Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/JWWSOH5tlY2g6Dm00vV1HY2ojds.roa
File: JWWSOH5tlY2g6Dm00vV1HY2ojds.roa (raw, json)
Hash identifier: uc+9QtWszvd6tT/JqeVxwSpYIlnzL7/ncea/vLOq0bo=
Subject key identifier: 25:65:92:38:7E:6D:95:8D:A0:E8:39:B4:D2:F5:75:1D:8D:A8:8D:DB
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 018D4FD5FA87CA15D65B441E4724F7A53882
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/JWWSOH5tlY2g6Dm00vV1HY2ojds.roa
Signing time: Sun 28 Jan 2024 11:30:39 +0000
ROA not before: Sun 28 Jan 2024 11:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25233
IP address blocks: 77.64.0.0/17 maxlen: 17
77.64.40.0/24 maxlen: 24
78.93.0.0/16 maxlen: 16
78.93.28.0/24 maxlen: 24
78.93.45.0/24 maxlen: 24
78.93.50.0/24 maxlen: 24
78.93.92.0/22 maxlen: 22
78.93.96.0/22 maxlen: 22
78.93.107.0/24 maxlen: 24
78.93.108.0/24 maxlen: 24
78.93.109.0/24 maxlen: 24
78.93.144.0/24 maxlen: 24
78.93.145.0/24 maxlen: 24
78.93.146.0/24 maxlen: 24
78.93.147.0/24 maxlen: 24
78.93.148.0/24 maxlen: 24
78.93.149.0/24 maxlen: 24
78.93.150.0/24 maxlen: 24
78.93.151.0/24 maxlen: 24
78.93.152.0/24 maxlen: 24
78.93.153.0/24 maxlen: 24
78.93.154.0/24 maxlen: 24
78.93.155.0/24 maxlen: 24
78.93.156.0/24 maxlen: 24
78.93.157.0/24 maxlen: 24
78.93.158.0/24 maxlen: 24
78.93.159.0/24 maxlen: 24
78.93.160.0/24 maxlen: 24
78.93.161.0/24 maxlen: 24
84.22.224.0/19 maxlen: 19
84.22.231.0/24 maxlen: 24
84.22.234.0/24 maxlen: 24
84.22.238.0/24 maxlen: 24
84.22.241.0/24 maxlen: 24
84.22.254.0/24 maxlen: 24
86.60.64.0/18 maxlen: 18
86.60.107.0/24 maxlen: 24
86.60.109.0/24 maxlen: 24
86.60.112.0/21 maxlen: 21
86.60.126.0/24 maxlen: 24
212.93.192.0/19 maxlen: 19
212.93.196.0/24 maxlen: 24
212.100.192.0/19 maxlen: 19
212.100.210.0/24 maxlen: 24
212.100.218.0/24 maxlen: 24
212.116.192.0/19 maxlen: 19
213.184.160.0/19 maxlen: 19
2a02:df0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4f:d5:fa:87:ca:15:d6:5b:44:1e:47:24:f7:a5:38:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Jan 28 11:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=256592387e6d958da0e839b4d2f5751d8da88ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:a7:a7:b7:79:d1:a6:0e:15:14:0c:42:51:
f2:7e:54:0b:a8:91:af:0c:ec:00:25:24:56:0c:c4:
b7:1c:08:62:a2:22:6b:65:21:45:5b:d0:5c:bc:60:
2a:c8:a8:fd:50:75:cd:59:44:a7:f4:d3:5a:f8:5b:
71:35:d8:27:bb:91:81:ec:0c:87:e1:72:76:9d:f8:
94:5c:ed:95:65:1d:f3:1b:92:31:1e:69:f6:69:cb:
8a:c6:d2:61:6c:54:a6:8a:8a:29:07:c2:f1:bb:fa:
2c:3e:94:23:64:da:72:53:82:66:7b:7a:29:0c:8a:
97:28:e8:9a:7a:d0:09:f7:4e:36:1a:1b:fe:35:25:
38:6a:d7:6d:46:78:27:d9:63:1e:8b:e8:6c:db:f5:
e6:17:c7:dd:44:e1:18:5f:c4:2f:92:3a:70:31:0b:
0e:2b:b0:00:ee:06:32:1b:1d:30:b5:c5:f0:e4:04:
14:ce:6b:da:a5:ef:e5:44:b3:a2:1d:df:f0:69:6e:
56:d1:fe:25:ea:59:2b:78:bc:3f:e6:fd:76:42:a9:
dc:6d:6e:0a:aa:68:04:d9:99:3c:95:82:a4:fc:61:
96:87:5f:c1:88:81:79:5e:ad:31:09:28:f1:47:91:
fd:e6:fb:9d:8d:49:3f:b4:d8:51:bf:10:3a:e5:85:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:65:92:38:7E:6D:95:8D:A0:E8:39:B4:D2:F5:75:1D:8D:A8:8D:DB
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/JWWSOH5tlY2g6Dm00vV1HY2ojds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.64.0.0/17
78.93.0.0/16
84.22.224.0/19
86.60.64.0/18
212.93.192.0/19
212.100.192.0/19
212.116.192.0/19
213.184.160.0/19
IPv6:
2a02:df0::/32
Signature Algorithm: sha256WithRSAEncryption
69:7e:e7:4d:8e:3f:a2:56:90:7d:84:bf:21:d6:15:14:76:cb:
7d:61:ba:29:61:20:6b:d3:85:c9:03:a9:9d:30:2d:51:af:bd:
36:36:a8:c6:0c:f1:a7:d4:db:1c:13:e9:88:0d:53:de:ed:0f:
f4:2e:31:13:30:b2:e9:98:29:24:fa:34:4c:1a:f8:6f:69:c5:
41:c8:64:b7:28:8c:56:ba:f5:6e:25:75:6d:4e:5a:b0:0b:ee:
c9:ff:36:1c:7d:0c:ad:96:a8:1b:26:16:fe:0b:0a:d7:63:76:
2e:5f:36:47:8d:6c:16:e4:27:26:5c:c7:b1:d1:de:01:f8:a4:
c9:ec:05:a1:1b:6a:2e:1e:a0:c6:6e:79:2f:f9:59:9e:36:6c:
eb:57:f9:01:29:ea:83:a4:65:2b:4a:94:60:cc:6b:2a:b9:19:
14:53:a7:5d:f2:e8:64:54:e3:ed:ce:9e:96:d7:1f:4d:11:94:
7b:5c:26:50:2c:bb:86:8d:16:31:f2:bd:0f:4d:6e:bf:00:40:
98:3b:1e:f8:18:20:d9:0b:bc:00:d2:24:92:63:08:2f:62:9c:
10:b6:e8:cb:c0:a0:b9:4d:03:e3:56:d2:8a:0e:fe:fb:e0:6a:
01:ab:16:71:16:26:9b:b7:51:97:73:24:8d:19:13:72:83:7c:
40:5e:56:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:04:26 2024 by rpki-client on console-fra.rpki-client.org