Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/IDyhyfvEkCGFwmYFm-Skls2jo-o.roa
File: IDyhyfvEkCGFwmYFm-Skls2jo-o.roa (raw, json)
Hash identifier: oYYxpEzFX1HWnwIPjlDnfP/2iEXz3+/WVrPQJCuYUbI=
Subject key identifier: 20:3C:A1:C9:FB:C4:90:21:85:C2:66:05:9B:E4:A4:96:CD:A3:A3:EA
Certificate issuer: /CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Certificate serial: 018CC56E1DB88D2BE129C84C85EB688C5B2F
Authority key identifier: E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/IDyhyfvEkCGFwmYFm-Skls2jo-o.roa
Signing time: Mon 01 Jan 2024 14:29:37 +0000
ROA not before: Mon 01 Jan 2024 14:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59847
IP address blocks: 5.149.89.0/24 maxlen: 24
5.149.88.0/23 maxlen: 23
5.149.88.0/24 maxlen: 24
5.149.91.0/24 maxlen: 24
5.149.90.0/23 maxlen: 23
5.149.90.0/24 maxlen: 24
185.69.28.0/22 maxlen: 22
185.69.28.0/24 maxlen: 24
185.69.30.0/24 maxlen: 24
185.69.29.0/24 maxlen: 24
185.69.31.0/24 maxlen: 24
109.94.104.0/24 maxlen: 24
109.94.105.0/24 maxlen: 24
109.94.107.0/24 maxlen: 24
109.94.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1d:b8:8d:2b:e1:29:c8:4c:85:eb:68:8c:5b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Validity
Not Before: Jan 1 14:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=203ca1c9fbc4902185c266059be4a496cda3a3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:93:77:fc:73:3c:b0:8f:84:31:c7:da:86:
5d:5e:d7:32:0a:04:75:b0:a4:8a:70:71:49:c4:7e:
06:dd:44:28:a0:cf:d9:f9:c4:9d:9c:31:bf:d1:04:
19:b0:ca:a5:98:27:a0:b4:79:ab:28:8d:45:21:d1:
8a:75:36:16:7c:aa:97:43:76:78:1d:86:7b:81:05:
e6:1c:83:d0:58:d8:ad:d3:83:dd:6f:d5:49:0b:81:
82:81:39:3a:9b:51:27:59:32:94:12:9d:75:f8:58:
55:f9:b7:78:af:a2:6b:6b:a4:11:12:f5:99:1b:3e:
11:c0:f8:84:c3:e0:2b:0d:0c:d4:05:16:ba:a6:37:
00:8c:b4:b3:d8:81:3c:1f:72:a7:36:31:b6:69:7a:
7d:e1:b1:63:06:08:f7:13:34:ce:2d:8e:7a:d1:6d:
b1:b4:71:29:ce:29:10:53:e1:0d:97:26:4e:3f:30:
01:98:ea:d2:bd:e7:c5:c8:c8:9b:94:9b:d1:3f:47:
ab:06:2a:10:03:a4:59:f5:50:4c:5c:62:6e:9b:85:
6a:da:25:2f:fe:8c:22:82:21:a4:d1:c4:89:ad:7b:
56:9c:cd:bf:ee:4f:60:1c:a9:65:f2:b5:f5:e7:4b:
1c:ad:c3:b9:a0:6f:13:2c:35:80:5e:c4:f6:89:62:
e8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3C:A1:C9:FB:C4:90:21:85:C2:66:05:9B:E4:A4:96:CD:A3:A3:EA
X509v3 Authority Key Identifier:
keyid:E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/IDyhyfvEkCGFwmYFm-Skls2jo-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.88.0/22
109.94.104.0/22
185.69.28.0/22
Signature Algorithm: sha256WithRSAEncryption
78:d3:fd:cc:9a:56:37:14:5f:88:15:77:61:28:e6:14:72:1f:
d5:86:f7:5c:74:41:3a:fa:ad:5f:92:7a:1f:c5:e7:95:5c:d1:
f3:75:8d:d8:17:1a:ff:c4:eb:8e:bc:9c:b4:bd:6b:6d:d3:39:
8b:af:08:4e:c9:86:a7:dd:77:38:c7:10:e0:50:f9:68:be:b0:
8d:f3:7f:8e:9d:14:38:c8:09:4f:a4:66:d8:b4:ea:e0:55:c5:
36:0e:86:bb:13:5b:f0:31:03:19:b8:00:b0:93:d3:06:dc:4c:
54:74:c4:10:a8:cd:3e:ff:f5:20:40:09:72:33:a2:c1:e0:74:
7a:3c:f3:5e:79:c3:a2:36:b0:8a:f1:c2:41:d7:1d:61:5e:0f:
f6:c7:6c:74:46:f6:71:cf:a7:44:e0:3b:88:00:d0:a1:43:43:
b5:4e:05:3c:9a:6c:d9:9c:7c:06:f6:a2:8a:86:55:40:6c:48:
dc:7d:e9:8e:51:f4:d4:ab:7e:e9:dc:77:8b:ea:f9:6c:49:3e:
31:a0:c3:6f:b0:b1:59:a7:de:ee:2f:b6:34:2f:cb:0d:7d:57:
6e:81:f7:9c:60:6c:de:53:c7:d3:b9:67:cf:d0:6c:31:22:99:
b7:bc:48:dc:f9:46:e1:d8:0c:38:e0:b0:ce:34:65:62:b2:9b:
0e:c5:84:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 10:26:19 2024 by rpki-client on console-fra.rpki-client.org