Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/EUOyEQRth8-Nq5zHPUFGmIks3fA.roa
File: EUOyEQRth8-Nq5zHPUFGmIks3fA.roa (raw, json)
Hash identifier: 6KvxVxVHmUGPbL8xu5v4egbxG2QHmTJhKt8WkiPOPKM=
Subject key identifier: 11:43:B2:11:04:6D:87:CF:8D:AB:9C:C7:3D:41:46:98:89:2C:DD:F0
Certificate issuer: /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial: 01900CD8D1CC9B2C1E9115AC884B9DF09F66
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/EUOyEQRth8-Nq5zHPUFGmIks3fA.roa
Signing time: Wed 12 Jun 2024 14:27:34 +0000
ROA not before: Wed 12 Jun 2024 14:27:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 151.186.144.0/20 maxlen: 24
151.186.144.0/24 maxlen: 24
151.186.145.0/24 maxlen: 24
151.186.146.0/24 maxlen: 24
151.186.147.0/24 maxlen: 24
151.186.148.0/24 maxlen: 24
151.186.149.0/24 maxlen: 24
151.186.150.0/24 maxlen: 24
151.186.151.0/24 maxlen: 24
151.186.152.0/24 maxlen: 24
151.186.153.0/24 maxlen: 24
151.186.154.0/24 maxlen: 24
151.186.155.0/24 maxlen: 24
151.186.156.0/24 maxlen: 24
151.186.157.0/24 maxlen: 24
151.186.158.0/24 maxlen: 24
151.186.159.0/24 maxlen: 24
151.186.160.0/21 maxlen: 24
151.186.160.0/24 maxlen: 24
151.186.161.0/24 maxlen: 24
151.186.162.0/24 maxlen: 24
151.186.163.0/24 maxlen: 24
151.186.164.0/24 maxlen: 24
151.186.165.0/24 maxlen: 24
151.186.166.0/24 maxlen: 24
151.186.167.0/24 maxlen: 24
151.186.168.0/22 maxlen: 24
151.186.168.0/24 maxlen: 24
151.186.169.0/24 maxlen: 24
151.186.170.0/24 maxlen: 24
151.186.171.0/24 maxlen: 24
151.186.172.0/22 maxlen: 24
151.186.172.0/24 maxlen: 24
151.186.173.0/24 maxlen: 24
151.186.174.0/24 maxlen: 24
151.186.175.0/24 maxlen: 24
151.186.176.0/20 maxlen: 24
151.186.176.0/24 maxlen: 24
151.186.177.0/24 maxlen: 24
151.186.178.0/24 maxlen: 24
151.186.179.0/24 maxlen: 24
151.186.180.0/24 maxlen: 24
151.186.181.0/24 maxlen: 24
151.186.182.0/24 maxlen: 24
151.186.183.0/24 maxlen: 24
151.186.184.0/24 maxlen: 24
151.186.185.0/24 maxlen: 24
151.186.186.0/24 maxlen: 24
151.186.187.0/24 maxlen: 24
151.186.188.0/24 maxlen: 24
151.186.189.0/24 maxlen: 24
151.186.190.0/24 maxlen: 24
151.186.191.0/24 maxlen: 24
151.186.192.0/20 maxlen: 24
151.186.192.0/24 maxlen: 24
151.186.193.0/24 maxlen: 24
151.186.194.0/24 maxlen: 24
151.186.195.0/24 maxlen: 24
151.186.196.0/24 maxlen: 24
151.186.197.0/24 maxlen: 24
151.186.198.0/24 maxlen: 24
151.186.199.0/24 maxlen: 24
151.186.200.0/24 maxlen: 24
151.186.201.0/24 maxlen: 24
151.186.202.0/24 maxlen: 24
151.186.203.0/24 maxlen: 24
151.186.204.0/24 maxlen: 24
151.186.205.0/24 maxlen: 24
151.186.206.0/24 maxlen: 24
151.186.207.0/24 maxlen: 24
2a04:e4c4:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0c:d8:d1:cc:9b:2c:1e:91:15:ac:88:4b:9d:f0:9f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Validity
Not Before: Jun 12 14:27:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1143b211046d87cf8dab9cc73d414698892cddf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:46:8b:43:f1:0e:77:36:19:13:48:e3:e4:
74:72:8e:43:3d:7a:88:bd:10:09:d0:99:70:5a:b5:
f4:45:62:62:bd:75:a5:d6:04:80:c3:03:bd:aa:25:
42:c4:52:c7:ef:58:78:e7:35:a0:44:a9:65:52:9a:
40:4e:ae:1a:0f:2d:9f:29:12:e9:93:01:a6:0f:8a:
fb:4a:b7:75:1e:6f:8d:eb:47:ff:dc:ae:c7:95:64:
a7:e5:04:e2:d6:50:c4:cb:ba:49:10:ef:4d:2b:39:
ab:cf:51:69:0b:0d:b5:af:54:3f:91:4c:62:ac:e5:
cc:9f:e3:e6:a4:21:40:58:c1:1e:63:30:ea:82:bf:
5c:bb:a6:fe:8d:bb:1c:9b:4f:a8:59:4b:b8:d8:74:
8a:d2:6d:91:7c:77:b2:88:0b:2a:44:93:52:ef:55:
78:53:5d:70:77:45:12:cb:e5:e3:23:c5:4b:a2:3a:
92:8e:fb:b6:d6:f4:ac:c5:8a:7d:06:03:23:d2:9b:
3d:d4:79:06:b0:14:1c:e9:bb:ec:81:96:1f:48:f9:
30:71:e3:2e:f9:40:f3:e9:7c:05:f7:8b:7a:9e:70:
90:96:9c:a0:af:cb:e5:fb:6e:07:14:c4:89:33:84:
13:ae:56:ac:ab:e9:4d:d9:33:bb:f6:e0:89:68:20:
a2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:43:B2:11:04:6D:87:CF:8D:AB:9C:C7:3D:41:46:98:89:2C:DD:F0
X509v3 Authority Key Identifier:
keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/EUOyEQRth8-Nq5zHPUFGmIks3fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.186.144.0-151.186.207.255
IPv6:
2a04:e4c4:5::/48
Signature Algorithm: sha256WithRSAEncryption
af:ce:21:95:62:ed:bd:dc:75:89:b8:c1:41:3a:e5:4e:67:81:
5c:1b:5d:1f:38:2e:41:67:4d:66:bf:ca:94:0f:51:d1:2c:06:
80:9e:10:57:f1:0a:76:60:d5:4f:46:49:b9:18:ee:f5:f5:af:
84:61:b0:80:98:bc:f5:25:5b:73:96:a0:56:ac:bc:e1:2f:07:
d7:a0:9f:31:40:a8:06:93:86:6f:7c:29:aa:57:a0:0b:8c:e7:
70:37:1b:0b:8b:14:61:a4:43:30:85:03:a0:53:6b:4f:45:45:
37:41:a5:8b:4a:50:96:47:71:62:7b:f0:86:43:00:8b:21:72:
ec:ee:f0:7c:a4:5e:98:6c:af:4f:6e:a3:fa:7a:3f:14:99:ca:
4b:53:55:e7:d8:e5:69:ba:d7:11:84:99:61:04:ec:e0:c9:ee:
54:ea:9b:7c:71:55:96:46:4b:18:c9:ad:b7:80:44:69:90:e7:
ed:b3:fd:bc:4e:6d:56:b4:b1:99:dd:63:32:1e:8a:8b:7a:64:
b7:8d:e1:ab:21:57:c7:a9:b1:86:35:b6:28:4f:25:68:9c:70:
fa:2f:c7:63:89:1e:b5:d5:0b:c9:e0:68:48:ed:d8:1a:e7:c2:
78:62:bd:47:00:a4:f7:b0:c6:04:45:75:da:34:59:72:a8:2a:
31:06:d7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:52:42 2024 by rpki-client on console-fra.rpki-client.org