Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/lReJHlbhxatC7rA5pnMo6pC3_Uk.roa
File: lReJHlbhxatC7rA5pnMo6pC3_Uk.roa (raw, json)
Hash identifier: X2La2BINqECQmKaVWcU9REWRoiDWbAmnxNuaR6XxDG4=
Subject key identifier: 95:17:89:1E:56:E1:C5:AB:42:EE:B0:39:A6:73:28:EA:90:B7:FD:49
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 018E80B404A0C084EDBBC069827D6BD34F65
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/lReJHlbhxatC7rA5pnMo6pC3_Uk.roa
Signing time: Wed 27 Mar 2024 16:17:45 +0000
ROA not before: Wed 27 Mar 2024 16:17:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51088
IP address blocks: 5.10.192.0/24 maxlen: 24
31.41.255.0/24 maxlen: 24
31.134.200.0/21 maxlen: 21
46.244.0.0/19 maxlen: 19
46.244.96.0/19 maxlen: 19
62.3.55.0/24 maxlen: 24
77.246.245.0/24 maxlen: 24
146.19.97.0/24 maxlen: 24
178.249.152.0/21 maxlen: 21
185.51.52.0/23 maxlen: 23
185.205.52.0/22 maxlen: 22
212.24.126.0/24 maxlen: 24
2a02:1668::/32 maxlen: 32
2a02:166a::/32 maxlen: 32
2a02:166b::/32 maxlen: 32
2a05:2900::/29 maxlen: 29
2a06:2600::/29 maxlen: 32
2a06:2600::/32 maxlen: 32
2a06:2602::/32 maxlen: 32
2a0a:e80::/29 maxlen: 29
2a0b:1c0::/29 maxlen: 29
2a0f:ba00::/29 maxlen: 29
2a13:800::/29 maxlen: 29
2a13:2c00::/29 maxlen: 29
2a13:3400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:b4:04:a0:c0:84:ed:bb:c0:69:82:7d:6b:d3:4f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Mar 27 16:17:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9517891e56e1c5ab42eeb039a67328ea90b7fd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:85:88:28:3a:ec:64:51:f6:1a:09:17:f5:1d:
2d:f8:97:3c:b4:ba:d0:98:e8:83:ef:8f:6a:47:2b:
e7:93:82:8d:1f:18:3a:8d:2a:67:7d:d7:58:c5:be:
a6:39:99:51:b2:75:27:56:5f:ff:f2:86:cb:df:c7:
1a:6d:fe:22:99:db:78:b5:82:74:12:ac:6b:d7:b4:
19:91:4b:15:33:fa:f8:32:41:0d:6d:7d:6b:6a:9f:
ab:df:62:85:7e:8e:77:70:46:de:2a:b7:b3:a6:ad:
d9:9a:3c:de:73:dc:a9:50:52:fc:c0:cf:b9:12:cd:
43:21:f0:87:74:ee:ba:b8:57:0b:6e:90:66:91:39:
e2:a9:17:8e:ad:e0:76:ef:9a:e6:ce:dd:fd:be:7a:
8a:d8:8c:52:14:55:bb:4e:40:bf:5d:00:10:a9:4c:
c0:d7:b7:c7:da:0f:c8:0d:58:46:7b:4d:6d:9d:67:
14:4b:30:b9:df:92:2f:27:d5:c4:e0:0f:80:42:66:
5f:60:a8:9e:12:09:1a:7a:92:d8:3e:b9:3e:7b:fb:
19:91:cc:b9:55:ca:ca:20:b1:04:de:f5:8d:33:df:
d0:e1:e7:60:d0:c6:5c:43:de:9e:db:cb:8b:d8:8d:
48:13:a6:47:f8:5c:41:be:85:f5:64:d0:89:ed:30:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:17:89:1E:56:E1:C5:AB:42:EE:B0:39:A6:73:28:EA:90:B7:FD:49
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/lReJHlbhxatC7rA5pnMo6pC3_Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.192.0/24
31.41.255.0/24
31.134.200.0/21
46.244.0.0/19
46.244.96.0/19
62.3.55.0/24
77.246.245.0/24
146.19.97.0/24
178.249.152.0/21
185.51.52.0/23
185.205.52.0/22
212.24.126.0/24
IPv6:
2a02:1668::/32
2a02:166a::/31
2a05:2900::/29
2a06:2600::/29
2a0a:e80::/29
2a0b:1c0::/29
2a0f:ba00::/29
2a13:800::/29
2a13:2c00::/29
2a13:3400::/29
Signature Algorithm: sha256WithRSAEncryption
83:56:94:ac:24:83:4c:63:e3:8b:2a:86:85:36:68:ad:4e:06:
e3:2a:20:bb:62:ff:a7:06:e7:fb:c3:72:79:06:21:c8:1c:eb:
54:7a:ae:51:24:e3:f4:36:ce:5d:ef:33:96:cd:45:9a:d8:31:
3a:41:d3:ac:36:e4:91:2b:0d:14:42:1a:2a:cd:e5:12:8f:a4:
20:ef:1f:52:ca:42:e7:f1:ba:c3:33:c4:9d:ac:e7:bb:2f:90:
b5:42:31:42:4b:c8:1b:99:f5:93:f9:9b:75:30:26:87:d7:64:
53:a5:df:7f:86:f8:e9:71:23:b6:44:70:14:bd:50:e6:04:d3:
e4:4e:9c:3b:9a:a7:af:29:95:1a:f3:c7:6e:5a:cf:88:9a:ad:
e1:e7:09:00:b2:f1:a9:d9:e5:35:7a:e6:ef:a3:11:6e:ed:c7:
a7:7a:cd:10:10:29:99:4c:bb:4b:c6:f7:1f:45:52:1f:6a:32:
45:6f:eb:6c:51:1e:5f:c5:25:a3:d0:ce:ae:dc:f6:26:cf:d7:
0e:3b:5f:e9:da:df:be:04:0d:ed:6a:b7:c5:58:0d:94:90:a2:
d1:94:34:97:10:7b:a5:67:73:a3:20:24:ee:67:4f:97:49:1f:
6f:a8:a4:fb:1c:88:c3:d9:d0:2c:e8:74:fe:b5:ee:c8:f2:07:
b8:8d:a9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:49:08 2024 by rpki-client on console-ams.rpki-client.org