Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/YEvlp8qE5gP0Dc_4G1wRjpQxca8.roa
File: YEvlp8qE5gP0Dc_4G1wRjpQxca8.roa (raw, json)
Hash identifier: x8gUJ9vb+QwYRO0ubk6lgb9grz+SJWTPQnQ9L/Toyfc=
Subject key identifier: 60:4B:E5:A7:CA:84:E6:03:F4:0D:CF:F8:1B:5C:11:8E:94:31:71:AF
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E03506B5E776952350A94DD52295A
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/YEvlp8qE5gP0Dc_4G1wRjpQxca8.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43444
IP address blocks: 5.188.216.0/24 maxlen: 24
5.188.218.0/24 maxlen: 24
5.188.219.0/24 maxlen: 24
37.9.40.0/24 maxlen: 24
37.9.41.0/24 maxlen: 24
37.9.42.0/24 maxlen: 24
37.9.43.0/24 maxlen: 24
37.9.44.0/24 maxlen: 24
37.9.45.0/24 maxlen: 24
37.9.46.0/24 maxlen: 24
37.9.47.0/24 maxlen: 24
146.185.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:03:50:6b:5e:77:69:52:35:0a:94:dd:52:29:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=604be5a7ca84e603f40dcff81b5c118e943171af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:0c:f9:e9:a3:38:9c:05:98:0c:3c:db:c6:
99:aa:91:03:6b:ce:ee:af:1d:5a:9e:35:d8:5a:51:
35:d8:71:c6:f2:b4:43:17:d0:8e:dd:b4:51:82:34:
ee:7c:d6:c1:f6:b1:c5:7f:40:97:e7:5f:e0:92:14:
17:56:1a:47:49:d4:97:76:a1:41:b9:b6:5a:4e:07:
a9:80:5e:24:cd:d8:67:26:21:95:e6:75:4f:6f:6f:
52:e9:3a:fd:82:15:a0:03:97:30:57:ce:f3:91:8b:
91:53:4b:64:20:41:94:75:c3:d8:8c:1c:3d:d2:3e:
47:22:7d:2e:34:bb:af:05:f0:d7:ec:1b:0a:cf:26:
be:b7:40:74:c7:24:d3:19:eb:69:2d:de:9c:c5:35:
d0:59:33:61:a6:85:c6:cf:77:90:af:3c:60:11:35:
73:7e:dc:a2:5a:77:9e:cd:6d:d5:1c:b1:61:b1:f0:
20:da:99:5b:48:16:c6:9f:cc:23:a6:91:0b:60:9f:
79:44:fa:f9:d0:91:5e:f8:44:6e:6a:be:1c:3c:bd:
01:bb:f7:50:81:47:f6:8d:52:36:4c:6a:0d:ac:d4:
6c:e1:81:c3:04:e6:bd:9d:26:5a:dd:72:70:a1:fb:
65:71:a9:c6:2f:d5:ce:fa:2c:9f:9f:39:c4:d0:fb:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4B:E5:A7:CA:84:E6:03:F4:0D:CF:F8:1B:5C:11:8E:94:31:71:AF
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/YEvlp8qE5gP0Dc_4G1wRjpQxca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.216.0/24
5.188.218.0/23
37.9.40.0/21
146.185.207.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:99:46:57:61:a5:5a:3d:86:82:b6:df:3b:fe:63:e5:6e:b0:
86:0f:f1:e0:06:dc:5d:23:ab:3b:df:e4:53:b7:97:71:cc:6c:
b1:41:b6:a1:c6:23:ce:f5:6c:81:9d:62:9d:01:ad:56:1d:c6:
d2:9d:dd:7f:1b:95:42:91:fa:e5:4f:bd:0c:c4:60:bb:32:1b:
ee:d5:a8:8d:9e:7d:6b:e6:39:5b:5d:fe:81:65:5c:55:3e:01:
89:4a:b5:a3:61:96:4e:c4:33:1b:6d:2e:84:c7:90:b4:38:3e:
74:1b:87:84:fd:64:de:d6:8f:ae:6d:44:c2:e0:b0:1f:77:e6:
77:df:89:ce:23:1d:2b:fb:7d:83:20:9f:1d:0e:3e:f7:aa:02:
a4:75:c5:30:e3:86:88:5b:3b:dd:90:8f:10:47:7a:83:dd:c2:
18:9c:7e:1f:d5:30:db:47:fe:ff:59:49:f8:a4:e4:5b:9d:aa:
0c:f8:d2:17:7e:f3:a8:df:a0:45:5c:af:d2:45:e9:20:08:94:
a3:1d:e1:82:99:9f:d4:0e:bc:bf:c9:62:26:f9:a8:98:83:a4:
ae:2d:56:ec:c7:38:ae:13:08:40:24:68:21:cc:ff:73:46:7d:
0f:15:a0:db:7e:cb:53:ef:ab:81:3b:f3:e6:01:fb:89:c4:75:
8f:9b:e9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 13:14:05 2024 by rpki-client on console-fra.rpki-client.org