Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/JwsBYh_aH8RoDjQ3CP0cSEx8JVg.roa
File: JwsBYh_aH8RoDjQ3CP0cSEx8JVg.roa (raw, json)
Hash identifier: b24csn55EUPHuTkte7BM9hJHh3yC6WZItOxlB8PHHTg=
Subject key identifier: 27:0B:01:62:1F:DA:1F:C4:68:0E:34:37:08:FD:1C:48:4C:7C:25:58
Certificate issuer: /CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Certificate serial: 01912D41FCAE7669C88AA9333F4E43819E00
Authority key identifier: A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/JwsBYh_aH8RoDjQ3CP0cSEx8JVg.roa
Signing time: Wed 07 Aug 2024 14:33:04 +0000
ROA not before: Wed 07 Aug 2024 14:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210403
IP address blocks: 31.207.32.0/24 maxlen: 24
31.207.33.0/24 maxlen: 24
31.207.34.0/24 maxlen: 24
31.207.35.0/24 maxlen: 24
31.207.36.0/24 maxlen: 24
31.207.37.0/24 maxlen: 24
31.207.38.0/24 maxlen: 24
31.207.39.0/24 maxlen: 24
78.24.248.0/21 maxlen: 24
78.138.45.0/24 maxlen: 24
78.138.58.0/24 maxlen: 24
83.229.19.0/24 maxlen: 24
91.199.179.0/24 maxlen: 24
91.216.107.0/24 maxlen: 24
91.234.194.0/24 maxlen: 24
91.234.195.0/24 maxlen: 24
180.149.196.0/24 maxlen: 24
180.149.197.0/24 maxlen: 24
180.149.198.0/24 maxlen: 24
180.149.199.0/24 maxlen: 24
185.98.128.0/24 maxlen: 24
185.98.129.0/24 maxlen: 24
185.98.131.0/24 maxlen: 24
185.98.136.0/24 maxlen: 24
185.98.137.0/24 maxlen: 24
185.98.138.0/24 maxlen: 24
185.98.139.0/24 maxlen: 24
185.135.132.0/24 maxlen: 24
185.238.116.0/24 maxlen: 24
192.162.68.0/24 maxlen: 24
192.162.69.0/24 maxlen: 24
192.162.70.0/24 maxlen: 24
192.162.71.0/24 maxlen: 24
193.37.145.0/24 maxlen: 24
193.203.239.0/24 maxlen: 24
194.126.193.0/24 maxlen: 24
195.110.34.0/24 maxlen: 24
195.110.35.0/24 maxlen: 24
213.156.132.0/22 maxlen: 24
213.255.195.0/24 maxlen: 24
2a00:7ee0::/48 maxlen: 48
2a00:7ee0:1::/48 maxlen: 48
2a00:7ee0:2::/48 maxlen: 48
2a00:7ee0:8::/48 maxlen: 48
2a00:7ee0:9::/48 maxlen: 48
2a00:7ee0:40::/44 maxlen: 48
2a00:7ee0:2000::/48 maxlen: 48
2a00:7ee0:3000::/48 maxlen: 48
2a00:7ee0:4000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2d:41:fc:ae:76:69:c8:8a:a9:33:3f:4e:43:81:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Validity
Not Before: Aug 7 14:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=270b01621fda1fc4680e343708fd1c484c7c2558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5c:71:f4:15:61:91:55:6e:bd:c3:ff:91:b8:
0a:06:fc:f3:4c:f4:30:b9:52:fb:6c:f9:2b:6a:a3:
b9:06:11:e3:ed:4c:77:1a:99:c9:89:c6:14:4a:0d:
71:93:d7:ef:c9:fb:3d:ca:d9:29:08:3d:60:55:f9:
c5:14:7d:08:f2:96:21:50:32:27:cc:f8:31:9c:80:
f3:04:bb:bb:a1:ba:1d:12:fa:86:3b:a9:11:d8:0d:
65:4a:b5:dc:10:d8:de:df:d2:c1:61:ad:fb:d4:e1:
f5:d1:8c:1f:d0:e0:a1:d5:2d:30:a8:88:18:48:15:
0c:87:8c:29:73:32:7d:b4:00:43:36:3d:1c:e6:0f:
3a:29:16:12:f1:82:fe:7d:25:60:01:eb:90:e7:fc:
7f:f2:2f:d5:70:3c:1f:ad:0c:42:e7:f3:1d:53:40:
21:08:90:ab:a1:08:70:d5:08:43:43:e2:28:70:8b:
88:62:54:1a:14:bb:b5:2b:e8:83:91:0e:5a:ff:3e:
e8:7b:b6:02:11:7e:0e:e8:b1:4c:7a:a5:14:6d:13:
c7:5a:29:2d:fc:71:0a:0c:7d:95:10:36:12:87:a2:
3c:67:d5:cd:8e:bf:1d:82:30:f8:33:13:c0:01:21:
bb:e3:2e:8a:d4:9b:c9:2a:c7:28:10:54:04:23:b4:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0B:01:62:1F:DA:1F:C4:68:0E:34:37:08:FD:1C:48:4C:7C:25:58
X509v3 Authority Key Identifier:
keyid:A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/JwsBYh_aH8RoDjQ3CP0cSEx8JVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.32.0/21
78.24.248.0/21
78.138.45.0/24
78.138.58.0/24
83.229.19.0/24
91.199.179.0/24
91.216.107.0/24
91.234.194.0/23
180.149.196.0/22
185.98.128.0/23
185.98.131.0/24
185.98.136.0/22
185.135.132.0/24
185.238.116.0/24
192.162.68.0/22
193.37.145.0/24
193.203.239.0/24
194.126.193.0/24
195.110.34.0/23
213.156.132.0/22
213.255.195.0/24
IPv6:
2a00:7ee0::-2a00:7ee0:2:ffff:ffff:ffff:ffff:ffff
2a00:7ee0:8::/47
2a00:7ee0:40::/44
2a00:7ee0:2000::/48
2a00:7ee0:3000::/48
2a00:7ee0:4000::/36
Signature Algorithm: sha256WithRSAEncryption
38:df:82:b8:56:26:d3:31:56:eb:b2:ec:87:4a:b2:ec:6f:a2:
60:c6:3b:5d:e2:fe:a9:e8:8c:a0:5a:62:c5:44:58:55:3c:2b:
2c:93:24:db:96:ee:df:8d:ad:4d:27:73:74:7f:d4:e8:8b:92:
1d:f3:14:6e:e5:3f:1c:72:a6:18:5c:4e:a1:33:11:10:51:1f:
fa:b4:4e:f1:38:dc:a4:a6:17:17:e2:c6:5b:60:a2:7c:c4:49:
4e:4a:ef:18:4d:8a:8a:c6:06:a1:db:0b:11:af:a8:b8:4d:a3:
5d:c0:13:6b:fb:fd:6d:ac:ba:f3:ba:33:03:d9:a0:07:f0:31:
c9:8c:3e:1f:cb:db:b2:36:8e:10:cd:9e:4c:59:72:6f:c0:5c:
9e:74:65:01:60:17:2a:6b:72:0d:c8:65:0d:cb:59:46:55:35:
21:d1:48:bf:e5:06:a9:05:1f:7d:71:78:e4:f5:f2:7d:ae:cf:
ea:27:13:58:53:a5:2e:66:ff:a4:65:2b:8c:17:10:15:bd:57:
48:8f:0a:00:27:39:b9:66:8e:a4:77:55:94:1d:ff:03:55:b2:
09:17:c7:78:d2:99:cd:94:70:72:a0:bc:7a:05:57:7b:c1:04:
55:8b:1c:c9:de:2e:b9:a6:31:8d:2e:1a:3a:9f:5c:aa:26:09:
cb:96:9f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:34 2024 by rpki-client on console-fra.rpki-client.org