Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/zz25WeEBR8WSGY5jY6DGTst76oc.roa
File: zz25WeEBR8WSGY5jY6DGTst76oc.roa (raw, json)
Hash identifier: o/ZKOkHP3tVMja0cqCsv4fZlcHKG6qrtMRt4de8jaGc=
Subject key identifier: CF:3D:B9:59:E1:01:47:C5:92:19:8E:63:63:A0:C6:4E:CB:7B:EA:87
Certificate issuer: /CN=05bfdbb6a4b1663369da407db97b021f73284a28
Certificate serial: 01921F2F7558C2F92DBEE1A19578CEC1B1A7
Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/zz25WeEBR8WSGY5jY6DGTst76oc.roa
Signing time: Mon 23 Sep 2024 14:00:56 +0000
ROA not before: Mon 23 Sep 2024 14:00:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 5.101.136.0/21 maxlen: 21
5.101.144.0/21 maxlen: 21
5.101.168.0/21 maxlen: 21
31.132.0.0/21 maxlen: 21
37.9.56.0/21 maxlen: 21
77.74.192.0/21 maxlen: 21
77.75.120.0/21 maxlen: 21
78.110.160.0/21 maxlen: 21
78.110.168.0/23 maxlen: 23
78.110.170.0/24 maxlen: 24
78.110.172.0/22 maxlen: 22
78.157.192.0/21 maxlen: 21
78.157.200.0/22 maxlen: 22
78.157.204.0/24 maxlen: 24
78.157.206.0/23 maxlen: 23
78.157.208.0/20 maxlen: 20
94.229.64.0/20 maxlen: 20
178.159.0.0/20 maxlen: 20
185.17.24.0/24 maxlen: 24
185.17.26.0/24 maxlen: 24
185.17.27.0/24 maxlen: 24
185.103.96.0/22 maxlen: 22
2a01:a500::/32 maxlen: 32
2a01:a500:1::/48 maxlen: 48
2a01:a500:1228::/48 maxlen: 48
2a01:a500:251a::/48 maxlen: 48
2a01:a500:251b::/48 maxlen: 48
2a01:a500:251c::/48 maxlen: 48
2a01:a500:2566::/48 maxlen: 48
2a01:a500:a517::/48 maxlen: 48
2a01:a500:b517::/48 maxlen: 48
2a01:a500:c517::/48 maxlen: 48
2a01:a500:d517::/48 maxlen: 48
2a01:a500:e517::/48 maxlen: 48
2a01:a500:f517::/48 maxlen: 48
2a01:a507::/32 maxlen: 32
2a01:a507:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1f:2f:75:58:c2:f9:2d:be:e1:a1:95:78:ce:c1:b1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28
Validity
Not Before: Sep 23 14:00:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf3db959e10147c592198e6363a0c64ecb7bea87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:66:b9:74:1e:2b:e8:35:f3:2a:fa:d3:c6:
a8:4d:1f:09:2d:c7:51:8f:a8:bf:99:df:67:27:a9:
a3:96:42:2b:8c:8a:fe:f9:8f:a6:9a:c2:7e:3d:50:
17:50:25:73:a1:cd:9b:9d:d9:6c:c3:2d:4c:7a:c2:
cb:19:11:06:93:e2:6c:13:75:22:87:2f:19:90:a3:
05:fc:6a:5f:b8:81:c9:ab:e6:5e:d9:5e:3d:b6:77:
3e:8c:ed:cd:0d:c1:d1:f7:90:c7:0f:8b:ba:50:15:
e8:b7:b8:11:d5:1b:72:1c:df:b7:b0:4f:b8:e0:be:
b0:28:0b:22:55:8d:6e:66:6f:30:e8:8d:e1:10:0a:
c5:c6:ae:fe:5a:17:22:41:f2:37:02:16:b6:da:06:
14:11:a5:ae:2b:34:4a:a5:ca:69:c7:f2:06:b6:d6:
51:1d:9c:c8:82:1e:c8:79:2f:3f:a2:22:62:3e:74:
87:78:84:93:46:c1:c8:b9:87:9d:2c:76:ce:a6:d4:
95:11:85:5d:06:d6:f1:33:23:30:0f:e8:ba:38:60:
78:25:5f:01:24:7d:76:34:2d:ca:91:e0:af:e4:66:
b1:1d:1f:2d:7e:e9:b8:3c:0c:1a:ec:bc:82:da:be:
78:36:4b:b7:a5:6e:30:25:b7:6e:52:10:b1:94:cc:
79:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3D:B9:59:E1:01:47:C5:92:19:8E:63:63:A0:C6:4E:CB:7B:EA:87
X509v3 Authority Key Identifier:
keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/zz25WeEBR8WSGY5jY6DGTst76oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.136.0-5.101.151.255
5.101.168.0/21
31.132.0.0/21
37.9.56.0/21
77.74.192.0/21
77.75.120.0/21
78.110.160.0-78.110.170.255
78.110.172.0/22
78.157.192.0-78.157.204.255
78.157.206.0-78.157.223.255
94.229.64.0/20
178.159.0.0/20
185.17.24.0/24
185.17.26.0/23
185.103.96.0/22
IPv6:
2a01:a500::/32
2a01:a507::/32
Signature Algorithm: sha256WithRSAEncryption
78:4a:21:06:10:6a:31:29:91:d8:8b:6f:33:ed:e0:9c:a2:25:
52:fc:c0:4e:bb:dc:43:ac:c2:3a:c4:54:e7:f3:c0:c7:59:a1:
b6:0a:ec:81:e6:59:de:b8:6f:79:7f:3d:64:47:95:53:95:84:
d6:c7:76:35:b5:1f:fe:74:4b:d9:46:e9:f8:31:a5:1c:fe:10:
2a:bf:e0:22:c3:a8:7f:6e:61:3e:01:6e:4f:61:8d:b8:0b:76:
d1:6e:25:45:59:fb:cf:a0:77:09:d1:82:28:bd:d0:d3:cd:37:
8b:92:5f:5a:26:56:81:15:b2:5e:d9:79:1b:2b:14:f7:5e:50:
04:57:bb:5e:2a:36:b1:08:d0:29:6d:90:b2:aa:3d:db:f9:06:
94:82:86:92:14:b9:fc:67:7d:0e:31:38:c2:b7:86:b6:c0:91:
66:fe:59:03:26:09:d6:63:1c:bd:c7:c5:f9:4d:c1:b7:81:f7:
65:7e:cd:87:ae:53:b7:29:b2:c3:59:0a:de:fe:a0:d4:46:fa:
b0:a9:89:54:60:b8:68:e7:4a:50:3c:49:2c:c7:73:0f:be:07:
68:1d:29:cf:97:61:eb:df:d6:21:79:a3:ac:1e:7f:5b:0f:3c:
7c:31:13:85:94:cd:95:5c:cd:1e:89:b8:ea:92:c8:9d:b7:87:
3f:78:84:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:46:33 2024 by rpki-client on console-fra.rpki-client.org