Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/t5CJrFEPnUycoZ1CSpVl4F9jPFs.roa
File: t5CJrFEPnUycoZ1CSpVl4F9jPFs.roa (raw, json)
Hash identifier: imh+Luiwmfa+tO+71oodzh2Iae0ZaC91koNvV6H8CJo=
Subject key identifier: B7:90:89:AC:51:0F:9D:4C:9C:A1:9D:42:4A:95:65:E0:5F:63:3C:5B
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 018CC9BC3088E9512CD3BEB9D448B5D3DB86
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/t5CJrFEPnUycoZ1CSpVl4F9jPFs.roa
Signing time: Tue 02 Jan 2024 10:33:22 +0000
ROA not before: Tue 02 Jan 2024 10:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36131
IP address blocks: 185.155.138.0/24 maxlen: 24
185.155.139.0/24 maxlen: 24
185.155.136.0/22 maxlen: 22
185.155.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:30:88:e9:51:2c:d3:be:b9:d4:48:b5:d3:db:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Jan 2 10:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b79089ac510f9d4c9ca19d424a9565e05f633c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cd:99:64:07:67:19:71:2d:c5:2f:85:57:d7:
2f:c4:3c:b2:41:53:25:97:eb:f3:87:12:b3:23:3b:
c1:7b:de:2f:48:33:f0:5c:c2:21:fe:35:ed:f4:03:
fa:60:c9:41:a6:0e:8e:21:f8:fc:e8:e2:b0:46:e5:
b0:d6:41:10:04:84:7c:0a:fb:5f:7a:31:de:62:6d:
1f:f2:6d:cc:22:fc:2c:3c:d2:c0:a0:76:af:d7:bb:
26:70:7d:f0:82:20:f9:fc:e1:7c:86:09:81:14:18:
f5:1f:5a:01:c9:b8:e8:bc:9e:b5:48:1c:78:30:5a:
1f:f6:80:b8:e5:dd:ed:aa:b7:c6:7d:00:d5:89:45:
94:74:67:b5:b3:d7:cc:ba:32:b2:b5:a4:49:b8:c0:
b7:db:b7:94:d5:cf:59:39:9f:ff:b2:2e:f6:2e:c6:
42:22:58:2f:34:27:12:55:73:13:c5:63:ed:c2:0b:
a4:f3:ba:61:5f:83:ee:36:20:46:3f:7d:5f:c7:83:
cf:6d:ef:be:1d:cd:39:34:99:2d:be:d7:33:25:40:
f3:54:95:bf:04:7b:0d:9e:bd:ce:ef:04:97:61:3a:
df:da:24:85:80:49:2f:aa:5e:d0:e8:67:55:f8:97:
07:7b:bf:73:d5:35:44:8e:e8:aa:27:7f:00:04:ca:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:90:89:AC:51:0F:9D:4C:9C:A1:9D:42:4A:95:65:E0:5F:63:3C:5B
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/t5CJrFEPnUycoZ1CSpVl4F9jPFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.136.0/22
Signature Algorithm: sha256WithRSAEncryption
25:27:fe:4f:72:b9:5d:ed:d0:09:12:a8:5f:7f:82:1a:0d:f1:
56:6d:d4:1f:5c:63:7c:ef:6e:ed:ed:c5:be:a9:41:81:4d:b5:
8b:f3:89:41:61:3a:74:47:fc:d7:c4:83:96:c8:26:e8:25:70:
ba:41:52:fc:86:34:c2:b8:c8:cf:9f:ed:8d:ae:ef:05:e2:f8:
09:e8:56:b4:8a:e5:94:d8:67:93:51:9e:f3:77:ce:6c:85:18:
62:cd:bc:19:6d:2c:f5:5b:09:03:9c:45:5a:79:95:4c:48:f9:
37:2b:2c:52:d6:d9:81:a7:39:a3:d5:5d:b1:f1:ce:75:7f:db:
a2:61:23:26:17:14:9f:93:d3:83:bf:69:50:5b:12:f7:bc:cb:
1d:0b:78:66:31:0f:84:4b:95:92:2c:26:d8:9f:c7:ce:62:4d:
61:c2:f9:8e:67:9c:62:c8:7b:f9:ff:d4:73:ca:d9:df:74:d9:
32:9a:fc:57:9c:f8:f0:6b:c3:1e:77:59:b7:a6:95:7f:b3:1b:
12:d9:e0:df:13:13:a7:4b:15:7b:72:70:2a:6c:d1:f9:3b:e4:
85:cf:5f:36:32:1f:4b:c6:d9:56:1d:b6:ed:23:42:3b:a8:c8:
56:3c:9d:ed:89:2b:2a:e6:6e:1c:8f:2c:34:df:af:74:8b:7c:
66:88:c9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:22:45 2024 by rpki-client on console-fra.rpki-client.org