Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/as2ouzTkFaYBFJR_GvEZGfbT-5A.roa
File: as2ouzTkFaYBFJR_GvEZGfbT-5A.roa (raw, json)
Hash identifier: e5AnOgFhaNar7V574CalAnloXzQnPpgES2lVG8RNJ/c=
Subject key identifier: 6A:CD:A8:BB:34:E4:15:A6:01:14:94:7F:1A:F1:19:19:F6:D3:FB:90
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018EA9A607FE41C383424827B2F04A8E1CC9
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/as2ouzTkFaYBFJR_GvEZGfbT-5A.roa
Signing time: Thu 04 Apr 2024 15:06:54 +0000
ROA not before: Thu 04 Apr 2024 15:06:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 104.167.0.0/24 maxlen: 24
104.222.169.0/24 maxlen: 24
104.222.170.0/24 maxlen: 24
104.222.171.0/24 maxlen: 24
104.222.172.0/24 maxlen: 24
104.222.173.0/24 maxlen: 24
104.222.174.0/24 maxlen: 24
104.222.175.0/24 maxlen: 24
104.233.20.0/24 maxlen: 24
104.239.13.0/24 maxlen: 24
104.239.16.0/22 maxlen: 22
104.239.20.0/22 maxlen: 22
104.239.32.0/22 maxlen: 22
104.239.36.0/22 maxlen: 22
104.239.82.0/24 maxlen: 24
104.239.90.0/23 maxlen: 23
104.239.92.0/23 maxlen: 23
104.239.98.0/24 maxlen: 24
104.243.193.0/24 maxlen: 24
104.243.194.0/24 maxlen: 24
104.243.195.0/24 maxlen: 24
104.243.196.0/24 maxlen: 24
104.243.197.0/24 maxlen: 24
104.243.198.0/24 maxlen: 24
104.243.207.0/24 maxlen: 24
216.173.80.0/23 maxlen: 23
216.173.88.0/23 maxlen: 23
216.173.108.0/24 maxlen: 24
216.173.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a9:a6:07:fe:41:c3:83:42:48:27:b2:f0:4a:8e:1c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 4 15:06:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6acda8bb34e415a60114947f1af11919f6d3fb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4f:8b:47:1a:bb:f1:94:d5:27:0b:3b:71:8e:
c4:bb:f4:0d:1e:eb:b0:d9:6e:94:26:9e:33:a7:56:
2d:be:17:91:ff:f8:70:7e:5e:62:24:ff:94:9f:dc:
1c:9f:b3:f1:51:db:7e:80:ab:84:78:60:1c:b4:74:
a9:8f:e5:8b:c8:58:00:8a:01:29:b9:af:e0:ca:17:
dd:60:f2:a6:cf:57:29:9a:36:bf:31:b3:f9:16:c8:
4d:35:14:17:c1:12:b1:53:f8:95:68:af:7c:9a:b7:
23:dd:ce:06:71:dd:f1:29:6b:4c:7e:95:43:52:30:
eb:30:ae:93:a3:60:8b:5a:2d:21:54:41:fd:d8:a7:
17:66:3f:e8:e9:39:15:52:13:37:b2:3a:e2:40:50:
77:6e:df:0f:ee:ed:87:fa:1b:d1:8c:fc:9f:4b:68:
1f:05:24:4b:ee:19:bd:d9:94:af:f8:00:50:11:b2:
db:ab:45:27:43:a8:25:af:65:76:03:1d:96:22:ee:
8e:f6:f6:42:cc:88:ab:df:54:ba:40:68:1f:f9:02:
e4:f7:3b:46:90:34:4b:6b:2c:83:ea:ab:ce:1a:1b:
aa:95:b5:70:5b:1d:4b:bb:03:6b:7a:67:49:ae:b2:
e1:9b:87:84:ad:1e:ed:60:39:18:c0:92:da:02:35:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CD:A8:BB:34:E4:15:A6:01:14:94:7F:1A:F1:19:19:F6:D3:FB:90
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/as2ouzTkFaYBFJR_GvEZGfbT-5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.167.0.0/24
104.222.169.0-104.222.175.255
104.233.20.0/24
104.239.13.0/24
104.239.16.0/21
104.239.32.0/21
104.239.82.0/24
104.239.90.0-104.239.93.255
104.239.98.0/24
104.243.193.0-104.243.198.255
104.243.207.0/24
216.173.80.0/23
216.173.88.0/23
216.173.108.0/24
216.173.122.0/23
Signature Algorithm: sha256WithRSAEncryption
99:df:4b:89:66:66:b6:ea:7c:54:1a:21:d6:3d:3d:62:6c:27:
e6:88:7f:3d:07:12:3f:c8:b4:a1:53:65:67:40:44:0f:86:04:
fc:72:1b:69:3d:6b:17:f5:55:cf:83:09:bc:6f:fa:0a:75:b1:
3c:b5:8f:e1:cd:bf:b3:13:d3:48:04:45:22:1a:bf:c2:ae:57:
f1:58:c4:2e:bb:2b:82:fc:ec:e0:7a:19:35:3b:3a:6a:9c:40:
14:27:d8:8d:25:0d:a2:9e:fa:7d:d2:ff:b9:ec:7f:52:81:1d:
43:e2:14:51:4e:5b:1a:2a:39:f0:1c:75:be:4f:7b:67:ab:f5:
89:68:0b:4f:c3:a2:2f:b4:cf:9d:3f:c5:26:6e:dd:2e:6a:90:
e6:47:fd:75:5e:52:2d:64:8b:b6:e1:18:67:e7:d7:0e:16:b2:
03:af:2c:03:b7:2f:c3:be:63:22:5a:e0:42:20:83:11:ae:50:
d1:f8:f3:62:29:aa:f9:6b:76:c1:48:11:89:fd:a6:4e:61:63:
20:27:c2:e5:be:54:81:5c:f3:43:11:f6:e1:43:37:ed:32:50:
8e:50:9d:5b:e1:60:6b:24:6f:41:5b:f2:09:23:be:83:3b:bd:
f6:e3:56:00:a2:c6:28:d7:27:7a:8b:c8:8f:ff:5c:be:c3:a1:
fc:48:a4:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon May 6 18:07:33 2024 by rpki-client on console-fra.rpki-client.org