Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/kUmK24QGmMooSWn3ILTA3iNZMr8.roa
File: kUmK24QGmMooSWn3ILTA3iNZMr8.roa (raw, json)
Hash identifier: djvZxQ/d7Z6pzBSqnCLXW71RwevVRT2U55/ZQpaCWiQ=
Subject key identifier: 91:49:8A:DB:84:06:98:CA:28:49:69:F7:20:B4:C0:DE:23:59:32:BF
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0194244511C871FABF6FF89A97B0506FC1B0
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/kUmK24QGmMooSWn3ILTA3iNZMr8.roa
Signing time: Wed 01 Jan 2025 23:48:13 +0000
ROA not before: Wed 01 Jan 2025 23:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 5.183.129.0/24 maxlen: 24
45.11.23.0/24 maxlen: 24
45.14.222.0/24 maxlen: 24
45.84.178.0/24 maxlen: 24
45.89.70.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
45.138.156.0/24 maxlen: 24
45.138.159.0/24 maxlen: 24
88.218.72.0/22 maxlen: 22
91.188.212.0/22 maxlen: 22
91.188.221.0/24 maxlen: 24
92.119.162.0/24 maxlen: 24
94.158.189.0/24 maxlen: 24
194.32.238.0/24 maxlen: 24
194.32.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:11:c8:71:fa:bf:6f:f8:9a:97:b0:50:6f:c1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91498adb840698ca284969f720b4c0de235932bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:48:88:66:e1:50:3c:e5:d5:d9:ef:c5:2b:
84:5a:35:37:cd:dd:1c:5d:d2:41:4e:c6:0c:cd:c7:
a3:ef:5a:53:80:93:0f:c2:ce:2e:f2:1d:25:76:b0:
74:70:9e:91:b0:23:03:0a:82:06:1a:07:62:b0:96:
19:1f:6b:8c:07:b3:5a:a8:ae:e0:b4:e8:bd:96:e6:
ad:82:ad:7c:79:f7:ce:76:9c:a8:6c:89:bc:5a:2e:
23:d8:4e:1a:ba:f8:89:eb:16:00:22:b2:e6:4b:ba:
8a:0e:cb:6e:7c:69:cf:3f:80:9b:5b:65:bc:4f:81:
0f:2a:0d:96:d8:17:c5:5e:a9:b3:83:be:86:62:16:
4b:e8:58:67:82:bb:91:d9:9b:0c:25:da:9d:e6:68:
9b:6a:10:44:b5:ec:8b:0d:6d:3e:74:62:5f:02:5c:
28:ca:d1:6a:68:75:0a:69:54:05:d3:58:cb:e7:a1:
fa:e5:e4:1b:9e:50:ff:8c:a3:6c:0b:12:ab:11:8c:
4d:64:ec:3d:15:47:e5:4b:3f:9d:a3:d1:9b:42:bc:
dc:ca:fe:ad:11:fa:fb:e0:35:db:f7:1a:f7:b4:75:
dc:92:15:2d:6d:19:be:96:0d:12:c6:d2:9d:9e:61:
87:0b:08:bc:78:46:6a:a9:ca:8d:25:d3:19:61:2a:
05:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:49:8A:DB:84:06:98:CA:28:49:69:F7:20:B4:C0:DE:23:59:32:BF
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/kUmK24QGmMooSWn3ILTA3iNZMr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.129.0/24
45.11.23.0/24
45.14.222.0/24
45.84.178.0/24
45.89.70.0/24
45.129.1.0/24
45.138.156.0/24
45.138.159.0/24
88.218.72.0/22
91.188.212.0/22
91.188.221.0/24
92.119.162.0/24
94.158.189.0/24
194.32.238.0/23
Signature Algorithm: sha256WithRSAEncryption
19:e4:38:96:75:6d:18:59:e8:c8:d7:98:17:ef:96:c0:e1:3d:
8e:c9:df:87:7d:38:d6:b6:02:f9:32:a1:50:15:54:f7:3c:07:
7e:cb:b8:96:82:d4:4d:34:7a:ac:45:7b:14:bf:cc:c3:c3:6a:
33:5f:0c:3b:75:45:d7:1e:7c:06:d7:dd:24:68:d1:3b:67:5e:
92:a7:87:0e:4e:1d:9c:17:ba:21:d5:a7:64:4f:47:93:8e:8b:
05:c2:52:2f:26:e0:81:a8:6d:ea:0c:a1:54:d5:8e:ca:1a:f5:
31:03:0e:0d:d9:4d:ac:e8:92:14:3a:9c:83:b3:bc:36:2c:31:
f6:bf:5e:f8:85:ec:28:d0:4d:7f:4e:22:8f:98:de:5a:7d:01:
46:6b:9c:dd:7b:3b:da:0c:46:af:9e:31:3e:fe:0c:74:4c:d4:
74:f2:65:f8:47:75:a5:bf:29:d2:21:52:77:18:77:ee:d0:8c:
8e:11:53:5f:19:15:56:d5:3c:b5:1b:05:fa:a5:8d:b3:3f:32:
bf:82:38:98:26:c2:f4:b1:a4:37:8f:c1:3c:ec:4b:35:a8:bb:
00:fc:d0:ae:9d:12:ce:00:d3:ac:14:8b:51:dc:53:e5:3f:87:
bd:ff:3a:38:2b:4f:8d:c3:66:f5:26:f8:9f:2f:0f:f3:9f:2a:
99:7f:34:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:56 2025 by rpki-client