Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/wvlPj2xk10XbWzXr5-d-Ykl3BCo.roa
File: wvlPj2xk10XbWzXr5-d-Ykl3BCo.roa (raw, json)
Hash identifier: IQ17bYPF14cO86hGgk6a4QGZ0VXENSstwJDcL8CRvyM=
Subject key identifier: C2:F9:4F:8F:6C:64:D7:45:DB:5B:35:EB:E7:E7:7E:62:49:77:04:2A
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0192B9D5EA928C933BD7E5653787429D084D
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/wvlPj2xk10XbWzXr5-d-Ykl3BCo.roa
Signing time: Wed 23 Oct 2024 14:44:17 +0000
ROA not before: Wed 23 Oct 2024 14:44:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57344
IP address blocks: 5.104.168.0/23 maxlen: 23
5.104.174.0/24 maxlen: 24
77.76.8.0/24 maxlen: 24
77.76.10.0/24 maxlen: 24
77.76.11.0/24 maxlen: 24
78.128.0.0/24 maxlen: 24
78.128.8.0/24 maxlen: 24
78.128.43.0/24 maxlen: 24
78.128.60.0/24 maxlen: 24
78.128.67.0/24 maxlen: 24
78.128.72.0/24 maxlen: 24
78.128.76.0/24 maxlen: 24
78.128.79.0/24 maxlen: 24
78.128.81.0/24 maxlen: 24
78.128.92.0/24 maxlen: 24
78.128.94.0/24 maxlen: 24
78.128.98.0/24 maxlen: 24
78.128.108.0/23 maxlen: 23
78.142.1.0/24 maxlen: 24
78.142.4.0/23 maxlen: 23
78.142.17.0/24 maxlen: 24
78.142.20.0/24 maxlen: 24
78.142.24.0/24 maxlen: 24
78.142.33.0/24 maxlen: 24
78.142.34.0/24 maxlen: 24
78.142.47.0/24 maxlen: 24
78.142.48.0/24 maxlen: 24
78.142.60.0/24 maxlen: 24
78.142.63.0/24 maxlen: 24
79.124.0.0/24 maxlen: 24
79.124.15.0/24 maxlen: 24
79.124.20.0/23 maxlen: 23
79.124.23.0/24 maxlen: 24
79.124.24.0/22 maxlen: 24
79.124.28.0/24 maxlen: 24
79.124.50.0/24 maxlen: 24
79.124.51.0/24 maxlen: 24
79.124.73.0/24 maxlen: 24
79.124.74.0/24 maxlen: 24
79.124.76.0/24 maxlen: 24
79.124.79.0/24 maxlen: 24
79.124.82.0/24 maxlen: 24
82.118.224.0/24 maxlen: 24
82.118.236.0/24 maxlen: 24
82.118.238.0/24 maxlen: 24
82.118.244.0/24 maxlen: 24
82.118.246.0/23 maxlen: 23
87.246.2.0/24 maxlen: 24
91.148.131.0/24 maxlen: 24
91.148.140.0/24 maxlen: 24
91.148.160.0/24 maxlen: 24
91.148.168.0/24 maxlen: 24
94.72.145.0/24 maxlen: 24
94.72.148.0/22 maxlen: 24
94.72.158.0/24 maxlen: 24
94.72.159.0/24 maxlen: 24
130.185.224.0/24 maxlen: 24
130.185.226.0/24 maxlen: 24
130.185.229.0/24 maxlen: 24
130.185.235.0/24 maxlen: 24
130.185.236.0/24 maxlen: 24
130.185.237.0/24 maxlen: 24
130.185.248.0/24 maxlen: 24
130.185.250.0/24 maxlen: 24
176.241.176.0/23 maxlen: 24
178.132.80.0/24 maxlen: 24
178.132.81.0/24 maxlen: 24
178.132.82.0/23 maxlen: 24
178.132.84.0/23 maxlen: 24
185.148.160.0/22 maxlen: 22
217.174.148.0/23 maxlen: 24
217.174.150.0/24 maxlen: 24
217.174.152.0/23 maxlen: 24
217.174.154.0/24 maxlen: 24
217.174.159.0/24 maxlen: 24
2a01:8740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:d5:ea:92:8c:93:3b:d7:e5:65:37:87:42:9d:08:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Oct 23 14:44:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2f94f8f6c64d745db5b35ebe7e77e624977042a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:aa:5a:3a:b1:dc:e5:a3:e7:e9:a6:89:e6:
d8:46:d9:c2:e8:5c:b3:ac:b8:f9:34:3a:6f:bc:99:
5b:1c:1d:3e:ab:98:52:38:d7:21:43:0e:80:d6:1c:
91:89:f2:5b:7f:4a:06:12:a1:5f:9c:80:f0:dc:8e:
aa:e1:c8:d5:16:7d:c9:df:8a:a0:cd:d6:98:5d:03:
78:91:7c:85:58:ba:a3:c0:dc:6c:18:7c:45:cf:f4:
4e:2f:4b:5a:32:47:86:f8:2e:3c:14:e5:cc:76:4b:
4a:9a:af:76:a8:71:d2:11:e8:9a:26:e5:1f:3d:c3:
7a:c9:78:f9:9d:57:e6:d0:25:7e:e2:9b:2f:06:84:
cf:f0:7a:37:69:87:ff:b4:a2:80:47:e5:78:7f:03:
19:88:a5:89:45:0f:5e:1c:3b:c7:65:93:ae:42:b7:
08:e8:85:87:81:58:15:b9:93:cd:90:9b:df:ca:85:
bb:8e:00:15:8b:62:32:62:30:8e:c1:0e:7e:97:1e:
06:bc:f9:c1:b1:06:f7:c9:44:f8:65:e8:86:51:37:
4b:50:70:47:be:2d:1f:cb:e3:5f:69:7e:fa:19:42:
90:dd:55:1c:6d:97:5f:e5:b8:42:d6:26:25:93:33:
bb:c2:1b:55:48:38:4d:da:e0:32:b1:39:95:d4:a5:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F9:4F:8F:6C:64:D7:45:DB:5B:35:EB:E7:E7:7E:62:49:77:04:2A
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/wvlPj2xk10XbWzXr5-d-Ykl3BCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.168.0/23
5.104.174.0/24
77.76.8.0/24
77.76.10.0/23
78.128.0.0/24
78.128.8.0/24
78.128.43.0/24
78.128.60.0/24
78.128.67.0/24
78.128.72.0/24
78.128.76.0/24
78.128.79.0/24
78.128.81.0/24
78.128.92.0/24
78.128.94.0/24
78.128.98.0/24
78.128.108.0/23
78.142.1.0/24
78.142.4.0/23
78.142.17.0/24
78.142.20.0/24
78.142.24.0/24
78.142.33.0-78.142.34.255
78.142.47.0-78.142.48.255
78.142.60.0/24
78.142.63.0/24
79.124.0.0/24
79.124.15.0/24
79.124.20.0/23
79.124.23.0-79.124.28.255
79.124.50.0/23
79.124.73.0-79.124.74.255
79.124.76.0/24
79.124.79.0/24
79.124.82.0/24
82.118.224.0/24
82.118.236.0/24
82.118.238.0/24
82.118.244.0/24
82.118.246.0/23
87.246.2.0/24
91.148.131.0/24
91.148.140.0/24
91.148.160.0/24
91.148.168.0/24
94.72.145.0/24
94.72.148.0/22
94.72.158.0/23
130.185.224.0/24
130.185.226.0/24
130.185.229.0/24
130.185.235.0-130.185.237.255
130.185.248.0/24
130.185.250.0/24
176.241.176.0/23
178.132.80.0-178.132.85.255
185.148.160.0/22
217.174.148.0-217.174.150.255
217.174.152.0-217.174.154.255
217.174.159.0/24
IPv6:
2a01:8740::/32
Signature Algorithm: sha256WithRSAEncryption
75:59:b7:0f:94:a7:67:9f:1e:13:50:a5:cb:5a:f9:ae:99:69:
ba:2b:7c:7f:27:0f:6e:b0:b9:1c:3f:8d:2a:61:64:08:cd:c0:
e7:34:bc:ec:48:9f:69:c1:11:ee:29:78:4c:fe:c9:62:5b:3c:
13:91:49:89:33:9c:7f:c9:44:2b:b7:d5:1e:d6:ad:01:78:9b:
bd:d8:cf:fa:68:90:fb:f5:3f:be:60:25:ac:7c:b3:7b:6b:54:
68:fb:b3:d4:6e:7a:52:fa:11:1b:ce:f6:1f:3c:cf:fb:80:26:
93:0d:1b:9b:ad:13:0d:79:15:b5:2a:94:4d:dd:14:83:d4:52:
2c:88:9d:44:ac:3a:21:23:91:76:18:ee:f0:a4:57:83:1d:ce:
1d:c8:83:b4:8e:b0:44:57:6a:ce:71:f0:98:21:83:3d:25:cb:
90:1c:89:c2:37:62:58:03:b4:a2:f1:7e:01:2f:fb:a5:48:28:
46:26:df:07:03:cf:3b:0c:ea:8f:b8:4d:f2:54:30:f8:0e:9e:
2c:b2:33:89:e9:bf:de:42:4b:c6:a6:ec:cf:ca:e1:6c:bd:34:
84:a9:30:1a:3d:1b:da:f6:0d:a3:aa:b0:4d:c0:9b:1e:01:f4:
e8:75:22:19:5b:b7:5b:1f:2a:fc:06:dd:ab:d8:20:08:ac:ae:
11:fb:30:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:03:51 2024 by rpki-client on console-fra.rpki-client.org