Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/5wGLnNKxxNjcF2lOsoAiYds0P4A.roa
File: 5wGLnNKxxNjcF2lOsoAiYds0P4A.roa (raw, json)
Hash identifier: mTiIIDSTWRo6MdiM/VhiQcwcj4ULiI8K690oMWB/1d4=
Subject key identifier: E7:01:8B:9C:D2:B1:C4:D8:DC:17:69:4E:B2:80:22:61:DB:34:3F:80
Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial: 018CC42524EF94023A45FDF060ABC7B9C8C4
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/5wGLnNKxxNjcF2lOsoAiYds0P4A.roa
Signing time: Mon 01 Jan 2024 08:30:17 +0000
ROA not before: Mon 01 Jan 2024 08:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16082
IP address blocks: 37.77.176.0/21 maxlen: 21
185.15.104.0/22 maxlen: 22
87.117.72.0/21 maxlen: 21
109.238.64.0/20 maxlen: 20
62.133.0.0/19 maxlen: 19
83.218.128.0/19 maxlen: 19
87.117.112.0/21 maxlen: 21
31.24.0.0/21 maxlen: 21
87.224.0.0/17 maxlen: 17
217.13.128.0/19 maxlen: 19
212.237.64.0/19 maxlen: 19
2a02:b90::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:24:ef:94:02:3a:45:fd:f0:60:ab:c7:b9:c8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Validity
Not Before: Jan 1 08:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7018b9cd2b1c4d8dc17694eb2802261db343f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1e:85:0d:62:0f:df:e0:5b:17:92:ab:05:80:
ad:71:bc:d9:63:d7:ff:53:02:08:24:db:4f:e5:da:
4a:3d:5b:16:22:3d:07:c2:26:ab:b1:10:e2:f1:4e:
e9:54:50:0f:8e:cf:69:77:38:63:74:e7:19:e2:d3:
91:59:83:ae:56:80:c1:9a:52:e2:89:35:08:02:e0:
fe:b0:b3:6f:39:07:6e:4d:6c:54:e6:02:5e:4a:48:
b7:5b:7f:3b:d8:48:04:ee:73:a1:00:d2:c2:91:e6:
17:57:e6:af:dd:46:86:1e:be:12:eb:ea:31:42:23:
56:cb:ae:af:02:0a:66:26:87:22:5c:b0:83:c9:2c:
db:a5:22:38:89:44:09:d1:f2:6f:a7:16:82:65:dc:
6e:12:98:f0:e6:13:65:8b:1f:59:bf:3f:f4:7b:de:
09:3f:69:68:bb:da:1b:f7:11:36:80:70:8c:3d:0f:
0c:0a:58:6f:46:04:1e:05:a9:cf:a0:ef:85:bd:42:
1c:be:fc:f4:3b:48:4a:6a:76:f2:7b:73:e6:52:5f:
61:12:72:bc:8f:6d:dd:5a:17:be:9c:35:5f:c7:52:
b2:f0:ac:d1:ee:c9:d5:37:68:47:60:b2:00:e2:cc:
2a:ab:8a:9c:ab:4c:cd:11:fd:72:45:a3:aa:26:15:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:01:8B:9C:D2:B1:C4:D8:DC:17:69:4E:B2:80:22:61:DB:34:3F:80
X509v3 Authority Key Identifier:
keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/5wGLnNKxxNjcF2lOsoAiYds0P4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.0.0/21
37.77.176.0/21
62.133.0.0/19
83.218.128.0/19
87.117.72.0/21
87.117.112.0/21
87.224.0.0/17
109.238.64.0/20
185.15.104.0/22
212.237.64.0/19
217.13.128.0/19
IPv6:
2a02:b90::/32
Signature Algorithm: sha256WithRSAEncryption
4c:0b:29:f4:55:20:5a:54:b1:bc:a8:7b:c2:0a:12:6d:ba:a0:
7b:86:9d:13:5c:d8:36:01:53:8a:c8:40:11:fb:53:75:9b:e3:
bf:2b:e0:97:63:bf:53:9c:75:0d:ce:6b:82:87:46:9a:0d:ca:
8d:35:3c:6c:a5:e9:00:ca:29:43:0d:da:57:50:65:ae:7d:e9:
67:48:5b:15:be:7e:3f:a2:79:8c:af:4f:37:3b:4d:28:3b:8c:
c5:39:da:e8:20:cb:41:a3:ab:da:7d:32:28:c4:03:c6:66:52:
a8:06:c1:50:de:9b:cf:3c:97:e2:f1:1e:fb:0c:e0:d3:77:e5:
69:0c:9b:c9:dd:1c:15:76:70:07:9e:40:39:81:af:02:b5:32:
50:70:7b:db:99:1c:e3:f2:c3:bc:ef:45:fc:59:a4:5a:37:29:
61:93:56:6d:7b:f4:76:8e:be:4a:5f:3e:de:a5:64:c6:79:bb:
4c:a4:03:87:bc:d2:c4:6d:3b:93:fd:2b:a5:47:73:1a:31:de:
ba:3c:18:c1:93:e9:36:dd:7a:d3:74:1b:49:5e:88:d0:aa:ab:
b6:8b:91:c9:59:df:ee:31:00:e6:fa:2e:6d:dc:bd:b0:39:72:
81:2a:e8:4b:fb:00:19:47:e1:1b:70:b8:8d:9c:c3:4f:cd:18:
cb:40:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:51:18 2024 by rpki-client on console-fra.rpki-client.org