Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/W8WAC6hCrEsy6O_Wd6OaGzqpA4w.roa
File: W8WAC6hCrEsy6O_Wd6OaGzqpA4w.roa (raw, json)
Hash identifier: EEOBT7zAhGTzWWIYhNNEshm5qm4ipdSrMoWCUiLDt/I=
Subject key identifier: 5B:C5:80:0B:A8:42:AC:4B:32:E8:EF:D6:77:A3:9A:1B:3A:A9:03:8C
Certificate issuer: /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Certificate serial: 0192FCDD67D91435E17EFD7F773B2985F032
Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/W8WAC6hCrEsy6O_Wd6OaGzqpA4w.roa
Signing time: Tue 05 Nov 2024 15:07:01 +0000
ROA not before: Tue 05 Nov 2024 15:07:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197075
IP address blocks: 37.77.160.0/21 maxlen: 24
45.156.60.0/23 maxlen: 24
45.156.62.0/23 maxlen: 23
46.31.104.0/21 maxlen: 24
81.29.176.0/22 maxlen: 23
85.208.76.0/22 maxlen: 24
185.25.234.0/23 maxlen: 23
185.37.116.0/22 maxlen: 23
185.47.138.0/24 maxlen: 24
185.59.20.0/22 maxlen: 23
185.186.12.0/22 maxlen: 23
185.246.95.0/24 maxlen: 24
2a02:2420::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fc:dd:67:d9:14:35:e1:7e:fd:7f:77:3b:29:85:f0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Validity
Not Before: Nov 5 15:07:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bc5800ba842ac4b32e8efd677a39a1b3aa9038c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1c:1a:f0:c6:28:f8:3c:90:a4:b4:c5:cb:1e:
87:81:f5:7d:33:d0:7c:b9:26:a0:3f:15:d1:78:db:
fb:c3:ac:9c:5c:2d:af:a4:70:18:e8:b2:18:43:96:
d1:84:71:14:79:99:33:e2:25:ef:9a:8d:c7:1d:56:
1d:91:9e:4f:f6:74:c4:c0:1c:8d:49:f2:b4:c1:05:
cb:26:75:1a:72:48:93:ad:ad:f3:41:28:f6:56:f0:
80:c1:19:4d:e9:65:f0:ee:32:a2:6f:66:a8:48:64:
4e:4f:d8:5c:95:89:38:3e:22:5b:0c:49:02:29:da:
e4:2e:bb:52:ce:97:24:1d:52:cc:a1:83:43:7a:c2:
34:51:24:88:6e:37:82:e7:86:26:84:7a:ef:98:8d:
3d:84:c8:66:dd:3e:06:a8:1d:65:a0:03:95:4d:92:
de:56:64:8c:50:26:cb:a5:d5:50:d5:df:ac:a5:dc:
ba:a3:eb:b9:02:79:98:3b:6a:d5:4f:ac:9c:79:8b:
85:73:78:1e:98:0e:6a:58:45:90:aa:68:ea:f0:92:
f0:8d:58:c4:3f:c4:d5:6a:1e:ff:e5:7f:8c:7a:81:
e4:3e:17:77:a7:5d:80:73:e9:f7:01:55:48:ad:23:
ad:03:71:af:7e:7d:ff:98:3b:04:ce:95:6d:bd:4f:
f7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C5:80:0B:A8:42:AC:4B:32:E8:EF:D6:77:A3:9A:1B:3A:A9:03:8C
X509v3 Authority Key Identifier:
keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/W8WAC6hCrEsy6O_Wd6OaGzqpA4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.160.0/21
45.156.60.0/22
46.31.104.0/21
81.29.176.0/22
85.208.76.0/22
185.25.234.0/23
185.37.116.0/22
185.47.138.0/24
185.59.20.0/22
185.186.12.0/22
185.246.95.0/24
IPv6:
2a02:2420::/32
Signature Algorithm: sha256WithRSAEncryption
05:c9:c2:5f:3a:91:cf:66:ff:a6:e2:77:ea:ab:ef:93:66:b2:
1e:33:c6:0c:fa:63:e2:5e:84:91:a9:02:ad:44:22:68:8b:35:
c5:5f:57:60:80:9b:6e:6c:41:4e:58:cd:64:d0:11:1f:e6:38:
32:f2:e3:fd:8b:f7:ac:bd:04:d5:dc:bd:e2:aa:1c:50:b3:bf:
81:7a:98:96:00:fd:c9:9a:2a:75:3d:3a:7f:ae:59:b6:e4:f5:
0c:a1:17:08:c2:80:07:84:3a:15:68:b9:a7:21:75:3f:52:6a:
9d:05:89:24:c4:02:34:94:6d:49:be:1d:f3:75:65:4d:c8:25:
3d:96:35:ec:40:b6:e7:27:58:e0:22:e9:3c:8b:fd:96:df:ba:
1d:c6:c4:b7:9d:50:c5:c6:69:a6:ad:2e:eb:3d:b1:72:c3:fa:
e7:4a:6a:3b:35:b4:9d:6f:4c:66:0e:43:c9:ff:1a:fd:74:a7:
c4:0a:66:57:93:5a:7c:fc:ef:98:74:3f:05:fb:cd:d8:a5:fc:
d6:9a:ca:b0:73:b9:59:29:d2:b7:2e:9c:d3:e7:62:f4:5d:43:
79:f1:14:5a:9b:d3:3a:0a:9f:e5:6c:4d:f6:18:d2:e6:b2:d6:
04:bc:a0:ba:db:46:2e:8b:cb:4f:8a:67:0b:2b:96:b8:b1:a4:
db:7c:c3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:16 2024 by rpki-client on console-fra.rpki-client.org