Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/Xpku9Mo_Hk5eFjIb7cGuRqRsE68.roa
File: Xpku9Mo_Hk5eFjIb7cGuRqRsE68.roa (raw, json)
Hash identifier: CtOZd9e4lCi1VEnNG8nQkDKU8ZQ9+PXma8l1D7n9RVo=
Subject key identifier: 5E:99:2E:F4:CA:3F:1E:4E:5E:16:32:1B:ED:C1:AE:46:A4:6C:13:AF
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 018CCA033A6A1DA449710A1E0240446844E0
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/Xpku9Mo_Hk5eFjIb7cGuRqRsE68.roa
Signing time: Tue 02 Jan 2024 11:50:58 +0000
ROA not before: Tue 02 Jan 2024 11:50:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34534
IP address blocks: 37.44.238.0/24 maxlen: 24
37.44.239.0/24 maxlen: 24
185.142.53.0/24 maxlen: 24
213.5.130.0/24 maxlen: 24
193.177.182.0/24 maxlen: 24
185.157.246.0/24 maxlen: 24
185.157.247.0/24 maxlen: 24
2a09:ca00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:03:3a:6a:1d:a4:49:71:0a:1e:02:40:44:68:44:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Jan 2 11:50:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e992ef4ca3f1e4e5e16321bedc1ae46a46c13af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:60:f3:9a:d4:41:bb:ae:a7:e5:85:77:f8:23:
3e:12:88:ea:cd:71:53:40:a0:b1:32:e0:f6:02:58:
66:4e:03:90:ec:74:3f:ca:32:d6:f8:fa:06:dd:85:
ed:12:5a:4c:fc:5e:68:64:4f:75:a8:f0:7b:7f:01:
14:3c:bc:44:5e:5c:ca:dd:9b:93:77:71:62:35:5a:
2c:53:bf:31:2c:2a:07:3a:04:2d:3b:f8:89:ab:49:
01:90:8f:09:55:2c:dd:70:f0:5a:d7:6f:95:a2:bf:
a5:15:91:74:c2:af:b5:f5:04:0d:2f:26:fc:31:2d:
be:28:41:0c:91:1e:aa:ee:a1:45:4e:87:ac:19:a1:
57:b8:47:ce:03:7b:01:92:a6:7c:34:bd:27:f6:1d:
01:a7:1b:48:8f:49:59:c8:ba:03:dd:59:ef:dc:2f:
70:ad:ff:dd:68:0d:6a:e6:41:bc:f6:93:b1:bf:dc:
9c:7e:0b:f1:db:92:b5:b7:f5:77:00:15:57:33:13:
c4:e1:b5:55:e0:c6:e2:48:de:9a:5d:70:35:bf:50:
00:68:a1:6a:e9:d0:2a:3c:ea:fd:20:fb:ee:84:49:
c8:90:12:38:1c:84:f0:e5:79:d8:5d:27:d3:1a:5f:
6d:88:ae:e7:14:22:9b:d4:c4:65:3a:13:d3:d1:1a:
5b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:99:2E:F4:CA:3F:1E:4E:5E:16:32:1B:ED:C1:AE:46:A4:6C:13:AF
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/Xpku9Mo_Hk5eFjIb7cGuRqRsE68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.238.0/23
185.142.53.0/24
185.157.246.0/23
193.177.182.0/24
213.5.130.0/24
IPv6:
2a09:ca00::/48
Signature Algorithm: sha256WithRSAEncryption
7b:18:c7:ea:c2:39:10:97:5e:9e:25:39:79:d9:cd:ee:23:67:
fd:d7:d4:ce:b1:9c:79:67:c7:22:53:0c:26:b2:14:29:75:ae:
cd:75:34:74:1f:d4:86:e1:38:ec:3a:f9:30:2b:59:d9:71:1f:
79:a8:34:de:cb:cc:b6:05:b9:05:9f:d0:07:3c:df:f7:dd:ea:
82:ab:73:76:30:b6:4d:20:38:b8:f9:72:89:8f:aa:16:32:7a:
da:cf:96:b8:59:42:dc:93:2a:ab:0e:57:a3:36:03:c5:51:19:
b3:54:56:8a:f9:2f:32:8c:12:56:97:12:f0:8e:19:e8:ce:94:
6e:68:3f:99:cc:fd:46:0f:be:b3:d4:90:be:e7:19:94:6f:12:
f8:e9:f0:0a:fc:cf:e3:97:5d:b1:7a:00:ff:66:34:5a:5a:c4:
79:c5:99:c5:99:f0:f2:0f:59:26:ce:33:f7:50:8b:77:5b:ab:
05:08:12:57:83:e4:4a:e7:f1:2b:6d:94:9e:a5:15:a8:43:25:
19:b5:0c:d4:6a:94:07:1e:e0:25:f3:75:e8:45:46:97:2d:89:
49:57:9b:4c:ba:2d:a9:d5:fa:20:64:06:8a:98:b1:ec:8c:d0:
1a:80:e2:34:c9:cb:28:84:7f:48:53:e7:77:f1:45:65:12:c0:
76:2f:81:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:17:16 2024 by rpki-client on console-ams.rpki-client.org