Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/o5dk2bQL82y5bzm4M6QKGm7CLTE.roa
File: o5dk2bQL82y5bzm4M6QKGm7CLTE.roa (raw, json)
Hash identifier: 23RcwbQ+hrXZ4r/iDXVkJvpHKaq6VMIDPdWK5TTjXvc=
Subject key identifier: A3:97:64:D9:B4:0B:F3:6C:B9:6F:39:B8:33:A4:0A:1A:6E:C2:2D:31
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01902FC14840B68B91A55F69CB48C11EBDE2
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/o5dk2bQL82y5bzm4M6QKGm7CLTE.roa
Signing time: Wed 19 Jun 2024 09:08:34 +0000
ROA not before: Wed 19 Jun 2024 09:08:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42303
IP address blocks: 5.35.184.0/21 maxlen: 21
46.182.200.0/24 maxlen: 24
46.182.201.0/24 maxlen: 24
46.182.202.0/24 maxlen: 24
46.182.203.0/24 maxlen: 24
46.182.204.0/24 maxlen: 24
46.182.205.0/24 maxlen: 24
46.182.206.0/24 maxlen: 24
77.72.96.0/21 maxlen: 21
94.127.32.0/21 maxlen: 21
151.236.200.0/21 maxlen: 24
185.55.8.0/22 maxlen: 22
185.104.14.0/23 maxlen: 24
185.153.212.0/22 maxlen: 24
193.149.178.0/24 maxlen: 24
2a02:470::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2f:c1:48:40:b6:8b:91:a5:5f:69:cb:48:c1:1e:bd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jun 19 09:08:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a39764d9b40bf36cb96f39b833a40a1a6ec22d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:99:e3:5d:4b:c8:8e:e6:bd:6f:93:bb:d4:
71:92:3e:56:2e:8e:4b:3a:6e:83:4e:06:bb:3f:8c:
c8:8b:a6:61:e6:b9:75:42:05:54:31:7c:6f:a9:6a:
92:bf:53:2d:1c:ca:97:de:90:43:fe:d0:fa:6e:5d:
e7:87:f6:9e:06:41:51:93:b3:b6:29:86:de:cd:94:
d7:06:f9:57:f1:e0:43:b5:d6:2a:e8:89:ab:ed:27:
02:ba:f2:57:a8:7c:8f:fa:f1:e3:a9:3b:23:59:d3:
6b:56:4b:76:59:05:72:1a:a6:4c:32:03:e4:f8:ff:
51:85:ca:1f:81:3c:29:3b:d1:ec:db:49:da:1f:0b:
ac:49:96:eb:8d:85:7d:5f:b2:05:20:c2:12:48:cf:
37:de:f1:f9:21:f9:08:70:19:ef:59:39:39:36:7f:
d4:11:d6:98:42:3b:6e:22:0a:90:8f:96:58:79:50:
83:89:bd:97:b6:b8:7d:5c:9a:c4:5f:a8:f9:93:ab:
60:b4:56:de:16:d8:c3:ef:28:0a:a4:29:00:10:4c:
c3:67:a4:e4:48:29:05:26:31:cd:2f:3e:c6:7e:f6:
e0:ba:8c:99:c1:2f:ad:35:01:91:d9:7c:83:fb:44:
dd:38:26:7e:2d:f5:c8:c2:9d:3e:21:55:0f:0d:8c:
de:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:97:64:D9:B4:0B:F3:6C:B9:6F:39:B8:33:A4:0A:1A:6E:C2:2D:31
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/o5dk2bQL82y5bzm4M6QKGm7CLTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.184.0/21
46.182.200.0-46.182.206.255
77.72.96.0/21
94.127.32.0/21
151.236.200.0/21
185.55.8.0/22
185.104.14.0/23
185.153.212.0/22
193.149.178.0/24
IPv6:
2a02:470::/32
Signature Algorithm: sha256WithRSAEncryption
64:0b:59:f7:bf:7c:62:cd:15:26:f6:ce:40:d6:a4:04:25:f1:
54:40:ab:37:56:ed:15:e0:4c:fb:bb:ec:d4:1f:53:76:b8:2d:
57:9a:34:8a:05:2e:6b:a8:47:b6:1c:63:c1:d1:ee:20:78:b7:
b7:a9:d8:71:42:aa:4f:2b:66:98:18:0b:0f:b4:c6:66:ae:83:
2e:e8:7f:5a:f8:d9:40:08:e1:c0:de:19:a4:50:41:21:14:07:
9e:0c:41:dd:48:59:fe:1c:42:e2:76:a0:71:ef:96:5f:3a:27:
f0:43:52:d9:63:16:5a:b0:38:65:4f:1c:ce:33:84:91:97:c8:
00:2a:20:8d:bc:b5:3f:82:26:73:b7:69:ce:7e:f7:d4:74:fd:
a7:6c:93:c2:0e:67:27:37:06:27:b0:f3:98:7f:a1:84:a0:01:
8d:de:e1:8e:0a:36:a0:99:9d:01:09:9e:3a:67:5d:10:88:88:
82:34:c7:c8:c7:7f:f3:3b:ec:ab:0b:21:7f:b2:35:27:c6:56:
14:14:c2:2a:c2:1a:7f:20:44:2b:f1:c5:fb:27:aa:d9:9f:77:
0b:db:d1:ff:b7:a7:99:23:8f:77:e4:c3:bf:82:84:4b:03:37:
48:a4:ec:8e:c3:0e:61:e7:a7:9b:2c:5c:a5:91:2c:67:15:34:
18:fe:d3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:15:08 2024 by rpki-client on console-fra.rpki-client.org