Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/wjCcUfSNFRKGTFspRIp_csBWpeE.roa
File: wjCcUfSNFRKGTFspRIp_csBWpeE.roa (raw, json)
Hash identifier: 1vi3BZXX35MIRViQBRCCCIyBGe0UUXca21P8h1PuXsY=
Subject key identifier: C2:30:9C:51:F4:8D:15:12:86:4C:5B:29:44:8A:7F:72:C0:56:A5:E1
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018EF691AD3D2B4CF68D50938E04695E3000
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/wjCcUfSNFRKGTFspRIp_csBWpeE.roa
Signing time: Fri 19 Apr 2024 13:35:25 +0000
ROA not before: Fri 19 Apr 2024 13:35:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.5.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:ed00::/29 maxlen: 29
2a0f:f900::/29 maxlen: 29
2a13:a440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 07:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:91:ad:3d:2b:4c:f6:8d:50:93:8e:04:69:5e:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Apr 19 13:35:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2309c51f48d1512864c5b29448a7f72c056a5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bc:0c:8f:f6:fc:c8:74:da:69:c7:16:b8:e6:
33:56:b4:32:f0:b7:7c:2a:52:9d:28:c5:9d:65:ea:
e9:2b:85:83:13:df:64:72:09:67:55:d4:d1:42:b8:
7e:28:db:ce:98:8a:80:7b:1e:2a:68:5e:77:cf:3c:
f8:58:0e:79:94:e0:12:61:07:b9:4d:6a:77:54:be:
66:74:8f:43:37:1e:45:05:ac:b8:d8:5b:90:7c:56:
fc:b3:67:a7:e3:b9:88:ae:23:f9:6f:ce:8c:c5:87:
6f:ab:61:0f:33:9c:a5:05:fb:aa:c4:d7:89:73:7b:
ff:45:76:22:9b:8d:78:4f:54:32:57:97:67:8c:18:
6a:87:76:5a:8e:6d:2b:18:c8:bc:9f:c3:ec:d8:2f:
d7:3b:f3:5a:18:2c:c5:a3:20:a4:d1:1a:dd:d6:ea:
32:e9:b0:23:2d:87:f7:78:49:f1:47:c7:8f:71:f9:
ff:bb:68:e1:61:26:ce:d5:76:81:11:65:f5:ba:05:
b3:f3:66:31:99:bd:e4:98:33:2d:0a:8e:58:28:e0:
73:26:f6:18:d5:91:e9:6d:ca:1e:ab:f0:d4:fa:3b:
e4:77:5b:a3:93:c9:9d:cf:65:19:20:98:e7:20:03:
ba:e6:fb:c1:aa:d2:9f:09:28:bd:eb:71:27:f5:51:
fb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:30:9C:51:F4:8D:15:12:86:4C:5B:29:44:8A:7F:72:C0:56:A5:E1
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/wjCcUfSNFRKGTFspRIp_csBWpeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
45.131.0.0/23
45.131.3.0/24
45.136.5.0/24
45.141.148.0/24
45.147.44.0/24
77.83.200.0/22
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/29
Signature Algorithm: sha256WithRSAEncryption
41:ee:c8:d5:54:88:7d:95:b1:75:4c:ac:54:58:b9:cc:09:db:
5e:ba:77:fc:6c:0c:19:84:9d:a9:05:07:16:e5:94:6a:91:6c:
8f:77:62:59:99:0b:43:9f:67:bd:4b:7f:ff:9e:d8:cf:eb:a3:
3d:9d:e6:54:7d:b6:37:b9:66:d6:43:1a:50:fb:ac:6e:f2:cd:
cf:60:a8:36:dd:e5:fd:22:00:f5:93:81:fe:a0:69:f9:20:e7:
41:58:a7:ea:8c:33:70:71:b6:6f:e0:9a:07:52:06:25:f3:c1:
e8:e1:ef:13:e2:e7:93:41:fc:9e:15:6a:0e:aa:f2:91:af:eb:
4d:d7:30:a4:ee:f0:1f:01:32:aa:eb:76:7c:a8:07:b5:d5:c9:
0e:f9:e2:6c:0f:b2:c2:09:e8:06:62:41:b9:90:2f:18:f6:87:
b5:28:af:19:ab:3b:7b:01:b0:ba:32:eb:18:17:76:bc:d5:da:
70:9c:38:bb:d6:84:de:07:f5:36:5f:fc:1b:7b:f0:6c:35:3f:
ef:34:c9:1a:a2:20:e8:fd:4f:2c:4e:86:3e:6e:57:83:43:fe:
57:15:bc:e2:65:ea:93:53:49:b1:fa:4e:c1:2c:d8:fc:39:17:
08:39:ba:b6:f4:10:52:1b:50:a4:3d:0d:63:d2:20:47:b2:42:
57:10:b8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 12:20:24 2024 by rpki-client on console-ams.rpki-client.org