Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/JTYzoUufBfvwtyyNYjZdQhaQQr0.roa
File: JTYzoUufBfvwtyyNYjZdQhaQQr0.roa (raw, json)
Hash identifier: 6nNHEetH+mmuscC7l9+cBKKVrwmktSqL72lLJGaof40=
Subject key identifier: 25:36:33:A1:4B:9F:05:FB:F0:B7:2C:8D:62:36:5D:42:16:90:42:BD
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 018CC7270B5E66A2DFADAE990236FB545CF6
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/JTYzoUufBfvwtyyNYjZdQhaQQr0.roa
Signing time: Mon 01 Jan 2024 22:31:13 +0000
ROA not before: Mon 01 Jan 2024 22:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4809
IP address blocks: 5.10.136.112/29 maxlen: 29
5.154.132.0/24 maxlen: 24
5.10.141.136/30 maxlen: 30
5.10.141.8/30 maxlen: 30
5.154.133.0/24 maxlen: 24
5.154.138.0/24 maxlen: 24
5.154.139.0/24 maxlen: 24
5.154.137.0/24 maxlen: 24
5.154.136.0/24 maxlen: 24
5.154.140.0/24 maxlen: 24
5.154.141.0/24 maxlen: 24
5.154.159.0/24 maxlen: 24
5.154.158.0/24 maxlen: 24
145.14.83.0/24 maxlen: 24
145.14.81.0/24 maxlen: 24
145.14.82.0/24 maxlen: 24
145.14.79.0/24 maxlen: 24
145.14.80.0/24 maxlen: 24
145.14.84.0/24 maxlen: 24
145.14.85.0/24 maxlen: 24
145.14.90.0/24 maxlen: 24
145.14.88.0/24 maxlen: 24
145.14.89.0/24 maxlen: 24
145.14.86.0/24 maxlen: 24
145.14.87.0/24 maxlen: 24
145.14.91.0/24 maxlen: 24
145.14.93.0/24 maxlen: 24
145.14.92.0/24 maxlen: 24
185.75.172.0/24 maxlen: 24
185.75.174.0/24 maxlen: 24
185.75.173.0/24 maxlen: 24
5.10.136.208/30 maxlen: 30
145.14.64.0/24 maxlen: 24
145.14.70.0/24 maxlen: 24
145.14.71.0/24 maxlen: 24
145.14.69.0/24 maxlen: 24
145.14.67.0/24 maxlen: 24
145.14.68.0/24 maxlen: 24
145.14.65.0/24 maxlen: 24
145.14.66.0/24 maxlen: 24
145.14.76.0/24 maxlen: 24
145.14.74.0/24 maxlen: 24
145.14.75.0/24 maxlen: 24
145.14.72.0/24 maxlen: 24
145.14.73.0/24 maxlen: 24
145.14.77.0/24 maxlen: 24
145.14.78.0/24 maxlen: 24
5.10.138.0/24 maxlen: 24
5.10.139.0/24 maxlen: 24
5.10.137.0/24 maxlen: 24
5.10.136.0/24 maxlen: 24
5.10.140.0/24 maxlen: 24
5.10.143.0/24 maxlen: 24
5.10.142.0/24 maxlen: 24
2a04:f580:9210::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:0b:5e:66:a2:df:ad:ae:99:02:36:fb:54:5c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Jan 1 22:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=253633a14b9f05fbf0b72c8d62365d42169042bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:26:cb:90:96:6e:05:24:95:01:db:4c:f5:
ee:eb:db:a8:ea:42:c8:42:a8:9b:60:77:8d:5b:f4:
8a:5c:62:3a:fb:3a:ec:0c:c5:40:02:13:5f:3b:3a:
34:9d:86:e6:c7:41:12:2e:7a:e1:0a:03:bf:dc:d1:
01:19:7e:1c:02:87:41:99:d9:2d:53:09:dc:33:79:
ca:af:c3:36:34:b8:f2:c2:92:d2:ad:36:52:7a:80:
72:1f:43:71:17:17:2a:3c:6e:4c:48:8e:23:22:fc:
b0:03:e3:79:d2:56:0d:d0:6c:57:37:3d:bf:22:f8:
39:36:6e:6c:57:d4:43:ad:67:9d:2c:af:cc:84:1d:
85:2a:f6:cf:7e:6b:65:29:6a:12:32:b7:16:72:0d:
e1:59:ff:be:12:60:fb:dc:84:11:eb:4c:d0:54:b4:
c4:b1:b4:9e:16:62:1d:d6:da:c9:46:98:97:77:47:
c4:5b:61:2c:0b:59:9d:65:00:4f:6a:8d:06:13:0b:
b0:b0:b9:28:79:e1:1f:09:09:0d:e0:a1:d3:ef:34:
41:02:96:2e:4c:44:32:48:ec:c1:cf:c2:c1:b9:39:
5d:15:a9:62:36:9a:a1:62:77:64:c1:19:85:d6:1d:
af:03:8c:58:fb:a1:23:01:4a:35:8f:15:42:64:c5:
ce:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:36:33:A1:4B:9F:05:FB:F0:B7:2C:8D:62:36:5D:42:16:90:42:BD
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/JTYzoUufBfvwtyyNYjZdQhaQQr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.136.0-5.10.140.255
5.10.141.8/30
5.10.141.136/30
5.10.142.0/23
5.154.132.0/23
5.154.136.0-5.154.141.255
5.154.158.0/23
145.14.64.0-145.14.93.255
185.75.172.0-185.75.174.255
IPv6:
2a04:f580:9210::/48
Signature Algorithm: sha256WithRSAEncryption
af:ec:6d:19:30:8d:53:9c:03:94:2f:2d:33:6e:a4:8a:cc:34:
4e:c6:7b:73:7b:e9:ce:70:c3:ec:08:57:8b:66:fb:91:7e:73:
44:23:f3:0b:9e:3a:95:53:15:25:8a:2b:fd:d5:cd:3a:cd:47:
48:5c:08:81:1a:f2:99:10:3e:d1:21:66:d6:60:14:7d:a8:9b:
4e:58:af:d6:6c:fc:1e:69:4f:0f:60:6b:52:2e:04:b0:af:78:
a1:cb:e0:c5:01:09:55:d9:99:4e:3b:13:19:f8:ab:da:37:21:
27:50:9e:47:4f:ee:c3:e8:a0:64:13:46:a2:d1:62:79:47:12:
06:f5:6e:2b:42:32:80:54:87:b1:f8:26:77:ca:33:ed:64:11:
35:0d:57:f4:00:fc:a9:e6:ed:7e:88:66:60:89:a5:37:89:1f:
d3:62:bc:e0:be:1b:3c:b0:5c:f7:7e:cc:c4:c8:ac:87:00:69:
34:16:e0:40:1f:a5:04:21:fa:94:4c:b8:e3:6b:80:07:96:12:
ba:f5:28:a8:8c:f7:6b:58:b3:ab:bc:a6:a4:10:e8:c7:4d:ee:
84:ba:fb:be:5d:97:8d:f2:8d:c1:c1:df:37:79:b4:48:71:a9:
37:7e:e0:0d:a6:72:68:16:61:00:5c:9f:a6:f8:4e:57:bd:db:
5c:ac:b2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:22:19 2024 by rpki-client on console-fra.rpki-client.org