Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/tBwzMtLmUrznA3o9iWVhs3q0-Qc.roa
File: tBwzMtLmUrznA3o9iWVhs3q0-Qc.roa (raw, json)
Hash identifier: l1Wvd2BjrIdl7g4P1jMDwHIS4nKbw9Lptj67dvKquF4=
Subject key identifier: B4:1C:33:32:D2:E6:52:BC:E7:03:7A:3D:89:65:61:B3:7A:B4:F9:07
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 018CC793394A9CDB9E2476CD63BF8C9446A9
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/tBwzMtLmUrznA3o9iWVhs3q0-Qc.roa
Signing time: Tue 02 Jan 2024 00:29:23 +0000
ROA not before: Tue 02 Jan 2024 00:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 185.132.125.0/24 maxlen: 24
45.136.196.0/24 maxlen: 24
45.136.197.0/24 maxlen: 24
45.136.198.0/24 maxlen: 24
45.136.199.0/24 maxlen: 24
176.97.64.0/23 maxlen: 23
185.87.148.0/23 maxlen: 23
188.116.22.0/24 maxlen: 24
195.54.171.0/24 maxlen: 24
176.97.70.0/23 maxlen: 23
176.97.68.0/23 maxlen: 23
176.97.66.0/23 maxlen: 23
176.97.72.0/24 maxlen: 24
176.97.73.0/24 maxlen: 24
176.97.75.0/24 maxlen: 24
176.97.76.0/24 maxlen: 24
176.97.77.0/24 maxlen: 24
176.97.78.0/24 maxlen: 24
5.61.62.0/23 maxlen: 23
5.61.60.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:39:4a:9c:db:9e:24:76:cd:63:bf:8c:94:46:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 2 00:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b41c3332d2e652bce7037a3d896561b37ab4f907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:59:3f:ea:81:aa:f1:14:0e:5f:11:74:e4:29:
b6:dc:f6:2d:62:14:b1:24:f7:22:4b:ce:f8:79:3a:
29:1e:1c:7d:7c:ec:b9:72:65:e4:d3:8a:6c:c3:85:
48:73:da:9e:87:c8:07:d5:0f:46:6b:06:39:a7:55:
10:31:07:94:18:74:39:66:34:81:b4:0f:3b:b8:11:
15:ad:a9:e5:65:aa:05:98:18:8f:ef:6f:bc:60:d5:
a9:db:9d:38:c4:f6:5f:71:c2:70:b8:71:24:11:b9:
bb:e4:82:d0:29:7a:83:8d:bf:50:87:34:74:2c:9e:
99:16:64:22:df:f2:d2:9a:39:e1:af:bf:b4:24:e0:
de:51:8d:1c:9c:c5:5a:69:da:d6:e4:62:1d:fa:4a:
53:93:09:5f:8a:af:c5:e6:f9:99:d0:08:50:90:35:
09:0d:2c:fe:ea:7b:90:69:ac:74:ed:5d:35:80:b6:
1c:85:9a:fa:15:4b:43:03:93:00:85:8b:ca:66:6c:
b9:09:2d:5e:6f:73:2b:01:63:99:92:56:05:88:79:
af:a0:3d:66:99:57:50:67:7d:2f:da:4e:0f:12:ee:
38:4a:c4:d1:3a:fa:c6:ed:93:cf:6f:a6:c0:f0:06:
3b:0f:15:18:7f:84:e3:d4:af:a7:9f:06:c1:62:c4:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1C:33:32:D2:E6:52:BC:E7:03:7A:3D:89:65:61:B3:7A:B4:F9:07
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/tBwzMtLmUrznA3o9iWVhs3q0-Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.60.0/22
45.136.196.0/22
176.97.64.0-176.97.73.255
176.97.75.0-176.97.78.255
185.87.148.0/23
185.132.125.0/24
188.116.22.0/24
195.54.171.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:0e:81:70:dc:26:de:cd:6e:84:1c:63:06:87:8d:87:15:d2:
13:e5:bc:1b:a7:4b:ac:5d:f0:48:89:35:74:d2:bf:43:e5:ef:
37:16:7d:bd:bf:d5:cc:96:f5:18:fd:72:fe:5f:c8:52:12:1b:
d0:9c:cd:87:dd:6c:a9:6a:6e:61:eb:a4:ae:3e:b1:5e:1b:01:
36:39:ea:34:84:a2:97:49:f1:a1:26:53:06:f3:17:81:ff:3e:
c5:70:63:71:e7:d4:de:df:ee:29:c5:8f:f5:3b:eb:95:67:83:
39:6d:c6:a9:82:e3:57:90:19:1e:9c:a1:2b:88:50:5f:d7:85:
bc:56:d3:1a:b3:6a:3f:2f:fc:b5:84:4b:b4:68:6b:3f:5c:4f:
c0:03:4c:b8:84:63:d7:98:df:d9:c4:48:73:f8:e3:c9:66:bf:
20:ee:68:c4:40:b7:47:af:2d:b7:01:bf:60:0d:32:f1:da:1b:
83:ec:47:80:0e:82:78:d2:2e:17:a1:0a:b6:49:eb:db:6b:05:
66:2a:5e:56:60:12:e2:68:f8:ab:1c:e3:d2:0f:1e:83:ac:50:
b3:1b:bd:52:2b:d0:b5:e4:01:77:3b:d1:1f:80:5d:72:be:74:
da:e1:91:94:19:02:78:53:a7:72:e4:9f:9f:36:e1:83:9c:36:
ad:b5:7d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:25:52 2024 by rpki-client on console-ams.rpki-client.org