Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/WWNpFy7pVvF3CIehv_8s4h9A5CA.roa
File: WWNpFy7pVvF3CIehv_8s4h9A5CA.roa (raw, json)
Hash identifier: DnCodq9u8Ij9JDxbJbdEF2Vfb4j39tq/+28+xjV+YLA=
Subject key identifier: 59:63:69:17:2E:E9:56:F1:77:08:87:A1:BF:FF:2C:E2:1F:40:E4:20
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 01932A1F06EAF92F48C3DA608F4A4604A30E
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/WWNpFy7pVvF3CIehv_8s4h9A5CA.roa
Signing time: Thu 14 Nov 2024 10:01:36 +0000
ROA not before: Thu 14 Nov 2024 10:01:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 82.97.196.0/23 maxlen: 24
82.97.199.0/24 maxlen: 24
89.38.106.0/23 maxlen: 24
91.238.148.0/23 maxlen: 24
185.77.250.0/23 maxlen: 24
188.211.250.0/23 maxlen: 23
188.214.89.0/24 maxlen: 24
188.241.59.0/24 maxlen: 24
193.169.8.0/23 maxlen: 24
193.192.52.0/23 maxlen: 24
193.239.172.0/23 maxlen: 24
193.239.246.0/23 maxlen: 24
194.24.234.0/23 maxlen: 24
194.88.134.0/23 maxlen: 24
194.135.26.0/23 maxlen: 23
194.135.132.0/23 maxlen: 24
194.246.106.0/23 maxlen: 24
195.2.196.0/23 maxlen: 24
195.13.48.0/23 maxlen: 24
195.34.80.0/23 maxlen: 24
195.93.140.0/23 maxlen: 24
195.128.188.0/23 maxlen: 24
195.133.208.0/23 maxlen: 24
195.135.192.0/23 maxlen: 24
195.189.250.0/23 maxlen: 24
195.210.44.0/23 maxlen: 24
195.254.140.0/23 maxlen: 24
213.159.10.0/23 maxlen: 24
213.159.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:1f:06:ea:f9:2f:48:c3:da:60:8f:4a:46:04:a3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Nov 14 10:01:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=596369172ee956f1770887a1bfff2ce21f40e420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:aa:c5:c7:a8:1d:03:f9:94:6a:c6:35:ba:
61:51:08:7d:c6:4f:4c:02:1e:9e:88:88:58:e5:68:
5c:ba:5e:97:07:57:6b:c4:e8:ea:e3:53:7d:e5:16:
7c:17:36:3c:e1:61:66:3f:38:b6:b6:83:cf:cc:03:
7b:4d:7f:59:eb:29:08:fc:a1:c2:81:4d:05:c6:5a:
04:ac:b9:dd:c6:16:36:cf:8c:9a:6b:1b:50:80:11:
10:65:26:0a:60:29:c1:08:e7:7d:e5:3d:d6:d5:00:
13:16:21:68:37:69:35:9b:eb:47:08:b3:fb:94:c2:
e9:c7:c0:cf:03:fc:dc:8c:ff:c7:14:17:6c:71:29:
ca:eb:75:7b:61:e6:c9:53:15:cc:0b:bc:97:1d:d6:
db:ac:15:91:7f:26:1a:82:72:0e:22:9f:7e:54:a7:
a7:5d:23:1c:97:ac:99:36:38:d5:51:7b:a5:29:82:
49:8d:49:14:55:46:15:4d:25:6f:48:c0:f1:5e:ce:
e4:7d:83:09:50:47:c6:8a:ea:1f:38:38:7e:54:29:
ab:93:4b:e9:93:e5:1b:28:7e:05:af:67:d7:4c:b8:
be:34:f7:2a:a1:60:63:d2:75:7b:e9:42:be:99:e7:
7f:57:1b:2f:1b:8e:33:b1:50:d5:9e:0d:30:d2:c4:
36:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:63:69:17:2E:E9:56:F1:77:08:87:A1:BF:FF:2C:E2:1F:40:E4:20
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/WWNpFy7pVvF3CIehv_8s4h9A5CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.97.196.0/23
82.97.199.0/24
89.38.106.0/23
91.238.148.0/23
185.77.250.0/23
188.211.250.0/23
188.214.89.0/24
188.241.59.0/24
193.169.8.0/23
193.192.52.0/23
193.239.172.0/23
193.239.246.0/23
194.24.234.0/23
194.88.134.0/23
194.135.26.0/23
194.135.132.0/23
194.246.106.0/23
195.2.196.0/23
195.13.48.0/23
195.34.80.0/23
195.93.140.0/23
195.128.188.0/23
195.133.208.0/23
195.135.192.0/23
195.189.250.0/23
195.210.44.0/23
195.254.140.0/23
213.159.10.0-213.159.13.255
Signature Algorithm: sha256WithRSAEncryption
9c:fa:54:ba:b5:59:96:9b:4c:03:da:36:65:94:4e:a0:e5:2a:
95:5a:bb:90:71:94:95:80:30:86:0d:69:16:2c:cc:b9:5e:48:
35:5e:01:7c:2b:03:24:7d:ca:2b:78:c4:1b:a7:cb:b5:c3:9d:
0d:5a:95:e4:9e:4d:ca:04:7e:b7:a4:28:13:74:b4:f5:1c:a7:
89:e7:d5:14:99:03:38:2f:c2:f5:57:ed:ef:82:e4:b8:ab:12:
f2:26:71:f8:ad:de:d4:40:6a:81:62:40:a4:ff:a0:57:36:14:
7d:fd:36:5e:9f:97:e3:0a:1f:31:0a:3f:e0:14:27:a9:b5:96:
f8:98:fa:76:65:a9:c4:37:87:f5:71:ff:be:73:5b:8a:61:83:
2e:0a:c5:18:6d:08:78:72:a8:2d:51:c9:6e:90:1e:4c:ca:22:
1a:87:2b:8b:0e:43:26:13:63:3f:78:da:f1:96:78:80:79:a1:
28:96:d6:85:b4:14:a2:1a:0f:a9:cf:ff:5f:96:f7:b7:58:81:
bb:a4:96:31:dd:f3:95:6c:27:5c:4d:6e:31:0a:34:39:3a:9d:
9c:7f:83:0f:46:ea:58:61:49:fe:82:18:2d:fc:66:0c:60:69:
56:28:95:e2:25:0c:60:86:33:48:f6:ef:58:2f:f5:48:85:e9:
d0:d2:72:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:04:50 2024 by rpki-client on console-fra.rpki-client.org