Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/4JGBbk3Pwv60J1zW_TJFGZOXXOM.roa
File: 4JGBbk3Pwv60J1zW_TJFGZOXXOM.roa (raw, json)
Hash identifier: xpl6JX1YNs0C2Q0n3PUXsqtc1M+yFkmYQsteIoOawAM=
Subject key identifier: E0:91:81:6E:4D:CF:C2:FE:B4:27:5C:D6:FD:32:45:19:93:97:5C:E3
Certificate issuer: /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial: 018CC26D79C2ECF99C60C2397A49D6A876FA
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/4JGBbk3Pwv60J1zW_TJFGZOXXOM.roa
Signing time: Mon 01 Jan 2024 00:30:03 +0000
ROA not before: Mon 01 Jan 2024 00:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47883
IP address blocks: 94.79.93.0/24 maxlen: 24
94.79.92.0/24 maxlen: 24
94.79.98.0/24 maxlen: 24
94.79.96.0/24 maxlen: 24
94.79.97.0/24 maxlen: 24
94.79.94.0/24 maxlen: 24
94.79.95.0/24 maxlen: 24
94.79.100.0/24 maxlen: 24
94.79.99.0/24 maxlen: 24
94.79.105.0/24 maxlen: 24
94.79.103.0/24 maxlen: 24
94.79.104.0/24 maxlen: 24
94.79.101.0/24 maxlen: 24
94.79.102.0/24 maxlen: 24
94.79.112.0/24 maxlen: 24
94.79.110.0/24 maxlen: 24
94.79.111.0/24 maxlen: 24
94.79.108.0/24 maxlen: 24
94.79.109.0/24 maxlen: 24
94.79.107.0/24 maxlen: 24
94.79.106.0/24 maxlen: 24
94.79.114.0/24 maxlen: 24
94.79.113.0/24 maxlen: 24
94.79.117.0/24 maxlen: 24
94.79.118.0/24 maxlen: 24
94.79.115.0/24 maxlen: 24
94.79.116.0/24 maxlen: 24
94.79.124.0/24 maxlen: 24
94.79.125.0/24 maxlen: 24
94.79.122.0/24 maxlen: 24
94.79.123.0/24 maxlen: 24
94.79.121.0/24 maxlen: 24
94.79.119.0/24 maxlen: 24
94.79.120.0/24 maxlen: 24
94.79.127.0/24 maxlen: 24
94.79.126.0/24 maxlen: 24
94.79.64.0/24 maxlen: 24
94.79.70.0/24 maxlen: 24
94.79.71.0/24 maxlen: 24
94.79.68.0/24 maxlen: 24
94.79.69.0/24 maxlen: 24
94.79.67.0/24 maxlen: 24
94.79.65.0/24 maxlen: 24
94.79.66.0/24 maxlen: 24
94.79.64.0/18 maxlen: 18
94.79.72.0/24 maxlen: 24
94.79.73.0/24 maxlen: 24
94.79.77.0/24 maxlen: 24
94.79.78.0/24 maxlen: 24
94.79.75.0/24 maxlen: 24
94.79.76.0/24 maxlen: 24
94.79.74.0/24 maxlen: 24
94.79.84.0/24 maxlen: 24
94.79.85.0/24 maxlen: 24
94.79.82.0/24 maxlen: 24
94.79.83.0/24 maxlen: 24
94.79.81.0/24 maxlen: 24
94.79.79.0/24 maxlen: 24
94.79.80.0/24 maxlen: 24
94.79.86.0/24 maxlen: 24
94.79.91.0/24 maxlen: 24
94.79.89.0/24 maxlen: 24
94.79.90.0/24 maxlen: 24
94.79.87.0/24 maxlen: 24
94.79.88.0/24 maxlen: 24
5.104.0.0/24 maxlen: 24
5.104.1.0/24 maxlen: 24
5.104.4.0/24 maxlen: 24
5.104.2.0/24 maxlen: 24
5.104.3.0/24 maxlen: 24
5.104.0.0/20 maxlen: 20
5.104.11.0/24 maxlen: 24
5.104.9.0/24 maxlen: 24
5.104.10.0/24 maxlen: 24
5.104.7.0/24 maxlen: 24
5.104.8.0/24 maxlen: 24
5.104.5.0/24 maxlen: 24
5.104.6.0/24 maxlen: 24
5.104.14.0/24 maxlen: 24
5.104.15.0/24 maxlen: 24
5.104.12.0/24 maxlen: 24
5.104.13.0/24 maxlen: 24
37.34.4.0/24 maxlen: 24
37.34.3.0/24 maxlen: 24
37.34.1.0/24 maxlen: 24
37.34.2.0/24 maxlen: 24
37.34.0.0/24 maxlen: 24
37.34.0.0/19 maxlen: 19
37.34.6.0/24 maxlen: 24
37.34.7.0/24 maxlen: 24
37.34.5.0/24 maxlen: 24
37.34.11.0/24 maxlen: 24
37.34.10.0/24 maxlen: 24
37.34.8.0/24 maxlen: 24
37.34.9.0/24 maxlen: 24
37.34.17.0/24 maxlen: 24
37.34.15.0/24 maxlen: 24
37.34.16.0/24 maxlen: 24
37.34.13.0/24 maxlen: 24
37.34.14.0/24 maxlen: 24
37.34.12.0/24 maxlen: 24
37.34.20.0/24 maxlen: 24
37.34.21.0/24 maxlen: 24
37.34.18.0/24 maxlen: 24
37.34.19.0/24 maxlen: 24
37.34.24.0/24 maxlen: 24
37.34.22.0/24 maxlen: 24
37.34.23.0/24 maxlen: 24
37.34.31.0/24 maxlen: 24
37.34.29.0/24 maxlen: 24
37.34.30.0/24 maxlen: 24
37.34.27.0/24 maxlen: 24
37.34.28.0/24 maxlen: 24
37.34.25.0/24 maxlen: 24
37.34.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:79:c2:ec:f9:9c:60:c2:39:7a:49:d6:a8:76:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Validity
Not Before: Jan 1 00:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e091816e4dcfc2feb4275cd6fd32451993975ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:3d:88:5a:a7:bc:4e:1d:fb:bd:a7:a2:1c:
57:95:ee:96:ad:09:72:ed:48:c3:22:4e:a7:fe:9c:
7c:fc:e6:be:96:43:4f:b2:87:ac:b9:93:10:a0:a9:
d6:d5:9b:c0:49:dc:2c:0f:e8:65:f3:a9:f0:ea:89:
3d:0c:52:43:5d:0f:7e:ba:7a:a4:43:55:23:a6:81:
0a:97:ca:20:84:f5:37:39:f6:bb:00:6e:bf:e1:a5:
a0:92:7f:c4:ef:23:31:32:71:8f:f8:52:3d:4b:25:
49:ce:4d:f5:a3:4f:0b:fe:68:d0:76:f6:3e:0e:59:
b4:4d:bd:7f:bd:80:84:2d:7f:34:a7:80:ac:80:32:
e1:f2:a3:c9:90:a5:4d:b5:35:9c:d3:aa:19:0e:83:
bf:41:dd:50:c6:a8:11:93:50:b3:4c:df:1f:2c:94:
f8:a5:ba:7d:78:ca:33:bb:6e:e9:e8:1b:7c:09:92:
b1:be:7c:fe:16:20:af:32:52:55:d7:0a:28:d8:68:
95:7e:be:90:e1:d4:a0:21:39:e7:f8:00:61:c9:74:
f7:b5:c6:c2:80:db:7d:3e:bb:5e:34:e1:36:63:c3:
56:c3:9e:d7:4a:9f:7f:1f:20:d1:db:7e:c0:80:be:
b9:f0:83:ab:aa:34:49:9c:b9:b1:ae:1d:77:f5:0f:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:91:81:6E:4D:CF:C2:FE:B4:27:5C:D6:FD:32:45:19:93:97:5C:E3
X509v3 Authority Key Identifier:
keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/4JGBbk3Pwv60J1zW_TJFGZOXXOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.0.0/20
37.34.0.0/19
94.79.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4f:af:3a:47:a2:47:8d:6b:55:5c:7a:f1:0f:a6:9b:d4:44:42:
7a:1c:36:3e:d1:e3:c8:6c:f5:24:09:3c:61:35:ad:1a:b5:a6:
ab:0a:13:d8:09:cc:b8:29:93:70:0d:d9:d4:22:2b:1d:04:7e:
6b:75:9d:9a:81:6a:8c:d1:90:75:16:93:38:82:8c:9d:dd:8b:
ee:b5:af:a0:0a:2b:6e:38:84:08:c1:f3:e9:2b:46:c3:73:2f:
16:c5:51:97:e5:84:29:71:3b:1b:45:7e:2f:26:3e:46:77:bd:
1b:b2:31:d6:a8:48:6b:9d:9e:e7:eb:4e:9a:df:89:99:02:c4:
09:d7:c9:8a:fa:d9:c5:80:e3:1e:8c:da:73:84:c4:0d:8e:30:
59:0c:98:bc:e8:68:e0:3c:89:8b:f8:78:ee:a4:00:44:7c:54:
b0:5c:31:b7:2e:13:9a:e4:bc:55:9e:eb:2f:d7:a5:78:f2:63:
be:6d:7c:59:ef:68:60:e3:26:73:a8:37:4a:1e:a1:b5:e0:86:
98:ea:1c:46:48:b1:fc:95:75:11:f1:8e:e7:a7:4a:6a:f2:a1:
e1:78:71:c8:fb:20:d1:3c:dd:e8:06:6a:25:b6:4f:49:91:80:
4a:d9:68:1e:fa:ba:76:f1:9d:d0:8f:f9:9a:9e:89:c9:b0:b7:
bc:cf:e3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:05:59 2024 by rpki-client on console-fra.rpki-client.org