Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/hzyjak_efsJQ7xw9vmK1q72KXAw.roa
File: hzyjak_efsJQ7xw9vmK1q72KXAw.roa (raw, json)
Hash identifier: AXD5SamfIkWSIm07bod4/K0OafxPncyEfjOYePl2q0w=
Subject key identifier: 87:3C:A3:6A:4F:DE:7E:C2:50:EF:1C:3D:BE:62:B5:AB:BD:8A:5C:0C
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 018EA595DAAD6FB717EDDC6FC8B1272B0B3B
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/hzyjak_efsJQ7xw9vmK1q72KXAw.roa
Signing time: Wed 03 Apr 2024 20:10:45 +0000
ROA not before: Wed 03 Apr 2024 20:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 5.182.100.0/24 maxlen: 24
5.182.101.0/24 maxlen: 24
45.14.72.0/24 maxlen: 24
45.84.44.0/24 maxlen: 24
45.84.45.0/24 maxlen: 24
45.84.47.0/24 maxlen: 24
45.157.74.0/23 maxlen: 23
85.8.188.0/24 maxlen: 24
85.8.189.0/24 maxlen: 24
85.8.190.0/23 maxlen: 23
85.209.216.0/24 maxlen: 24
85.209.218.0/23 maxlen: 23
88.218.100.0/24 maxlen: 24
88.218.101.0/24 maxlen: 24
88.218.102.0/23 maxlen: 23
92.119.180.0/24 maxlen: 24
92.119.181.0/24 maxlen: 24
92.119.183.0/24 maxlen: 24
139.28.137.0/24 maxlen: 24
139.28.138.0/23 maxlen: 23
141.98.240.0/24 maxlen: 24
141.98.241.0/24 maxlen: 24
141.98.242.0/23 maxlen: 23
193.31.72.0/24 maxlen: 24
193.31.73.0/24 maxlen: 24
193.31.75.0/24 maxlen: 24
194.5.0.0/22 maxlen: 22
194.124.52.0/22 maxlen: 22
195.206.108.0/24 maxlen: 24
195.206.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a5:95:da:ad:6f:b7:17:ed:dc:6f:c8:b1:27:2b:0b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Apr 3 20:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=873ca36a4fde7ec250ef1c3dbe62b5abbd8a5c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:01:a1:8d:65:4b:c7:ff:e0:6f:6d:4c:24:00:
f9:49:1b:6e:35:be:d6:b8:f5:8e:9d:bb:5c:0e:38:
cc:8d:60:e4:88:b1:f1:4f:a2:d5:00:39:eb:20:0b:
c0:32:5d:97:16:3c:46:88:1b:55:e4:b8:a0:6e:a1:
e5:58:3c:31:fb:64:38:3a:05:3b:3f:5e:ee:2b:11:
fb:9b:15:ab:34:2c:54:56:5d:a2:67:2b:8d:37:b7:
4b:c6:b7:7f:35:bb:cb:b2:4d:5a:bc:d0:08:4f:96:
ff:25:bc:dd:4e:fe:dd:54:48:9d:ee:02:1a:49:62:
6d:60:39:e8:13:cc:f3:b0:40:2c:61:be:1d:92:0b:
ff:f3:b8:70:19:85:77:9e:ae:11:16:23:b8:c8:d0:
15:7c:70:97:3d:29:b6:a9:32:1a:6a:1f:e9:e4:06:
8a:a6:f3:08:ce:76:51:4a:0a:1f:36:0d:ca:db:bf:
53:50:68:33:19:c0:d0:55:39:59:8d:73:87:67:32:
92:de:8a:88:54:33:bb:75:b3:15:c9:8e:2f:d2:02:
53:56:58:7c:0c:77:b7:4b:7e:3d:c4:25:67:28:4b:
c7:52:78:9a:68:5b:09:1c:02:3f:22:ab:0b:fb:69:
b2:9f:8a:5c:f0:e5:80:88:9f:4c:18:b5:a5:e7:92:
82:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3C:A3:6A:4F:DE:7E:C2:50:EF:1C:3D:BE:62:B5:AB:BD:8A:5C:0C
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/hzyjak_efsJQ7xw9vmK1q72KXAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.100.0/23
45.14.72.0/24
45.84.44.0/23
45.84.47.0/24
45.157.74.0/23
85.8.188.0/22
85.209.216.0/24
85.209.218.0/23
88.218.100.0/22
92.119.180.0/23
92.119.183.0/24
139.28.137.0-139.28.139.255
141.98.240.0/22
193.31.72.0/23
193.31.75.0/24
194.5.0.0/22
194.124.52.0/22
195.206.108.0/23
Signature Algorithm: sha256WithRSAEncryption
47:e1:18:a8:51:53:4b:e2:3e:ed:26:03:dc:ab:62:30:0a:18:
69:57:2a:e7:97:04:6e:8a:42:d3:ba:99:61:10:28:42:69:e5:
8d:26:86:8b:a0:84:61:5a:6c:ba:7e:a3:07:d0:86:d3:d9:94:
5a:fc:c3:99:49:b7:fa:bb:88:9a:06:1a:87:ff:61:9d:3f:bc:
e0:a5:9c:fe:40:88:38:6d:30:bd:eb:8f:e4:42:36:20:73:d0:
d1:08:20:4f:e7:c7:4d:aa:8c:09:cf:e8:59:16:f6:87:5e:44:
5a:40:66:e5:b0:19:1d:b9:79:07:c1:43:4c:e0:8c:da:55:8c:
2b:6b:4c:6d:9b:01:3c:db:18:b2:1f:02:b5:b5:c5:19:49:11:
e3:db:0d:a1:d3:7f:c1:90:cf:31:36:b4:7a:20:45:48:64:e1:
f0:7d:94:a2:ab:cb:c6:48:96:32:a1:b2:e8:9b:46:48:e9:a4:
1c:f0:5f:a2:7b:ba:ba:bd:9c:ee:0d:3d:85:d5:d3:1b:6d:f9:
29:e0:cd:bd:ca:38:9d:75:eb:e0:65:20:00:2b:5d:e9:79:ef:
e9:bc:73:4c:8c:cc:99:e7:d2:dd:a4:cb:36:f3:bf:f7:f0:66:
77:f9:42:8a:4f:d2:d3:9c:98:8f:0a:bc:ee:d6:66:69:23:d1:
a0:d3:fb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:19:12 2024 by rpki-client on console-fra.rpki-client.org