Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rlLpA8UQ-IdN4pbxFOJ-dOxu3P4.roa
File: rlLpA8UQ-IdN4pbxFOJ-dOxu3P4.roa (raw, json)
Hash identifier: PRsvBdInADvDt7+XZQXZdO++L6VEiRQW4DHgqbOb708=
Subject key identifier: AE:52:E9:03:C5:10:F8:87:4D:E2:96:F1:14:E2:7E:74:EC:6E:DC:FE
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018DF91A059B0BE9C2BBFA4E287E43454632
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rlLpA8UQ-IdN4pbxFOJ-dOxu3P4.roa
Signing time: Fri 01 Mar 2024 08:20:48 +0000
ROA not before: Fri 01 Mar 2024 08:20:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 5.180.32.0/22 maxlen: 24
5.180.50.0/24 maxlen: 24
5.180.51.0/24 maxlen: 24
5.180.80.0/24 maxlen: 24
5.253.39.0/24 maxlen: 24
5.253.44.0/24 maxlen: 24
5.253.45.0/24 maxlen: 24
5.253.47.0/24 maxlen: 24
45.8.188.0/22 maxlen: 24
45.8.192.0/22 maxlen: 24
45.8.197.0/24 maxlen: 24
45.8.198.0/24 maxlen: 24
45.8.199.0/24 maxlen: 24
45.8.203.0/24 maxlen: 24
45.8.252.0/24 maxlen: 24
45.8.255.0/24 maxlen: 24
45.9.0.0/24 maxlen: 24
45.9.1.0/24 maxlen: 24
45.9.4.0/24 maxlen: 24
45.9.6.0/24 maxlen: 24
45.9.7.0/24 maxlen: 24
45.66.152.0/24 maxlen: 24
45.66.154.0/24 maxlen: 24
45.66.155.0/24 maxlen: 24
85.208.105.0/24 maxlen: 24
85.208.107.0/24 maxlen: 24
85.208.113.0/24 maxlen: 24
85.208.115.0/24 maxlen: 24
85.209.160.0/24 maxlen: 24
193.168.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:1a:05:9b:0b:e9:c2:bb:fa:4e:28:7e:43:45:46:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 1 08:20:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae52e903c510f8874de296f114e27e74ec6edcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8d:8b:4c:48:a2:ad:68:97:4c:b7:91:4b:2e:
44:cf:34:49:52:c2:59:4f:1a:b9:1e:e4:26:1b:3d:
e9:6e:e8:68:85:e9:44:39:f8:44:db:d5:1a:1f:bb:
33:bc:2e:c1:2e:6d:6d:57:c3:d1:e2:fa:d3:8e:ec:
d9:7c:93:9d:9d:dc:50:17:9d:61:4f:d7:d6:2b:52:
11:69:d3:09:66:44:c1:49:58:a8:02:30:0f:d6:d3:
7a:c5:ca:1b:14:16:f0:e8:df:87:f9:b5:6d:17:4b:
6e:2f:67:c3:7d:4f:55:00:e1:b0:9b:d9:60:47:91:
d3:ff:a5:71:bd:d3:9e:8e:e8:93:e9:b9:a6:74:57:
96:b2:ae:7c:8a:9e:6f:e5:57:22:c2:8a:38:fa:f0:
76:a4:51:a6:69:77:6f:0f:5d:c0:13:46:1b:f1:59:
23:55:dd:76:c6:32:67:22:38:02:67:c8:4f:a4:9b:
b9:ab:56:cd:f2:09:ed:c1:b3:c6:34:5c:c6:a5:85:
13:7f:1a:4c:1b:0e:6d:b5:95:0d:cd:28:67:f8:bc:
c8:6b:68:74:c1:37:8b:2a:f0:2e:90:fb:51:17:d9:
50:82:ea:be:19:64:dd:88:8d:c4:2a:1d:df:b7:68:
a2:3f:12:12:3b:97:a8:15:34:4d:43:6b:0d:7b:ed:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:52:E9:03:C5:10:F8:87:4D:E2:96:F1:14:E2:7E:74:EC:6E:DC:FE
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rlLpA8UQ-IdN4pbxFOJ-dOxu3P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.32.0/22
5.180.50.0/23
5.180.80.0/24
5.253.39.0/24
5.253.44.0/23
5.253.47.0/24
45.8.188.0-45.8.195.255
45.8.197.0-45.8.199.255
45.8.203.0/24
45.8.252.0/24
45.8.255.0-45.9.1.255
45.9.4.0/24
45.9.6.0/23
45.66.152.0/24
45.66.154.0/23
85.208.105.0/24
85.208.107.0/24
85.208.113.0/24
85.208.115.0/24
85.209.160.0/24
193.168.208.0/22
Signature Algorithm: sha256WithRSAEncryption
99:f3:df:6e:06:0a:3e:89:60:47:7a:e5:72:b2:46:0e:0d:90:
b1:a7:bb:e7:00:99:1e:7b:55:d7:05:7d:c5:e2:70:0f:06:53:
50:b6:d6:81:41:7e:91:f9:2a:c6:16:ff:0c:4c:7a:66:40:b9:
37:3f:19:37:f1:4a:98:bf:1b:bd:1a:53:e3:94:a3:2d:96:bb:
f8:b7:63:85:9c:f5:9e:65:44:54:79:8e:ac:be:c3:3e:bf:e0:
9e:cc:51:e8:ae:b6:e6:4c:20:70:b8:dd:ed:eb:4b:6c:97:7f:
d2:05:8d:e1:51:6f:5b:4b:db:8f:be:20:95:17:80:27:ac:35:
3a:fb:1e:50:45:68:00:b7:36:87:3a:45:82:3c:33:1f:7c:4d:
42:a9:f4:f2:77:4c:a1:7e:18:0a:e4:8d:be:c0:76:cd:c8:cd:
1a:8e:e4:ce:c9:4d:19:5b:20:91:65:a9:47:8d:12:4a:7c:69:
ee:05:6e:6d:51:19:7c:8c:bc:5f:56:bb:2f:a1:66:33:f2:59:
b5:50:0e:c3:0d:9a:59:a0:62:78:ed:45:3e:ce:ca:18:a7:31:
26:6a:bc:93:ce:fd:66:f7:24:0a:11:3c:9e:9b:a5:db:44:ff:
70:94:dc:f0:80:08:23:e1:9b:e8:f6:7e:4b:8d:0f:ee:6a:4c:
79:af:72:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:48:42 2024 by rpki-client on console-fra.rpki-client.org