Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/8wmSl8GX-FlaEt6bf1et1en2sFs.roa
File: 8wmSl8GX-FlaEt6bf1et1en2sFs.roa (raw, json)
Hash identifier: DOkswSrJxnMSH9uP4gffdOnz/KNDNWqWiQBrt91KXAE=
Subject key identifier: F3:09:92:97:C1:97:F8:59:5A:12:DE:9B:7F:57:AD:D5:E9:F6:B0:5B
Certificate issuer: /CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Certificate serial: 018CC6B7A5EB9742C8B3FF93509ABBDDD75F
Authority key identifier: D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/8wmSl8GX-FlaEt6bf1et1en2sFs.roa
Signing time: Mon 01 Jan 2024 20:29:33 +0000
ROA not before: Mon 01 Jan 2024 20:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43996
IP address blocks: 5.57.16.0/21 maxlen: 21
5.57.16.0/22 maxlen: 22
5.57.17.0/24 maxlen: 24
5.57.16.0/24 maxlen: 24
5.57.23.0/24 maxlen: 24
5.57.18.0/24 maxlen: 24
5.57.22.0/24 maxlen: 24
5.57.19.0/24 maxlen: 24
37.10.4.0/24 maxlen: 24
37.10.0.0/24 maxlen: 24
37.10.4.0/22 maxlen: 22
37.10.5.0/24 maxlen: 24
37.10.6.0/24 maxlen: 24
37.10.7.0/24 maxlen: 24
37.10.24.0/23 maxlen: 23
37.10.24.0/24 maxlen: 24
185.28.220.0/23 maxlen: 23
185.28.223.0/24 maxlen: 24
185.28.221.0/24 maxlen: 24
185.28.222.0/24 maxlen: 24
185.28.220.0/24 maxlen: 24
91.206.232.0/24 maxlen: 24
91.206.233.0/24 maxlen: 24
91.206.232.0/23 maxlen: 23
37.10.26.0/24 maxlen: 24
37.10.25.0/24 maxlen: 24
37.10.27.0/24 maxlen: 24
37.10.28.0/24 maxlen: 24
37.10.38.0/24 maxlen: 24
37.10.33.0/24 maxlen: 24
37.10.32.0/24 maxlen: 24
37.10.36.0/24 maxlen: 24
37.10.37.0/24 maxlen: 24
37.10.34.0/24 maxlen: 24
37.10.35.0/24 maxlen: 24
37.10.56.0/23 maxlen: 23
37.10.57.0/24 maxlen: 24
37.10.58.0/24 maxlen: 24
37.10.56.0/24 maxlen: 24
37.10.60.0/23 maxlen: 23
37.10.60.0/24 maxlen: 24
37.10.61.0/24 maxlen: 24
37.10.63.0/24 maxlen: 24
91.195.237.0/24 maxlen: 24
91.195.236.0/24 maxlen: 24
2a01:5040:40::/48 maxlen: 48
2a01:5040:2000::/48 maxlen: 48
2a01:5040:a000::/48 maxlen: 48
2a01:5040:a100::/48 maxlen: 48
2a01:5040::/48 maxlen: 48
2a01:5040:1000::/48 maxlen: 48
2a01:5041:200d::/48 maxlen: 48
2a01:5041:d::/48 maxlen: 48
2a01:5042:202::/48 maxlen: 48
2a01:5041:2005::/48 maxlen: 48
2a01:5041:5::/48 maxlen: 48
2a01:5041:100::/40 maxlen: 40
2a01:5041:200::/40 maxlen: 40
2a01:5042:200::/40 maxlen: 40
2a01:5042:100::/40 maxlen: 40
2a01:5042::/32 maxlen: 32
2a01:5041:2::/48 maxlen: 48
2a01:5041:2002::/48 maxlen: 48
2a01:5043::/32 maxlen: 32
2a01:5043:2000::/36 maxlen: 36
2a01:5041:13::/48 maxlen: 48
2a01:5041:2013::/48 maxlen: 48
2a01:5040:1000::/36 maxlen: 36
2a01:5040::/36 maxlen: 36
2a01:5040:a000::/36 maxlen: 36
2a01:5040:2000::/36 maxlen: 36
2a01:5040:6000::/36 maxlen: 36
2a01:5040:1020::/48 maxlen: 48
2a01:5040:20::/48 maxlen: 48
2a01:5040:2020::/48 maxlen: 48
2a01:5041:2009::/48 maxlen: 48
2a01:5041:9::/48 maxlen: 48
2a01:5041:2001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 10:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a5:eb:97:42:c8:b3:ff:93:50:9a:bb:dd:d7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Validity
Not Before: Jan 1 20:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3099297c197f8595a12de9b7f57add5e9f6b05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:02:06:75:14:fa:00:bc:e6:97:81:77:63:
be:58:b9:69:18:2d:4d:9b:0c:9f:8b:ae:66:91:1c:
6c:c5:65:5a:83:99:c3:8b:0c:b2:e7:8a:fd:21:4f:
58:a9:c2:3f:31:cf:21:36:be:2e:de:1f:b9:96:60:
25:74:6c:0d:f0:55:d9:b2:6b:a2:76:a4:6f:f8:30:
45:ab:d9:28:93:61:77:fb:ec:c0:04:23:80:b6:30:
bd:f5:c5:56:07:bb:b8:58:12:97:37:c6:25:f0:12:
14:34:f2:a7:1d:97:1a:e8:54:12:8a:0e:8b:4b:0d:
f5:33:46:83:a7:d1:b5:60:32:da:e2:f9:19:fb:3d:
0a:b7:e3:27:ed:15:c8:34:46:c3:2d:47:a5:33:57:
75:44:97:fe:5c:0d:c5:3e:4b:07:9d:ed:ef:ab:10:
4e:3c:93:38:4a:d9:5e:6a:d2:2d:89:6d:9d:da:ff:
be:31:c8:d2:19:2d:bb:fd:de:70:f3:60:cf:66:07:
67:69:02:43:3a:50:fd:81:26:39:7a:f9:c0:27:91:
d9:db:2e:43:e2:67:4b:92:90:95:ff:e0:15:91:d5:
11:f2:30:df:c8:78:79:18:f1:33:63:ca:2a:b6:c9:
03:6f:d7:27:a8:4e:55:05:ed:39:ec:45:f3:d7:06:
e1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:09:92:97:C1:97:F8:59:5A:12:DE:9B:7F:57:AD:D5:E9:F6:B0:5B
X509v3 Authority Key Identifier:
keyid:D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/8wmSl8GX-FlaEt6bf1et1en2sFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.16.0/21
37.10.0.0/24
37.10.4.0/22
37.10.24.0-37.10.28.255
37.10.32.0-37.10.38.255
37.10.56.0-37.10.58.255
37.10.60.0/23
37.10.63.0/24
91.195.236.0/23
91.206.232.0/23
185.28.220.0/22
IPv6:
2a01:5040::-2a01:5040:2fff:ffff:ffff:ffff:ffff:ffff
2a01:5040:6000::/36
2a01:5040:a000::/36
2a01:5041:2::/48
2a01:5041:5::/48
2a01:5041:9::/48
2a01:5041:d::/48
2a01:5041:13::/48
2a01:5041:100::-2a01:5041:2ff:ffff:ffff:ffff:ffff:ffff
2a01:5041:2001::-2a01:5041:2002:ffff:ffff:ffff:ffff:ffff
2a01:5041:2005::/48
2a01:5041:2009::/48
2a01:5041:200d::/48
2a01:5041:2013::/48
2a01:5042::/31
Signature Algorithm: sha256WithRSAEncryption
9c:ae:c5:52:91:62:84:ad:d9:b2:be:53:56:99:04:1d:61:4a:
65:1f:ae:64:b9:a4:95:3e:a9:10:ca:a1:5e:17:b3:17:d5:8d:
f6:1c:0d:a5:89:06:77:75:df:e9:4b:2a:e8:29:93:e3:08:a0:
61:57:97:f7:23:50:f6:7e:06:19:d3:9e:33:1c:c5:99:a3:f1:
1c:21:97:1b:f1:b4:66:25:0e:3d:ea:cb:c2:a2:52:e7:0d:e9:
18:69:a4:ab:d3:85:86:fd:c2:3f:4a:f0:3a:32:1f:ff:23:ee:
5b:f9:77:20:37:5a:f9:87:8d:d0:bb:f8:a2:e4:a1:23:b3:cb:
67:80:36:0c:2a:09:42:9e:7c:2e:58:8a:68:3c:e8:3b:3b:55:
e5:8d:16:71:fd:43:94:3d:04:70:ee:74:8c:26:42:d5:8c:e9:
34:7f:46:57:d8:67:c6:5a:65:11:5b:ce:c4:d0:8b:b5:75:75:
8a:57:e8:20:72:fd:59:55:cb:ba:f9:7d:a8:b3:20:58:4e:e4:
ee:74:ed:0c:f5:62:9e:9c:e1:53:08:b1:dd:05:f2:d8:02:af:
6d:f9:05:96:9d:70:7a:1e:b8:75:5a:d5:28:8c:35:da:65:26:
91:f6:a6:d2:a9:8d:c2:27:3e:76:17:61:95:09:d1:2b:54:c0:
32:bf:c6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 14:34:52 2024 by rpki-client on console-fra.rpki-client.org