Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/padjlhvmgnxdGyP5SQ5QAL1hmLg.roa
File: padjlhvmgnxdGyP5SQ5QAL1hmLg.roa (raw, json)
Hash identifier: dpxVJe3S/ubZABLPcrcJHPLjJjwCMoF9RRevoIx09ZI=
Subject key identifier: A5:A7:63:96:1B:E6:82:7C:5D:1B:23:F9:49:0E:50:00:BD:61:98:B8
Certificate issuer: /CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Certificate serial: 018CC80265CB72637A31F4BE6B0D065443F8
Authority key identifier: 5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/padjlhvmgnxdGyP5SQ5QAL1hmLg.roa
Signing time: Tue 02 Jan 2024 02:30:49 +0000
ROA not before: Tue 02 Jan 2024 02:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25424
IP address blocks: 212.111.0.0/19 maxlen: 19
185.157.196.0/22 maxlen: 22
85.92.32.0/19 maxlen: 19
188.244.48.0/20 maxlen: 20
37.9.192.0/21 maxlen: 21
91.109.32.0/21 maxlen: 21
77.92.192.0/19 maxlen: 19
2a0a:3340::/29 maxlen: 29
2a00:e580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:65:cb:72:63:7a:31:f4:be:6b:0d:06:54:43:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Validity
Not Before: Jan 2 02:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5a763961be6827c5d1b23f9490e5000bd6198b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:30:68:2d:d7:4f:b0:fa:e2:87:97:e0:c7:05:
06:53:e2:e2:5e:08:0f:de:8e:19:d4:9e:90:4d:df:
a1:f0:18:6a:37:1e:4c:26:8e:35:be:19:18:f2:56:
72:aa:d8:6f:86:3e:55:35:15:a3:dd:66:6e:39:b2:
12:4a:b3:91:b1:9a:c8:4a:a6:d6:55:09:83:74:d4:
bd:ca:80:84:5d:3f:0d:87:b3:86:1c:2d:b2:b6:bf:
cf:e7:21:5f:a9:cf:7f:ba:59:32:31:cc:27:ca:75:
a8:88:af:33:3b:10:79:8b:cb:63:2e:77:ad:09:dd:
f1:60:dc:d3:88:8c:08:cc:58:8e:59:c6:69:84:c8:
50:85:da:f6:c8:28:a8:b6:3a:a4:5a:59:90:8c:cd:
1f:10:1f:db:bf:90:17:b2:a4:de:a3:86:22:ec:81:
56:c5:4e:61:e9:39:0d:24:b2:d0:65:7e:43:50:92:
25:ec:05:76:65:59:81:79:38:5b:b1:b5:68:7d:58:
d3:12:13:7e:32:f2:e5:dd:b6:1b:2a:c2:dc:0f:60:
c1:ba:00:0a:a6:8a:0d:f4:67:ed:75:4c:7d:48:ef:
5f:4e:73:e2:50:7f:ce:b2:48:12:20:b2:31:33:18:
e4:92:65:c1:a2:1a:1c:6e:a0:00:51:2c:be:48:84:
3e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A7:63:96:1B:E6:82:7C:5D:1B:23:F9:49:0E:50:00:BD:61:98:B8
X509v3 Authority Key Identifier:
keyid:5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/padjlhvmgnxdGyP5SQ5QAL1hmLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.192.0/21
77.92.192.0/19
85.92.32.0/19
91.109.32.0/21
185.157.196.0/22
188.244.48.0/20
212.111.0.0/19
IPv6:
2a00:e580::/29
2a0a:3340::/29
Signature Algorithm: sha256WithRSAEncryption
9f:36:73:3c:bc:63:be:dc:ed:23:3d:e1:33:d3:d8:5d:06:c4:
aa:eb:c4:19:66:e7:91:03:32:9f:2d:6f:0c:d6:d4:f4:a3:f9:
19:91:3d:8c:7c:00:ea:39:0b:7e:3f:1b:11:e7:64:23:99:39:
b4:c7:94:b6:37:32:88:02:50:68:e8:1b:0c:cd:cb:e4:cd:d6:
71:f9:65:28:23:e5:fe:f4:08:f2:7f:ab:0a:75:ae:42:7b:3d:
69:cd:dc:25:74:e3:84:da:84:23:64:54:71:ba:9b:27:d2:63:
4c:96:cb:fa:8e:3c:a0:5a:2f:26:ee:2f:9c:04:a2:db:3a:7e:
96:fb:c5:6f:84:6a:5d:58:81:4f:1f:70:f6:b1:17:71:c7:5e:
a0:53:9a:af:6b:38:68:aa:d0:8d:97:a3:6f:b0:45:7a:ee:4a:
13:d3:b9:83:12:a4:7d:35:41:48:0c:db:53:d9:b4:d7:cc:e5:
fe:c4:ed:a3:ff:79:e6:ad:62:09:34:34:05:5a:81:4a:e5:e3:
1d:9e:ff:16:c1:72:63:1d:42:1b:87:ee:d3:dc:85:e2:7c:e4:
8b:55:0e:eb:85:f9:24:fb:9e:30:5a:9f:ac:81:7f:23:a5:6e:
e7:2a:5f:da:72:ef:c6:f0:28:f3:5d:d5:74:69:3e:4e:c1:9d:
23:7d:24:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:04:39 2024 by rpki-client on console-ams.rpki-client.org