Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/pt8Za7IlE7JX6arA5sJPGjT-InU.roa
File: pt8Za7IlE7JX6arA5sJPGjT-InU.roa (raw, json)
Hash identifier: mWbpjgcaBRgwy3/nvXgKRfCI35Tovn7KE2+smDRUA1k=
Subject key identifier: A6:DF:19:6B:B2:25:13:B2:57:E9:AA:C0:E6:C2:4F:1A:34:FE:22:75
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 018CE51EC5A49E35038D6523FBE423224989
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/pt8Za7IlE7JX6arA5sJPGjT-InU.roa
Signing time: Sun 07 Jan 2024 18:10:48 +0000
ROA not before: Sun 07 Jan 2024 18:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205081
IP address blocks: 155.133.192.0/23 maxlen: 23
153.92.27.0/24 maxlen: 24
185.136.219.0/24 maxlen: 24
185.136.216.0/24 maxlen: 24
185.136.217.0/24 maxlen: 24
185.136.216.0/22 maxlen: 22
185.136.218.0/24 maxlen: 24
2a0c:5500:2::/48 maxlen: 48
2a0c:5500::/48 maxlen: 48
2a0c:5500:3::/48 maxlen: 48
2a0c:5500:1::/48 maxlen: 48
2a0c:5500:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e5:1e:c5:a4:9e:35:03:8d:65:23:fb:e4:23:22:49:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Jan 7 18:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6df196bb22513b257e9aac0e6c24f1a34fe2275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:16:a6:57:04:f1:97:e9:59:7e:0b:a5:a0:
63:ed:4d:f3:23:e9:d6:c7:da:a0:60:4e:b6:b5:1d:
c3:56:af:fb:45:f7:85:d5:93:d1:71:05:58:17:f6:
93:ba:b8:f8:4d:34:3e:62:35:34:b1:c0:b2:ee:95:
9d:c3:b3:46:1a:03:be:3c:3c:5e:7d:13:fd:54:51:
7f:06:e1:b6:08:e4:bc:1f:cc:8d:6d:0f:e3:31:b0:
07:80:1e:f8:9c:80:c9:39:af:eb:fe:92:e9:5e:6a:
79:4b:e3:21:be:c1:b2:76:82:0c:6e:d1:76:b7:26:
b8:4e:81:6d:5c:c7:0f:fd:36:67:96:1d:cc:f6:01:
05:75:32:fb:2f:27:95:7c:60:15:27:14:05:2a:71:
ad:f7:ce:54:c8:f4:0e:4c:33:0d:94:f5:d7:0c:15:
95:1e:0d:d1:46:21:ee:14:25:af:09:a9:73:ef:84:
f0:41:79:45:18:50:f8:c4:54:dd:ce:45:48:35:3f:
b3:c3:05:a6:64:7d:bb:9e:3e:f5:9a:a8:5a:cb:05:
f6:41:46:6a:9a:e6:a4:bb:1f:de:b7:e7:0e:f1:82:
4d:22:b8:e0:90:17:bd:52:82:4c:fa:37:c6:e4:0b:
b0:88:aa:a7:9d:15:9b:c5:e0:c8:22:be:6a:c0:4a:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DF:19:6B:B2:25:13:B2:57:E9:AA:C0:E6:C2:4F:1A:34:FE:22:75
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/pt8Za7IlE7JX6arA5sJPGjT-InU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.27.0/24
155.133.192.0/23
185.136.216.0/22
IPv6:
2a0c:5500::-2a0c:5500:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
34:41:1e:1e:2a:f1:d3:6b:39:f9:de:4d:04:de:cc:48:3c:2d:
a0:b2:55:eb:7f:bb:b7:31:3a:68:9d:6a:0f:e8:cd:f2:bc:22:
81:3b:fe:e7:ed:ed:ba:f6:e9:7d:12:aa:70:7c:f7:ae:41:66:
0e:2f:a2:57:aa:db:83:8a:56:29:02:d4:ae:95:bc:a9:8b:16:
3f:d1:4f:9c:92:e7:56:71:3d:89:cb:4e:ba:d6:88:9e:34:ab:
76:b7:a6:9c:b1:ed:61:d2:97:08:42:11:1c:c9:57:37:42:4b:
ef:a1:8a:99:7d:0c:22:56:59:31:99:1b:dc:f2:9b:6b:a5:9f:
09:5c:07:a5:4a:ce:71:02:6a:bd:77:1d:b5:b0:4b:c2:a0:09:
c9:e7:eb:c6:6d:63:29:f7:95:d1:5d:47:ac:bd:81:cc:9b:e4:
cd:67:a0:2f:5f:bc:49:3d:98:85:42:4d:6e:85:6d:e7:27:d9:
10:54:12:85:36:de:19:3c:2b:55:7b:4d:aa:22:fc:06:8f:94:
ec:4c:9c:a7:1a:bd:c4:62:b9:58:b2:9c:07:1d:66:4f:1b:0f:
93:c1:97:35:fe:1f:28:a0:f7:75:39:e1:ae:7a:ac:40:1e:8c:
bf:a5:16:79:9b:ff:13:1b:25:9c:c0:f0:83:01:61:1b:5c:f5:
70:22:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:12:54 2024 by rpki-client on console-ams.rpki-client.org