Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/w5Iif1ZxML6XlUT7lkLPtcg2Ilo.roa
File: w5Iif1ZxML6XlUT7lkLPtcg2Ilo.roa (raw, json)
Hash identifier: lCbbVuotECWAhYSwAaQTnBaD2VQeEj2ja5vntpa4TBY=
Subject key identifier: C3:92:22:7F:56:71:30:BE:97:95:44:FB:96:42:CF:B5:C8:36:22:5A
Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial: 0192C02C3AEC1086FEA34EFEAECE94130B9D
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/w5Iif1ZxML6XlUT7lkLPtcg2Ilo.roa
Signing time: Thu 24 Oct 2024 20:16:17 +0000
ROA not before: Thu 24 Oct 2024 20:16:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42160
IP address blocks: 81.95.112.0/20 maxlen: 20
81.95.112.0/22 maxlen: 24
81.95.112.0/24 maxlen: 24
81.95.113.0/24 maxlen: 24
81.95.114.0/24 maxlen: 24
81.95.115.0/24 maxlen: 24
81.95.116.0/24 maxlen: 24
81.95.117.0/24 maxlen: 24
81.95.118.0/23 maxlen: 23
81.95.118.0/24 maxlen: 24
81.95.119.0/24 maxlen: 24
81.95.120.0/23 maxlen: 23
81.95.120.0/24 maxlen: 24
81.95.121.0/24 maxlen: 24
81.95.122.0/23 maxlen: 23
81.95.122.0/24 maxlen: 24
81.95.123.0/24 maxlen: 24
81.95.124.0/22 maxlen: 22
81.95.124.0/24 maxlen: 24
81.95.125.0/24 maxlen: 24
81.95.126.0/24 maxlen: 24
81.95.127.0/24 maxlen: 24
185.55.92.0/22 maxlen: 22
185.55.92.0/24 maxlen: 24
185.55.93.0/24 maxlen: 24
185.55.94.0/24 maxlen: 24
185.55.95.0/24 maxlen: 24
193.110.248.0/21 maxlen: 21
193.110.248.0/23 maxlen: 23
193.110.248.0/24 maxlen: 24
193.110.249.0/24 maxlen: 24
193.110.250.0/23 maxlen: 23
193.110.250.0/24 maxlen: 24
193.110.251.0/24 maxlen: 24
193.110.252.0/22 maxlen: 22
193.110.252.0/24 maxlen: 24
193.110.253.0/24 maxlen: 24
193.110.254.0/24 maxlen: 24
193.110.255.0/24 maxlen: 24
2a02:5940::/32 maxlen: 34
2a02:5940::/34 maxlen: 34
2a02:5940:4000::/34 maxlen: 34
2a02:5940:8000::/34 maxlen: 34
2a02:5940:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c0:2c:3a:ec:10:86:fe:a3:4e:fe:ae:ce:94:13:0b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Validity
Not Before: Oct 24 20:16:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c392227f567130be979544fb9642cfb5c836225a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:72:79:ef:45:d2:e3:64:33:5d:a6:cf:e9:
c2:b1:a4:0a:0c:0a:4f:17:a0:e4:15:0c:10:93:5b:
db:d6:f9:67:f4:59:67:a9:7b:6b:21:c6:06:be:43:
39:c1:8d:86:a4:7c:23:4c:f1:37:5f:28:2f:4e:e8:
f3:68:a2:75:aa:33:4a:6b:79:19:42:fd:64:0e:5e:
f0:8d:a8:fb:6b:99:50:48:20:d0:9e:1a:2e:b3:18:
ef:93:73:00:a5:37:3f:5a:a4:fd:6a:39:17:a6:ed:
53:46:b6:86:78:4e:d8:a4:26:74:bf:6b:20:02:20:
b6:56:d6:7a:08:98:3b:60:c8:1f:af:dd:c0:21:bd:
b7:89:61:24:f7:8b:80:5b:01:21:65:b8:0e:5d:d4:
11:0c:4e:48:56:7a:f5:a1:0d:dc:6e:a6:67:b6:8d:
9c:fc:e4:56:7f:f1:0d:e4:f8:63:77:01:6d:f9:73:
a0:18:1e:8a:db:70:e6:8c:7d:a2:00:c0:ed:8e:e1:
ae:18:ad:9e:3d:77:dc:25:1f:b4:96:d5:e9:6c:12:
53:cc:0c:d9:af:2c:3f:f8:09:e5:93:72:90:69:c2:
cb:a7:13:a3:6c:7d:0c:7d:d2:9f:60:38:bd:60:15:
20:58:41:36:9a:f7:0e:f2:3d:d3:e3:11:47:8e:ca:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:92:22:7F:56:71:30:BE:97:95:44:FB:96:42:CF:B5:C8:36:22:5A
X509v3 Authority Key Identifier:
keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/w5Iif1ZxML6XlUT7lkLPtcg2Ilo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.95.112.0/20
185.55.92.0/22
193.110.248.0/21
IPv6:
2a02:5940::/32
Signature Algorithm: sha256WithRSAEncryption
89:40:dc:93:d7:06:8d:f5:6c:ea:aa:f0:5e:22:cc:b9:46:c0:
58:43:0f:0a:a8:e5:3b:e8:73:4b:9e:2e:48:17:bd:f9:f7:73:
59:d7:60:d8:44:a3:cc:8e:7d:cd:20:d3:3e:07:c0:fe:4a:66:
20:26:ef:4e:61:8c:92:50:7c:56:66:aa:1b:bb:58:06:25:a2:
ce:c3:b4:2a:d3:73:be:e9:98:f4:f2:b2:b9:64:eb:19:62:fd:
46:76:09:26:cb:e6:e8:cd:88:65:24:7f:c0:8d:5a:ce:f8:44:
19:d6:0f:58:f3:b3:23:c0:67:c8:3c:e7:5e:fd:9b:d8:44:90:
00:34:ba:b0:e8:60:ce:e6:61:23:bb:40:8f:d5:d6:ef:56:98:
db:71:41:8a:2b:9d:58:12:9a:46:ef:99:26:14:e4:1f:c8:5c:
9d:8e:f9:fb:b7:1f:38:1b:ff:ca:f5:b0:c3:c9:2f:bd:64:7f:
86:d3:45:f5:91:20:23:bc:0d:7a:2e:60:45:a9:7a:9b:67:96:
0b:f1:c6:d5:a5:47:83:ba:5a:67:88:f5:3c:99:0f:76:a0:19:
b3:9d:8f:37:e7:44:5e:b6:e7:84:be:ed:0f:02:6e:f5:87:1d:
6f:ef:40:df:cd:88:5e:d1:3b:b1:97:15:4e:76:65:f7:2b:f6:
89:b4:da:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:39 2024 by rpki-client on console-ams.rpki-client.org