.0/22 maxlen: 22
77.81.49.0/24 maxlen: 24
83.172.137.0/24 maxlen: 24
83.172.142.0/23 maxlen: 23
83.172.149.0/24 maxlen: 24
83.172.152.0/24 maxlen: 24
83.172.154.0/23 maxlen: 23
83.172.156.0/23 maxlen: 23
83.172.158.0/24 maxlen: 24
83.172.166.0/23 maxlen: 23
83.172.168.0/24 maxlen: 24
83.172.170.0/23 maxlen: 23
83.172.184.0/23 maxlen: 23
83.172.187.0/24 maxlen: 24
83.172.190.0/24 maxlen: 24
83.172.191.0/24 maxlen: 24
89.37.107.0/24 maxlen: 24
93.114.176.0/22 maxlen: 22
94.177.28.0/24 maxlen: 24
94.177.144.0/24 maxlen: 24
130.93.0.0/17 maxlen: 17
130.93.128.0/18 maxlen: 22
185.9.248.0/22 maxlen: 22
185.12.0.0/22 maxlen: 22
185.120.176.0/22 maxlen: 22
185.122.160.0/22 maxlen: 22
185.133.128.0/22 maxlen: 22
185.137.72.0/22 maxlen: 22
185.153.172.0/22 maxlen: 22
193.84.89.0/24 maxlen: 24
195.68.224.0/22 maxlen: 22
2a02:ec00::/29 maxlen: 29
2a0e:4180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:10:8e:c6:3a:4d:40:3a:cf:77:96:d9:71:c2:e6:b4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Apr 24 14:42:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b632a7135bcc5e9345233328f191d78bc8f03f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:27:2d:88:cd:cb:6f:38:88:63:6d:a8:a1:da:
3c:a9:60:27:66:01:d6:8b:85:9a:10:63:95:b4:3e:
06:c5:31:ac:f9:f2:15:cd:a1:ab:7f:98:dd:5a:37:
65:39:a6:33:f1:20:a8:37:ba:ff:98:31:95:9f:37:
98:21:4e:8c:c6:81:80:9d:8d:ae:6e:2d:c8:8e:2d:
c5:68:db:f7:0b:9a:94:2c:61:4f:12:56:0a:cf:a7:
57:5f:32:bb:7b:f8:e2:9d:77:8f:e9:46:8b:2a:4c:
d5:62:93:a6:55:b0:28:a9:6d:70:19:ee:6f:71:3b:
60:93:39:dd:ca:cf:9c:c8:c7:45:6a:0f:5a:a2:3b:
ba:a1:93:44:01:a1:58:3c:22:81:40:3c:92:4f:9e:
9a:df:95:80:05:1f:69:16:a5:04:7e:5a:2d:52:59:
95:e9:c4:af:94:4c:d1:8c:fb:44:3a:01:75:44:d7:
28:ac:fe:aa:2f:b0:63:30:72:99:cb:2d:1b:50:cd:
e4:56:53:c7:71:c3:ec:ed:f9:45:82:e3:d7:fb:1f:
aa:e0:81:b0:c3:4b:64:e8:da:e3:f3:e0:70:4f:4f:
5a:82:f6:80:76:7f:d3:e9:71:e9:9b:cb:32:5e:f1:
74:02:0e:c8:7c:a6:1d:d2:98:99:f0:7d:72:e0:cf:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:63:2A:71:35:BC:C5:E9:34:52:33:32:8F:19:1D:78:BC:8F:03:F1
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/W2MqcTW8xek0UjMyjxkdeLyPA_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.212.0/22
77.81.49.0/24
83.172.137.0/24
83.172.142.0/23
83.172.149.0/24
83.172.152.0/24
83.172.154.0-83.172.158.255
83.172.166.0-83.172.168.255
83.172.170.0/23
83.172.184.0/23
83.172.187.0/24
83.172.190.0/23
89.37.107.0/24
93.114.176.0/22
94.177.28.0/24
94.177.144.0/24
130.93.0.0-130.93.191.255
185.9.248.0/22
185.12.0.0/22
185.120.176.0/22
185.122.160.0/22
185.133.128.0/22
185.137.72.0/22
185.153.172.0/22
193.84.89.0/24
195.68.224.0/22
IPv6:
2a02:ec00::/29
2a0e:4180::/29
Signature Algorithm: sha256WithRSAEncryption
b2:5b:1a:ee:bc:9a:56:b6:18:4b:94:24:7f:37:2c:0d:cc:66:
e3:2c:3a:88:b4:71:02:5b:85:78:25:ae:45:df:cb:fd:56:00:
34:00:88:30:75:7e:ab:f2:af:35:eb:c0:46:65:92:14:b7:4e:
6d:e7:e7:2e:e9:3b:82:2f:7e:6e:10:8b:4d:65:c0:6f:4d:8f:
7b:ea:49:86:b6:20:a1:75:a2:fc:4d:57:26:58:ea:ee:64:4e:
c0:8c:31:32:02:2a:7e:73:db:60:d5:20:46:9c:c5:c1:82:16:
1a:eb:1c:7d:ae:a1:e5:28:c5:48:53:74:88:46:69:c3:b6:67:
da:99:b8:6f:37:09:e8:7d:e2:95:59:7f:db:55:5d:e8:38:14:
2c:2d:22:56:ff:99:68:94:6d:2d:8e:46:02:e6:4c:bd:54:58:
5e:35:76:b2:8a:d4:f9:b4:b4:b5:10:8a:b7:2f:9c:0c:64:5e:
6b:59:32:28:26:e5:dc:b2:23:4d:29:cb:c6:dd:4b:12:3b:29:
0e:f5:34:b0:ca:2c:b5:6a:07:40:c6:6b:23:26:f1:bb:3c:87:
5a:fc:be:aa:3f:ee:dd:90:c8:e9:bb:f4:29:db:ff:ee:9b:8f:
a0:81:71:cb:b7:0e:70:5e:c5:8b:6e:2e:d2:fa:95:7f:6d:b3:
2e:de:21:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:01:11 2024 by rpki-client on console-fra.rpki-client.org