Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/W7--4nkqVrbSnIQ4XGzAVNoE1rM.roa
File: W7--4nkqVrbSnIQ4XGzAVNoE1rM.roa (raw, json)
Hash identifier: SnrC0dZe1zCt81Uslf8Jn3/C2GIn4c1MtklvFzPt1Ug=
Subject key identifier: 5B:BF:BE:E2:79:2A:56:B6:D2:9C:84:38:5C:6C:C0:54:DA:04:D6:B3
Certificate issuer: /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial: 018CC26D6A97AA3F44F182B580A1C5861BAE
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/W7--4nkqVrbSnIQ4XGzAVNoE1rM.roa
Signing time: Mon 01 Jan 2024 00:29:59 +0000
ROA not before: Mon 01 Jan 2024 00:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12390
IP address blocks: 194.207.96.0/19 maxlen: 19
213.249.128.0/18 maxlen: 18
185.188.232.0/22 maxlen: 22
83.100.128.0/17 maxlen: 17
94.72.192.0/18 maxlen: 18
194.207.128.0/19 maxlen: 19
194.207.64.0/19 maxlen: 19
87.102.0.0/17 maxlen: 17
5.198.0.0/17 maxlen: 17
212.50.160.0/19 maxlen: 19
77.86.0.0/17 maxlen: 17
194.207.224.0/19 maxlen: 19
178.78.64.0/18 maxlen: 18
194.207.160.0/19 maxlen: 19
213.249.192.0/18 maxlen: 18
194.207.192.0/19 maxlen: 19
159.253.64.0/20 maxlen: 20
2a00:4900::/32 maxlen: 32
2a00:4902::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:6a:97:aa:3f:44:f1:82:b5:80:a1:c5:86:1b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bbfbee2792a56b6d29c84385c6cc054da04d6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:84:dc:66:28:ea:58:a1:9f:c1:ff:98:52:c3:
25:a7:f0:cf:e9:79:e1:a9:80:c3:d5:ed:d0:75:ca:
f7:29:b2:aa:9c:72:3c:f0:67:6d:ae:74:5a:97:f3:
ae:0a:65:84:b7:40:a4:cb:03:74:19:35:d5:b3:62:
39:9e:05:17:54:a4:45:b2:f1:e1:56:2a:53:e4:ba:
1c:a2:62:22:a0:59:2d:bc:e3:10:4b:4c:ae:df:96:
90:43:98:6f:cb:5f:d5:a4:b1:d0:69:ec:15:43:44:
31:30:4a:90:36:bf:31:df:70:18:19:a3:96:e2:ac:
84:28:ac:65:ad:1e:58:f9:ea:95:30:d8:8a:b9:44:
27:23:d3:18:ba:4d:2d:97:81:68:12:84:92:dd:0c:
04:26:94:59:e1:4c:b9:6c:fa:34:ab:ad:35:ca:cf:
8d:27:c6:6e:33:8d:71:23:e6:30:92:34:20:30:a1:
c0:c1:ed:28:e8:2b:48:b5:5a:03:24:03:d2:b2:33:
f3:48:45:9c:e8:ca:b0:2e:ec:d5:eb:8c:cb:bc:cd:
45:66:50:86:9d:24:59:04:80:cf:e3:8e:1e:b2:cf:
29:e1:ec:ea:68:35:ae:7c:4d:8d:6d:63:0b:a8:2e:
50:fa:bb:5f:f0:4c:16:42:71:aa:47:01:ff:96:5f:
71:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BF:BE:E2:79:2A:56:B6:D2:9C:84:38:5C:6C:C0:54:DA:04:D6:B3
X509v3 Authority Key Identifier:
keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/W7--4nkqVrbSnIQ4XGzAVNoE1rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.0.0/17
77.86.0.0/17
83.100.128.0/17
87.102.0.0/17
94.72.192.0/18
159.253.64.0/20
178.78.64.0/18
185.188.232.0/22
194.207.64.0-194.207.255.255
212.50.160.0/19
213.249.128.0/17
IPv6:
2a00:4900::/32
2a00:4902::/32
Signature Algorithm: sha256WithRSAEncryption
5a:9b:8e:76:63:8a:1a:a2:42:6e:d5:46:46:41:1f:a1:56:4f:
c0:81:30:2a:5d:a3:50:ff:a7:5d:ed:7a:a4:b9:19:4b:25:80:
b2:bc:d8:75:76:fb:e6:b5:c3:63:a6:25:a5:8e:18:48:ac:5f:
c8:8a:f7:60:cc:bb:38:57:af:66:03:0c:e6:8e:cd:73:fc:eb:
9d:c5:fb:cb:f2:0e:1e:9b:21:e4:d6:a0:35:19:c9:61:24:40:
8e:21:93:35:ab:3b:ea:b8:93:2c:7d:5e:0d:3f:10:06:8e:47:
f0:38:87:b1:16:73:0a:94:90:c7:b2:04:a3:fe:ca:97:6c:88:
6b:49:84:80:51:9b:3a:80:43:99:a7:a5:bf:97:fb:d4:e1:ee:
98:48:97:51:f5:0e:30:e9:19:ad:f5:a4:64:44:4c:32:8b:90:
92:81:da:e8:ae:91:39:ea:01:ea:c7:2b:1c:b5:5a:8b:41:ab:
a8:2b:c5:ca:69:31:41:8e:dd:96:8e:62:94:f0:4e:2a:c0:7f:
f7:f7:ff:e4:97:d9:59:07:dd:46:28:8a:b4:7a:77:85:a3:80:
15:07:74:0f:88:03:af:1e:de:8e:8a:eb:02:94:fe:d9:ce:f8:
df:45:34:db:09:dc:34:80:be:78:93:8a:5b:27:5c:fa:ea:6e:
bf:b7:9a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 10:15:32 2024 by rpki-client on console-fra.rpki-client.org