Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/01qWmTwZ0BBI1Pj6o4EoHxI5AcA.roa
File: 01qWmTwZ0BBI1Pj6o4EoHxI5AcA.roa (raw, json)
Hash identifier: HU4sxDXPy5d+5SHmEYxvwBwS3IIJ+7r36lb/57QfMJU=
Subject key identifier: D3:5A:96:99:3C:19:D0:10:48:D4:F8:FA:A3:81:28:1F:12:39:01:C0
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 018CC26D15DDB8688A83417CAAD55B266E9B
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/01qWmTwZ0BBI1Pj6o4EoHxI5AcA.roa
Signing time: Mon 01 Jan 2024 00:29:38 +0000
ROA not before: Mon 01 Jan 2024 00:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16178
IP address blocks: 178.77.0.0/18 maxlen: 18
178.77.0.0/20 maxlen: 20
178.77.0.0/19 maxlen: 19
185.14.124.0/22 maxlen: 22
85.158.36.0/22 maxlen: 22
85.158.32.0/24 maxlen: 24
85.158.35.0/24 maxlen: 24
85.158.32.0/21 maxlen: 21
217.75.192.0/24 maxlen: 24
217.75.192.0/20 maxlen: 20
217.75.192.0/21 maxlen: 21
217.75.193.0/24 maxlen: 24
217.75.194.0/24 maxlen: 24
217.75.195.0/24 maxlen: 24
217.75.196.0/24 maxlen: 24
217.75.197.0/24 maxlen: 24
217.75.198.0/24 maxlen: 24
217.75.199.0/24 maxlen: 24
178.77.16.0/20 maxlen: 20
46.36.160.0/19 maxlen: 19
178.77.32.0/19 maxlen: 19
217.75.204.0/24 maxlen: 24
217.75.205.0/24 maxlen: 24
217.75.206.0/24 maxlen: 24
217.75.200.0/21 maxlen: 21
217.75.200.0/24 maxlen: 24
217.75.201.0/24 maxlen: 24
217.75.202.0/24 maxlen: 24
217.75.203.0/24 maxlen: 24
217.75.207.0/24 maxlen: 24
79.142.0.0/20 maxlen: 20
2a00:fe8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:15:dd:b8:68:8a:83:41:7c:aa:d5:5b:26:6e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d35a96993c19d01048d4f8faa381281f123901c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:32:e7:e0:de:29:d0:5d:ad:f8:21:43:9b:a1:
01:7e:ee:ef:29:ed:fc:97:e5:f3:62:6d:62:6b:16:
b9:60:40:25:cd:24:68:ed:7e:b7:be:4b:b5:38:34:
23:c8:11:99:f2:fe:9d:3a:6a:2c:3a:f3:33:fc:61:
34:cf:f4:05:f8:c9:27:19:f7:88:73:e2:f4:13:1a:
80:6e:75:74:94:16:09:f4:d2:86:08:83:b9:54:72:
70:6a:19:ca:c6:34:30:04:87:d4:1c:65:38:11:13:
f1:e4:cc:cc:d2:85:b0:9f:88:d2:6a:75:d1:a7:07:
10:6d:ca:79:c8:85:84:5c:5e:96:3d:84:19:ba:32:
79:e5:f3:b9:9b:c4:9a:c3:85:80:6a:ab:e1:25:1c:
8f:19:35:0f:75:21:ea:99:23:5c:7f:74:07:93:eb:
4f:3f:9e:cc:85:fd:f2:7e:2f:4c:85:06:e6:78:6a:
14:20:da:6a:32:c8:53:6d:0e:1b:2a:35:16:51:5e:
95:41:9b:af:c3:b1:57:52:83:4f:13:e0:7a:b2:ac:
d7:64:7f:d2:f1:ea:f0:7a:e5:3e:39:74:d6:2c:3f:
ec:c2:2e:f8:24:8e:df:98:8b:96:78:ce:36:77:b7:
7f:bd:8c:5b:f7:cf:78:35:78:73:45:f8:ad:fb:b3:
5c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5A:96:99:3C:19:D0:10:48:D4:F8:FA:A3:81:28:1F:12:39:01:C0
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/01qWmTwZ0BBI1Pj6o4EoHxI5AcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.160.0/19
79.142.0.0/20
85.158.32.0/21
178.77.0.0/18
185.14.124.0/22
217.75.192.0/20
IPv6:
2a00:fe8::/32
Signature Algorithm: sha256WithRSAEncryption
58:f6:88:d3:25:3a:e7:39:ac:63:7a:ef:54:1f:8b:76:70:f7:
92:0f:60:f8:dd:1a:51:39:89:e3:9e:46:17:5a:01:67:43:8b:
f6:63:cc:48:68:d0:b5:66:70:aa:a0:53:fd:30:08:f8:71:ba:
25:81:28:23:47:0a:38:2c:b1:04:10:8f:c5:32:e7:49:d9:68:
a2:76:d5:10:29:85:b5:fd:76:a9:01:ce:10:a9:bf:77:52:e1:
76:0d:36:34:1f:2b:f1:e8:bc:dc:3d:d6:0f:c7:8d:c7:3c:2a:
4f:91:5a:d0:22:80:c6:4a:4b:ef:7a:68:15:82:e3:77:6f:20:
5d:2b:32:b8:dc:4d:c7:64:8e:f6:45:51:56:7c:92:7e:ff:aa:
cf:cd:46:49:60:e5:68:8d:98:d1:48:31:b6:ac:43:60:0a:00:
1a:f0:7c:c3:9a:16:2a:9e:7a:63:76:5d:e4:f8:be:f4:d6:54:
09:f6:36:30:4f:68:57:66:e0:c9:77:0f:f2:1d:47:90:78:59:
d1:33:c1:96:a5:6b:10:5e:71:c2:18:13:e0:a9:18:96:85:55:
5f:91:fa:d8:3c:d8:1e:ef:9e:59:fb:8b:61:06:13:e9:e4:0b:
bd:ae:c1:81:04:c9:17:01:3b:ab:d9:00:93:61:d5:dd:b2:e7:
8d:ff:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:29:20 2024 by rpki-client on console-fra.rpki-client.org