Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/rwDAetus2pKxAjrdWpQ6Z4tQWpQ.roa
File: rwDAetus2pKxAjrdWpQ6Z4tQWpQ.roa (raw, json)
Hash identifier: 7aCnnYDK3uEb1lCbAcC0QsxDG/srlMLcTr7P3Z8y6Xo=
Subject key identifier: AF:00:C0:7A:DB:AC:DA:92:B1:02:3A:DD:5A:94:3A:67:8B:50:5A:94
Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial: 0192D23DC14918F008BBEAF076B6373665B8
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/rwDAetus2pKxAjrdWpQ6Z4tQWpQ.roa
Signing time: Mon 28 Oct 2024 08:28:35 +0000
ROA not before: Mon 28 Oct 2024 08:28:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5400
IP address blocks: 62.5.0.0/17 maxlen: 17
62.102.0.0/17 maxlen: 17
62.134.0.0/16 maxlen: 16
62.173.192.0/18 maxlen: 18
62.180.0.0/16 maxlen: 16
82.150.0.0/19 maxlen: 19
185.94.0.0/22 maxlen: 22
194.213.64.0/19 maxlen: 19
195.90.64.0/19 maxlen: 19
195.100.0.0/16 maxlen: 16
195.163.0.0/16 maxlen: 16
195.182.96.0/19 maxlen: 19
212.8.160.0/19 maxlen: 19
212.21.192.0/19 maxlen: 19
212.31.192.0/19 maxlen: 19
212.41.128.0/19 maxlen: 19
212.108.0.0/19 maxlen: 19
212.127.0.0/19 maxlen: 19
212.162.192.0/18 maxlen: 18
213.15.0.0/16 maxlen: 16
213.137.160.0/19 maxlen: 19
213.194.0.0/18 maxlen: 18
213.236.64.0/18 maxlen: 18
2001:740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d2:3d:c1:49:18:f0:08:bb:ea:f0:76:b6:37:36:65:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Validity
Not Before: Oct 28 08:28:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af00c07adbacda92b1023add5a943a678b505a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:79:b3:be:95:1e:1d:ca:36:39:b6:03:c7:22:
20:b1:86:d4:be:95:f3:c2:25:3d:34:41:dc:48:32:
4a:09:4f:18:0a:4a:32:db:9d:44:32:27:b8:dd:3d:
3e:d8:9a:27:0c:3b:9e:31:31:1d:77:3d:ad:dc:59:
94:00:8d:7e:38:25:05:32:89:56:96:8f:d2:5f:c9:
4e:3c:57:fb:3a:f8:5c:03:54:02:04:2a:a2:b2:d0:
78:72:e2:3b:15:8d:a2:31:76:f2:6e:3d:bd:c2:97:
63:5f:e6:ab:60:73:32:fa:2d:37:c2:c5:ef:9a:e1:
1f:57:b1:6f:c5:fa:dd:88:0c:a8:f3:7d:dd:79:6a:
5d:58:ca:9f:72:f4:ae:71:db:cf:f5:91:29:11:63:
70:d6:33:4a:03:6b:0c:37:55:06:ce:05:80:3b:f8:
22:a7:96:83:06:31:de:d3:91:52:06:6d:12:34:8c:
53:94:4f:0c:e9:69:91:ac:86:e0:e2:d2:37:ef:42:
a1:30:07:81:18:0e:e0:b7:5b:3b:7e:d7:a2:7c:75:
8b:20:eb:30:b6:17:f3:9b:78:8c:bd:5d:a6:df:30:
fc:bd:52:0c:2f:34:b7:56:f9:8e:b7:af:4b:4b:05:
f9:52:17:7c:80:36:4e:e0:ea:16:57:e7:6f:82:8a:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:00:C0:7A:DB:AC:DA:92:B1:02:3A:DD:5A:94:3A:67:8B:50:5A:94
X509v3 Authority Key Identifier:
keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/rwDAetus2pKxAjrdWpQ6Z4tQWpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.5.0.0/17
62.102.0.0/17
62.134.0.0/16
62.173.192.0/18
62.180.0.0/16
82.150.0.0/19
185.94.0.0/22
194.213.64.0/19
195.90.64.0/19
195.100.0.0/16
195.163.0.0/16
195.182.96.0/19
212.8.160.0/19
212.21.192.0/19
212.31.192.0/19
212.41.128.0/19
212.108.0.0/19
212.127.0.0/19
212.162.192.0/18
213.15.0.0/16
213.137.160.0/19
213.194.0.0/18
213.236.64.0/18
IPv6:
2001:740::/32
Signature Algorithm: sha256WithRSAEncryption
a7:d7:f3:08:69:54:ae:69:0e:12:c9:38:7e:cb:24:3f:4b:a0:
b1:5c:33:be:3c:90:4f:4f:86:78:13:32:e5:24:65:f1:c9:2b:
b0:b1:43:4b:cf:a9:01:1f:cf:33:dc:ad:fc:ab:16:25:b0:f1:
63:cc:d1:d1:89:26:0d:6b:32:19:56:ba:1b:63:06:bc:92:39:
60:5c:eb:26:a7:66:6a:1d:f2:93:30:ca:6b:af:e5:24:40:bd:
ec:84:15:18:6c:25:6b:c0:0a:8f:56:93:a3:1b:b1:8f:5f:0e:
59:2c:47:c7:22:43:56:8e:b1:b4:fb:c5:1c:7a:3f:87:de:8a:
e8:ec:5c:ff:c6:de:54:7a:08:59:77:03:7e:6c:45:ba:1d:ed:
0f:44:cc:6c:b2:05:fb:4c:71:74:c4:9b:c4:ac:9e:c5:c9:a3:
be:46:8d:b4:dc:7a:73:52:d6:d9:a5:1e:21:6f:e1:6f:01:d9:
39:a8:a2:85:05:6a:a3:58:88:10:29:f5:1a:76:93:b8:75:cd:
55:19:1b:3c:43:29:f4:2c:72:ac:b8:56:d5:b2:da:33:fd:fc:
6e:d6:be:24:32:0a:85:85:24:49:79:c2:0f:21:ac:c5:17:3e:
1b:a6:94:eb:64:a7:4d:95:80:da:1a:f1:af:eb:87:13:c6:06:
c7:92:1c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:14:56 2024 by rpki-client on console-ams.rpki-client.org