Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/EXnyTu4DOtg3mgPF9fwrMBTLDV4.roa
File: EXnyTu4DOtg3mgPF9fwrMBTLDV4.roa (raw, json)
Hash identifier: EJYC/7eMHv9jNnBBTEdWIj/PQsjy6Sbme0l2yu3Yv80=
Subject key identifier: 11:79:F2:4E:EE:03:3A:D8:37:9A:03:C5:F5:FC:2B:30:14:CB:0D:5E
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DD1E8C24B1776E11B70783119EC795C11
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/EXnyTu4DOtg3mgPF9fwrMBTLDV4.roa
Signing time: Thu 22 Feb 2024 17:41:48 +0000
ROA not before: Thu 22 Feb 2024 17:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34665
IP address blocks: 5.183.129.0/24 maxlen: 24
45.11.23.0/24 maxlen: 24
45.14.222.0/24 maxlen: 24
45.84.178.0/24 maxlen: 24
45.89.70.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
45.138.156.0/24 maxlen: 24
45.138.159.0/24 maxlen: 24
88.218.72.0/22 maxlen: 22
91.188.212.0/22 maxlen: 22
91.188.221.0/24 maxlen: 24
92.119.162.0/24 maxlen: 24
94.158.189.0/24 maxlen: 24
194.32.238.0/24 maxlen: 24
194.32.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d1:e8:c2:4b:17:76:e1:1b:70:78:31:19:ec:79:5c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 22 17:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1179f24eee033ad8379a03c5f5fc2b3014cb0d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:18:79:5e:46:f3:8d:54:59:c1:48:09:28:
37:00:95:25:69:8f:1b:06:1c:09:d1:a5:fc:98:ed:
cb:e1:55:d7:88:14:10:59:4a:4f:0c:e2:db:b5:74:
a0:c1:ad:01:59:54:fa:cd:f4:bf:92:4f:18:ce:58:
e6:b2:a4:a0:4f:c4:16:1c:ea:7e:ca:32:7b:b4:6b:
99:d7:4f:c6:76:92:90:41:d3:9a:20:ac:fe:12:6b:
67:c1:7b:30:db:8e:c0:b4:de:48:7d:be:92:55:31:
0a:54:af:a9:82:4c:d1:80:39:2e:13:93:6a:af:10:
51:91:0d:c2:e6:01:74:69:2d:ab:44:60:eb:3c:24:
49:e9:e0:ed:cf:5f:ef:8f:62:63:41:d6:c8:1b:b7:
1f:28:d5:13:51:38:cc:3d:97:ea:44:2c:a2:19:aa:
8e:79:39:62:bb:77:77:fb:1c:f6:7a:ed:71:e4:29:
32:ac:81:6a:e4:86:9b:1b:d4:b5:f4:f8:9b:0c:8a:
df:35:e6:06:3b:37:83:75:5c:51:77:c7:52:f1:6a:
64:07:a9:b0:a3:e5:49:91:26:ac:85:a7:9d:91:9d:
11:da:a6:4e:8b:60:c7:4b:5c:98:bc:b9:7f:f8:f4:
4e:03:89:7d:38:c7:0e:d4:7a:9d:44:70:87:e8:a0:
47:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:79:F2:4E:EE:03:3A:D8:37:9A:03:C5:F5:FC:2B:30:14:CB:0D:5E
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/EXnyTu4DOtg3mgPF9fwrMBTLDV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.129.0/24
45.11.23.0/24
45.14.222.0/24
45.84.178.0/24
45.89.70.0/24
45.129.1.0/24
45.138.156.0/24
45.138.159.0/24
88.218.72.0/22
91.188.212.0/22
91.188.221.0/24
92.119.162.0/24
94.158.189.0/24
194.32.238.0/23
Signature Algorithm: sha256WithRSAEncryption
97:c7:67:51:72:4a:e0:dc:a8:34:d1:98:e0:ff:d0:d9:2c:e9:
0b:fa:8e:00:cb:26:9c:26:7a:e0:50:a5:68:51:e2:11:30:2f:
db:85:45:84:a0:8c:83:94:a6:ac:87:f7:ce:4b:75:14:07:ef:
63:c7:ff:ff:50:53:00:7b:63:c9:90:e4:5f:d2:62:74:2b:f4:
92:5a:8d:fb:5a:06:53:e1:1c:3c:9e:53:e6:73:76:3f:8d:a4:
b5:54:39:51:7d:77:83:b9:e7:ad:33:96:b7:35:22:ad:7a:d2:
33:cf:d1:53:47:0f:b8:f0:be:42:f8:c8:11:d0:e3:1e:04:53:
a5:aa:4e:15:a0:7e:07:ee:0f:47:60:74:01:e0:7f:b4:ba:2a:
51:4e:05:da:e2:9f:ca:06:82:37:b9:01:90:85:d1:86:e4:ec:
c2:84:9c:b6:b6:95:82:22:6c:8b:c4:fd:cc:8a:0f:a5:3f:45:
63:49:c2:dc:f7:d6:58:a6:c1:29:8c:3f:35:b4:0b:e0:c1:53:
50:0c:9b:cc:f5:61:18:0d:49:ae:47:5e:90:a3:98:ef:15:54:
bf:41:ae:9c:ef:fb:8a:a6:12:9d:83:a7:4f:21:cb:70:f8:9c:
a6:5f:fc:00:67:0b:4f:f4:51:d9:04:26:72:83:2d:71:a0:f9:
8b:fd:b2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:07:21 2024 by rpki-client on console-ams.rpki-client.org