Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/naLWqWY7adsifnPH9ksCmCZZ42o.roa
File: naLWqWY7adsifnPH9ksCmCZZ42o.roa (raw, json)
Hash identifier: mu5jGFfpCy3ESJ2i88ZqXPwC2ODMNcyIdd75MhXQ2/o=
Subject key identifier: 9D:A2:D6:A9:66:3B:69:DB:22:7E:73:C7:F6:4B:02:98:26:59:E3:6A
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 018CC49384A84277661B7DA3B27DC1843DF5
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/naLWqWY7adsifnPH9ksCmCZZ42o.roa
Signing time: Mon 01 Jan 2024 10:30:51 +0000
ROA not before: Mon 01 Jan 2024 10:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 5.157.192.0/22 maxlen: 22
5.157.196.0/22 maxlen: 22
5.157.200.0/21 maxlen: 21
5.157.208.0/21 maxlen: 21
5.157.216.0/22 maxlen: 24
5.157.220.0/22 maxlen: 24
178.157.120.0/22 maxlen: 22
5.157.132.0/22 maxlen: 22
5.157.152.0/21 maxlen: 21
5.157.168.0/22 maxlen: 24
5.157.172.0/22 maxlen: 24
5.157.232.0/21 maxlen: 21
5.157.228.0/22 maxlen: 22
5.157.248.0/21 maxlen: 21
188.119.168.0/21 maxlen: 21
188.119.184.0/22 maxlen: 22
188.119.188.0/22 maxlen: 24
178.157.68.0/22 maxlen: 22
178.157.94.0/24 maxlen: 24
178.157.100.0/24 maxlen: 24
178.157.101.0/24 maxlen: 24
178.157.112.0/21 maxlen: 21
188.74.248.0/21 maxlen: 21
37.35.48.0/22 maxlen: 22
37.35.52.0/24 maxlen: 24
188.119.128.0/20 maxlen: 24
188.74.192.0/21 maxlen: 21
188.74.200.0/21 maxlen: 21
62.216.72.0/24 maxlen: 24
62.216.73.0/24 maxlen: 24
62.216.74.0/24 maxlen: 24
62.216.75.0/24 maxlen: 24
62.216.72.0/22 maxlen: 22
62.216.80.0/24 maxlen: 24
62.216.81.0/24 maxlen: 24
62.216.82.0/24 maxlen: 24
62.216.83.0/24 maxlen: 24
188.74.216.0/21 maxlen: 21
62.216.80.0/22 maxlen: 22
188.74.224.0/21 maxlen: 21
188.74.232.0/21 maxlen: 21
62.216.92.0/24 maxlen: 24
62.216.93.0/24 maxlen: 24
62.216.94.0/24 maxlen: 24
62.216.95.0/24 maxlen: 24
188.74.144.0/22 maxlen: 22
188.74.148.0/22 maxlen: 22
188.74.160.0/21 maxlen: 21
188.74.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:84:a8:42:77:66:1b:7d:a3:b2:7d:c1:84:3d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9da2d6a9663b69db227e73c7f64b02982659e36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:c4:8f:5e:3c:59:de:d3:cf:fe:47:b9:eb:
de:6d:e1:1c:e7:d8:9c:cc:cb:c7:db:d3:09:6e:87:
ac:d2:7c:23:24:22:b0:d0:05:eb:75:1b:2e:c2:d1:
0c:de:1f:45:de:e0:41:19:2e:ad:86:86:73:45:df:
35:ad:28:80:4a:90:1c:cc:23:e3:b9:cf:d3:5e:43:
50:cb:1e:51:51:f8:cc:ea:1e:6e:d6:cb:23:25:51:
c1:ef:bf:86:d7:66:13:8c:8d:d8:9d:c1:12:98:9e:
74:f7:b2:c8:5b:12:7f:a5:d4:4a:7a:55:e1:fd:26:
e2:5f:b8:2d:20:87:e3:b1:04:de:4f:ee:ab:ed:ad:
54:c2:4f:b4:46:b6:1f:7e:63:89:88:ab:7f:0b:c3:
6a:65:cc:39:83:5b:f4:a7:93:c6:c5:14:63:06:2c:
76:9f:bc:9b:d8:4e:6d:be:b3:4c:93:81:0a:8d:80:
32:68:a3:03:77:cf:90:ad:33:fe:c1:5e:fc:17:4a:
26:86:03:71:df:fb:ef:93:e9:9c:12:a2:4a:41:3d:
b1:21:ba:5c:b3:10:6f:2a:98:81:f1:c5:39:81:13:
8c:29:82:8b:fc:07:84:d4:2a:d4:8b:be:c9:f2:ff:
7c:ef:23:b0:8c:5e:1a:6f:07:08:31:f2:1d:6b:c6:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A2:D6:A9:66:3B:69:DB:22:7E:73:C7:F6:4B:02:98:26:59:E3:6A
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/naLWqWY7adsifnPH9ksCmCZZ42o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.132.0/22
5.157.152.0/21
5.157.168.0/21
5.157.192.0/19
5.157.228.0-5.157.239.255
5.157.248.0/21
37.35.48.0-37.35.52.255
62.216.72.0/22
62.216.80.0/22
62.216.92.0/22
178.157.68.0/22
178.157.94.0/24
178.157.100.0/23
178.157.112.0-178.157.123.255
188.74.144.0/21
188.74.160.0/21
188.74.184.0/22
188.74.192.0/20
188.74.216.0-188.74.239.255
188.74.248.0/21
188.119.128.0/20
188.119.168.0/21
188.119.184.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:02:68:24:91:74:82:b0:19:39:57:75:22:44:b3:98:70:de:
96:15:ea:7c:53:7e:9f:d5:64:4a:95:8d:cf:af:3b:9e:a0:ba:
91:e9:76:5c:4b:88:ce:97:52:5c:65:fc:dc:fc:0f:58:83:0b:
1b:d3:25:59:42:3d:f0:89:76:1c:2c:8c:7f:c5:4f:f0:54:c7:
f5:59:7d:93:a2:83:52:b6:1b:5b:8e:47:43:ac:b4:da:31:e7:
4d:ea:e4:16:e3:e4:b1:7a:a2:9d:cc:9c:1c:83:60:81:9a:8f:
d5:5b:78:88:8e:55:a0:14:6f:86:38:17:74:56:35:20:85:6e:
d9:fb:9a:66:e2:74:bf:82:24:36:68:12:e9:74:9c:0c:25:f6:
68:37:0c:1e:07:92:c2:2b:3e:7a:75:6c:05:2b:fa:76:de:3d:
8b:6a:7d:d8:1b:22:c9:fc:d8:9a:09:0b:a0:30:c3:bc:b8:87:
54:03:f6:b6:7d:7f:5e:81:6f:f2:bc:69:44:b1:a8:e2:2c:ac:
34:13:e7:51:da:6d:95:07:33:ae:8d:e4:ef:b5:1d:c6:f3:5e:
bb:9e:07:e2:b9:ec:8d:d9:57:cf:9f:8a:b0:57:83:ce:2a:f9:
5e:12:88:63:6f:02:c1:3c:21:bf:3d:0e:10:e3:c2:b0:9c:20:
cd:12:81:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:54:46 2024 by rpki-client on console-ams.rpki-client.org