Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/1wVY5FO_ckPpzMo07ahvh7dJHls.roa
File: 1wVY5FO_ckPpzMo07ahvh7dJHls.roa (raw, json)
Hash identifier: x66mLl9uFUbKFSi3n7CYIdVhC1LEOMAq880Fj3l2KJg=
Subject key identifier: D7:05:58:E4:53:BF:72:43:E9:CC:CA:34:ED:A8:6F:87:B7:49:1E:5B
Certificate issuer: /CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Certificate serial: 018CCA29F6DE5CFB3F99AF6186B385DA5AD5
Authority key identifier: 34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/1wVY5FO_ckPpzMo07ahvh7dJHls.roa
Signing time: Tue 02 Jan 2024 12:33:16 +0000
ROA not before: Tue 02 Jan 2024 12:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15734
IP address blocks: 217.15.42.0/24 maxlen: 24
217.15.46.0/24 maxlen: 24
88.84.64.0/19 maxlen: 24
88.84.80.0/24 maxlen: 24
88.84.82.0/24 maxlen: 24
88.84.93.0/24 maxlen: 24
88.84.92.0/24 maxlen: 24
185.117.178.0/24 maxlen: 24
185.117.179.0/24 maxlen: 24
185.117.176.0/24 maxlen: 24
217.15.32.0/20 maxlen: 24
217.149.144.0/20 maxlen: 24
95.142.0.0/20 maxlen: 24
95.142.3.0/24 maxlen: 24
217.149.148.0/22 maxlen: 24
95.142.8.0/24 maxlen: 24
95.142.10.0/24 maxlen: 24
217.149.157.0/24 maxlen: 24
217.149.156.0/24 maxlen: 24
95.142.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:f6:de:5c:fb:3f:99:af:61:86:b3:85:da:5a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Validity
Not Before: Jan 2 12:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d70558e453bf7243e9ccca34eda86f87b7491e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:46:ea:75:7d:26:92:4c:16:b9:66:44:43:
32:2f:5c:12:f2:e6:2e:5d:1b:38:34:8f:52:72:da:
bd:89:c4:62:c4:bf:65:e4:b5:e1:56:8a:e4:b9:d8:
74:80:1c:75:89:58:47:2f:80:a0:40:70:0c:49:d0:
ae:b6:f0:5f:91:1c:f2:eb:e0:6d:34:cd:72:c1:88:
b3:d0:90:4c:52:29:39:ec:de:36:35:8f:da:5b:bb:
6b:2c:68:b3:ee:c5:70:ff:d7:b5:3b:97:e6:9b:6f:
98:de:17:76:a3:c9:43:5e:06:f4:8f:c0:66:2d:f8:
85:f0:5f:63:a1:36:ff:a7:eb:03:19:f1:d3:e4:62:
a0:18:26:07:f5:6b:db:71:bd:8b:ee:67:d2:7f:52:
51:ce:64:01:17:80:43:bb:de:00:6b:59:72:75:a0:
e9:9b:e7:b4:6b:e5:d3:24:1a:c9:81:43:82:f2:24:
2b:7d:1b:e6:91:f3:b0:97:cb:02:9e:1d:09:df:b1:
ee:b6:0a:6d:48:c0:b5:1a:37:87:b3:fc:4c:05:f4:
a0:77:70:2f:a5:0e:26:23:51:e2:78:bb:f6:65:58:
85:e3:e8:9c:d3:fe:b9:f8:0e:ef:40:0a:87:ef:49:
86:0a:23:9e:60:4f:e2:ba:b0:65:dd:b1:20:db:69:
fc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:05:58:E4:53:BF:72:43:E9:CC:CA:34:ED:A8:6F:87:B7:49:1E:5B
X509v3 Authority Key Identifier:
keyid:34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/1wVY5FO_ckPpzMo07ahvh7dJHls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.84.64.0/19
95.142.0.0/20
185.117.176.0/24
185.117.178.0/23
217.15.32.0/20
217.149.144.0/20
Signature Algorithm: sha256WithRSAEncryption
9f:82:17:d9:0b:70:1b:5a:8b:b4:b6:3b:81:b3:38:1a:aa:5a:
38:72:40:8e:34:0e:ca:43:67:fa:52:3c:62:6c:23:c5:8f:b5:
45:6c:f2:95:ac:65:1c:88:bf:a8:a8:73:a8:44:6d:1a:42:7d:
97:d7:86:02:12:25:9e:87:24:6b:52:94:92:ed:d2:79:1b:c4:
22:78:43:d8:b5:b6:75:d8:7f:c1:37:5c:67:78:7b:cd:9a:33:
2d:28:e4:b5:11:45:90:ae:85:74:8f:ac:92:69:1e:55:98:1d:
5e:e3:13:ab:9e:56:87:26:2a:a4:8f:f0:74:80:0f:54:55:2f:
4b:dc:bf:97:7e:d8:7d:5b:42:57:bc:17:e1:d0:48:1f:11:b9:
74:7f:2d:68:19:e3:a1:77:20:e0:ab:8e:42:e2:31:57:1a:dc:
2d:cc:71:38:1d:14:6a:c0:0b:b9:8c:00:6b:99:34:33:a4:08:
c6:cb:0d:32:20:fd:24:a1:e1:ea:8f:46:89:77:7e:40:a0:42:
f7:b3:8d:0e:ed:8b:1a:1b:a1:ee:6a:4e:42:97:c3:63:64:4f:
3a:d9:9e:41:e4:ee:1f:4c:d6:4c:d6:6e:27:6f:7e:76:71:71:
1c:1f:55:9a:b0:9b:7f:51:95:97:59:9b:08:ea:0d:ca:9d:21:
99:cf:cb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:11:14 2024 by rpki-client on console-ams.rpki-client.org