Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/bJVc9zAd9AP2Vr5Dh7KMduwPsew.roa
File: bJVc9zAd9AP2Vr5Dh7KMduwPsew.roa (raw, json)
Hash identifier: a4RcmfDoPOvVVF2FwtTk1B+7/sVEXPDi/ADMYpBihHo=
Subject key identifier: 6C:95:5C:F7:30:1D:F4:03:F6:56:BE:43:87:B2:8C:76:EC:0F:B1:EC
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 0190A2BD6C6814A6DC48E2F1E0956B08C516
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/bJVc9zAd9AP2Vr5Dh7KMduwPsew.roa
Signing time: Thu 11 Jul 2024 17:00:41 +0000
ROA not before: Thu 11 Jul 2024 17:00:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 5.182.100.0/24 maxlen: 24
5.182.101.0/24 maxlen: 24
45.14.72.0/24 maxlen: 24
45.84.44.0/24 maxlen: 24
45.84.45.0/24 maxlen: 24
45.84.47.0/24 maxlen: 24
45.157.74.0/23 maxlen: 23
85.8.188.0/24 maxlen: 24
85.8.189.0/24 maxlen: 24
85.8.190.0/23 maxlen: 23
85.209.216.0/24 maxlen: 24
85.209.218.0/23 maxlen: 23
88.218.100.0/24 maxlen: 24
88.218.101.0/24 maxlen: 24
88.218.102.0/23 maxlen: 23
92.119.180.0/24 maxlen: 24
92.119.181.0/24 maxlen: 24
92.119.183.0/24 maxlen: 24
139.28.137.0/24 maxlen: 24
139.28.138.0/23 maxlen: 23
141.98.240.0/24 maxlen: 24
141.98.241.0/24 maxlen: 24
141.98.242.0/23 maxlen: 23
193.31.72.0/24 maxlen: 24
193.31.73.0/24 maxlen: 24
193.31.75.0/24 maxlen: 24
194.5.0.0/22 maxlen: 22
194.124.52.0/22 maxlen: 22
195.206.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a2:bd:6c:68:14:a6:dc:48:e2:f1:e0:95:6b:08:c5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jul 11 17:00:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c955cf7301df403f656be4387b28c76ec0fb1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:16:3b:64:7b:20:06:ea:16:6d:38:1c:62:
fa:44:4a:cb:62:70:56:bb:52:0c:a2:c0:d9:d3:19:
67:35:2c:46:f0:0e:23:72:b6:2d:63:b3:e4:17:af:
a5:b5:95:d6:76:5e:3a:64:3f:bd:e0:02:6e:69:d8:
93:aa:b7:c2:e8:58:7a:1d:a3:96:6b:ab:17:86:1e:
ef:be:c5:c3:41:76:dd:9a:52:dc:1d:63:69:1e:f1:
2a:ad:ae:82:0a:3d:36:77:c3:2e:50:88:e1:20:d8:
dc:7e:dd:8e:dd:6e:da:f0:44:3b:b5:59:ba:7e:cb:
34:88:71:1d:6f:86:7b:6e:9b:f8:30:ac:2c:57:8a:
2f:d3:e8:9a:66:7f:31:92:25:01:b0:f9:92:0a:0d:
b6:8b:c8:6e:df:53:76:dd:dc:f2:4e:e6:68:7a:43:
bd:b0:22:2a:84:aa:01:c6:07:74:58:5c:c3:c7:8f:
fc:5f:d3:85:fb:03:30:1e:ef:7b:31:39:27:c0:d1:
10:ae:64:fd:fd:39:c3:a5:c6:50:c2:6f:f6:9c:8a:
91:2e:71:5b:b0:5f:2e:11:f2:2f:c1:42:e9:23:26:
90:1e:66:77:b5:f7:ee:34:a9:c9:6b:46:05:26:55:
13:d4:9f:37:7a:9c:a5:43:a2:2e:01:77:5a:fb:d6:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:95:5C:F7:30:1D:F4:03:F6:56:BE:43:87:B2:8C:76:EC:0F:B1:EC
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/bJVc9zAd9AP2Vr5Dh7KMduwPsew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.100.0/23
45.14.72.0/24
45.84.44.0/23
45.84.47.0/24
45.157.74.0/23
85.8.188.0/22
85.209.216.0/24
85.209.218.0/23
88.218.100.0/22
92.119.180.0/23
92.119.183.0/24
139.28.137.0-139.28.139.255
141.98.240.0/22
193.31.72.0/23
193.31.75.0/24
194.5.0.0/22
194.124.52.0/22
195.206.108.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f8:e2:2d:0f:e9:66:bb:92:01:43:79:9e:b5:f9:ec:03:18:
dd:e6:86:d4:7b:65:08:37:a7:01:3c:7c:4e:29:70:4f:d0:90:
4e:9b:4c:e9:be:b8:e3:5b:9c:fd:f6:da:2c:9b:0f:13:00:ca:
1e:9e:f7:31:92:6c:e5:b7:b6:f9:49:96:a7:e1:83:c3:5e:11:
d3:d9:17:d4:c8:b6:f7:c7:10:d5:d5:bd:94:06:46:0b:df:c4:
91:8b:d0:0a:92:14:e8:9a:50:34:f7:07:8e:c4:e5:7d:f2:23:
0c:0a:36:d9:d8:6c:18:0c:8c:0f:0d:71:a8:61:22:e6:27:1c:
c0:32:f0:2c:cf:34:34:3c:c3:f8:9c:06:4d:a7:9d:c5:56:79:
b9:35:62:1f:12:6e:aa:80:e6:d9:37:6f:d0:f5:23:7a:aa:31:
bf:86:c9:22:71:06:de:db:af:2a:bc:d0:0f:27:d9:b2:f2:55:
f1:03:5a:00:08:f2:40:b3:e8:0e:31:78:83:50:a3:aa:60:31:
99:71:fe:1d:fe:21:e2:75:b3:12:41:e1:b0:0c:ff:6d:52:fc:
c0:25:23:40:d1:05:7f:50:25:67:51:c6:7c:17:86:80:f2:e7:
5f:94:01:70:48:95:2a:83:dc:51:1b:8d:3e:b8:85:f4:4b:2e:
14:43:4d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:26 2024 by rpki-client on console-fra.rpki-client.org