Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/5YMUczyXyrW6lqC9m9exv91fasg.roa
File: 5YMUczyXyrW6lqC9m9exv91fasg.roa (raw, json)
Hash identifier: eptoyL+yOIt+BI3oh41gW9yrhMYJoZkL++REnKWAzMk=
Subject key identifier: E5:83:14:73:3C:97:CA:B5:BA:96:A0:BD:9B:D7:B1:BF:DD:5F:6A:C8
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 018CC94DE5A5CE82B64ABD499244C472A8E0
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/5YMUczyXyrW6lqC9m9exv91fasg.roa
Signing time: Tue 02 Jan 2024 08:32:54 +0000
ROA not before: Tue 02 Jan 2024 08:32:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29667
IP address blocks: 84.22.27.0/24 maxlen: 24
84.22.28.0/24 maxlen: 24
84.22.25.0/24 maxlen: 24
78.130.136.0/22 maxlen: 22
78.130.142.0/24 maxlen: 24
78.130.140.0/23 maxlen: 23
84.22.2.0/23 maxlen: 23
84.22.4.0/23 maxlen: 23
87.116.96.0/20 maxlen: 20
89.25.112.0/22 maxlen: 22
89.25.118.0/24 maxlen: 24
89.25.112.0/21 maxlen: 21
89.25.116.0/23 maxlen: 23
89.25.16.0/22 maxlen: 22
89.25.24.0/21 maxlen: 21
87.118.142.0/24 maxlen: 24
89.25.26.0/23 maxlen: 23
89.25.28.0/22 maxlen: 22
89.25.25.0/24 maxlen: 24
87.118.156.0/22 maxlen: 22
78.130.132.0/22 maxlen: 22
213.145.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:e5:a5:ce:82:b6:4a:bd:49:92:44:c4:72:a8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 2 08:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e58314733c97cab5ba96a0bd9bd7b1bfdd5f6ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:41:1f:88:05:ae:88:16:d9:4b:1e:7a:9b:68:
c3:af:e3:35:f6:0d:46:3d:6b:01:ab:51:e8:e3:64:
01:d3:25:af:d2:de:70:ed:8e:b9:3b:f5:d2:77:8b:
58:d6:c2:9d:46:cf:f3:3a:b2:05:91:a7:dc:3a:9d:
9a:c9:70:97:a8:23:72:98:6d:2a:87:94:03:04:76:
d2:74:fe:98:ab:ae:83:be:5c:83:7b:3a:08:d5:aa:
e0:72:44:40:3e:17:67:45:c3:fe:38:8e:c0:1b:3e:
33:d1:d7:f7:dc:7e:74:42:16:43:b3:58:68:f4:02:
3a:ec:52:3a:66:4c:11:3d:e6:10:fa:12:6e:68:f8:
30:88:2c:dd:7b:08:d9:92:58:fe:a9:50:c7:c7:19:
4f:a6:70:99:e7:fc:2f:88:ff:19:7e:81:70:0d:38:
24:a8:e6:9a:b3:19:87:28:2c:ce:49:08:47:17:1c:
86:a1:20:8e:b5:1e:22:96:a0:9d:91:3f:9b:27:24:
be:71:1a:2d:62:a0:36:26:b2:9f:55:ac:d6:69:f9:
57:cf:3e:ed:b6:44:93:7c:bf:7b:01:e7:ff:e9:60:
96:ce:66:2b:bf:73:cf:ec:45:f5:c3:8e:d3:1a:0e:
5f:7e:ee:50:95:f6:c9:48:b1:99:a3:a8:e2:53:5c:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:83:14:73:3C:97:CA:B5:BA:96:A0:BD:9B:D7:B1:BF:DD:5F:6A:C8
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/5YMUczyXyrW6lqC9m9exv91fasg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.130.132.0-78.130.142.255
84.22.2.0-84.22.5.255
84.22.25.0/24
84.22.27.0-84.22.28.255
87.116.96.0/20
87.118.142.0/24
87.118.156.0/22
89.25.16.0/22
89.25.24.0/21
89.25.112.0/21
213.145.105.0/24
Signature Algorithm: sha256WithRSAEncryption
03:96:84:ae:65:43:05:94:89:73:b0:fe:f4:ad:82:27:d4:62:
f9:34:fe:28:1f:24:cc:68:d1:cf:f4:30:c3:74:ac:6a:f1:a9:
3c:d8:83:dd:71:d9:9b:b7:fa:c6:e8:8d:4f:01:42:51:60:f5:
a9:b1:81:42:f2:0e:e7:81:ec:48:3d:8c:df:02:dd:fe:89:8f:
e6:a8:30:da:db:2e:35:50:e3:5c:05:74:b4:17:6d:62:08:3e:
32:f8:56:b9:01:ba:96:36:8b:36:75:09:e2:dd:ea:1b:1e:17:
74:c7:85:fe:35:32:06:c7:83:e5:a5:2c:62:1d:a4:a6:cc:68:
6b:aa:60:28:14:12:00:3d:56:dc:a7:8c:46:1b:43:d9:7e:5e:
ff:df:87:e1:cd:6e:62:31:59:6f:bd:94:ea:29:13:67:4d:70:
ad:1c:f9:8a:15:8e:58:39:15:9a:f3:1c:9d:e5:28:94:28:29:
5c:cd:df:86:27:a6:6c:7e:ed:85:9f:13:84:ae:64:06:f9:45:
25:3f:ab:b7:d7:52:bf:48:08:e0:23:85:5e:bb:77:3f:41:d8:
bb:7b:c6:ea:ef:a8:08:0c:b4:d8:30:bb:56:b7:ee:de:07:19:
80:8c:3c:30:32:8d:6a:a5:99:0f:cb:85:7a:9e:73:66:0b:21:
6e:f2:c6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:20:13 2024 by rpki-client on console-fra.rpki-client.org