Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mIY7OhiEhVVgXAOX_mzNZFXfF-E.roa
File: mIY7OhiEhVVgXAOX_mzNZFXfF-E.roa (raw, json)
Hash identifier: CPevl1Uk+KNILzAYGCgkjmvbSrQUC7h69osFv1H1dlM=
Subject key identifier: 98:86:3B:3A:18:84:85:55:60:5C:03:97:FE:6C:CD:64:55:DF:17:E1
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018EE35785515B5ACD12DCEDD69E3EFA231F
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mIY7OhiEhVVgXAOX_mzNZFXfF-E.roa
Signing time: Mon 15 Apr 2024 19:59:07 +0000
ROA not before: Mon 15 Apr 2024 19:59:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 5.182.117.0/24 maxlen: 24
31.222.230.0/24 maxlen: 24
37.72.128.0/24 maxlen: 24
45.129.197.0/24 maxlen: 24
62.204.52.0/24 maxlen: 24
77.83.193.0/24 maxlen: 24
78.142.238.0/24 maxlen: 24
130.255.172.0/24 maxlen: 24
130.255.175.0/24 maxlen: 24
146.19.129.0/24 maxlen: 24
185.253.4.0/24 maxlen: 24
193.17.88.0/24 maxlen: 24
193.201.10.0/24 maxlen: 24
194.69.164.0/24 maxlen: 24
195.64.127.0/24 maxlen: 24
195.96.159.0/24 maxlen: 24
212.107.26.0/24 maxlen: 24
213.109.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e3:57:85:51:5b:5a:cd:12:dc:ed:d6:9e:3e:fa:23:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 15 19:59:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98863b3a18848555605c0397fe6ccd6455df17e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:14:65:58:fb:22:f7:a1:cf:91:86:1a:9e:
d9:7e:69:f6:99:ec:b1:70:37:01:15:68:4c:2b:bc:
cb:a7:10:5c:d8:e0:d8:ac:53:48:b1:97:1d:4e:5c:
0b:eb:57:22:3f:90:29:98:a0:9e:a3:d0:68:31:5f:
9d:e4:66:ec:ab:b0:f6:2d:b4:2d:05:1b:b8:c2:af:
0b:bf:65:34:ca:2f:41:d8:6f:0f:5f:58:91:24:75:
ac:f6:7b:95:22:32:60:52:e7:52:3a:20:a5:18:cc:
36:a6:e6:5d:a9:fb:dc:43:50:ca:db:c2:e7:d4:5a:
15:d1:56:75:db:5a:d8:2c:31:d6:ca:00:bf:aa:00:
6a:8c:64:19:d8:26:09:5c:b4:3c:56:89:04:6d:38:
4d:5f:ae:f6:a5:8f:2a:7a:72:22:61:79:89:1c:fb:
41:72:8b:9d:d4:0f:71:9b:3c:4b:d7:86:d8:06:45:
42:d2:cf:5d:6d:15:47:9f:37:de:4c:c7:e4:b1:3f:
4c:f8:3c:32:3c:f8:c0:fa:92:6f:3f:48:25:df:bf:
d4:6a:b9:62:d2:a9:b0:c5:9a:b9:49:87:50:f1:88:
70:c6:1b:1e:86:5b:23:e7:51:94:b7:a9:12:b3:35:
d8:a4:16:3e:b8:73:f4:bd:ba:ac:cd:b9:a5:17:58:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:86:3B:3A:18:84:85:55:60:5C:03:97:FE:6C:CD:64:55:DF:17:E1
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mIY7OhiEhVVgXAOX_mzNZFXfF-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.117.0/24
31.222.230.0/24
37.72.128.0/24
45.129.197.0/24
62.204.52.0/24
77.83.193.0/24
78.142.238.0/24
130.255.172.0/24
130.255.175.0/24
146.19.129.0/24
185.253.4.0/24
193.17.88.0/24
193.201.10.0/24
194.69.164.0/24
195.64.127.0/24
195.96.159.0/24
212.107.26.0/24
213.109.153.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:6e:e6:7f:dc:fc:1f:c9:59:81:a6:77:7b:6d:5a:74:e5:fc:
cb:07:86:fa:46:4e:2e:29:a7:18:d6:43:99:f0:a2:25:fb:4c:
aa:c1:f2:58:75:67:3b:19:ae:4e:ec:d7:bb:93:b9:7b:b4:4d:
bf:29:2c:4f:d8:d2:4d:8d:a4:00:12:37:47:97:94:c2:e5:dc:
a8:8e:bc:6b:96:91:fa:91:35:e9:56:c7:12:b0:c8:e3:16:30:
39:eb:b6:57:d7:01:db:9c:82:28:f8:e8:55:56:73:9b:99:00:
30:08:6c:ac:4b:8c:18:bd:71:11:ff:52:fc:a3:4d:ce:aa:37:
50:e4:c8:06:4a:13:0d:06:eb:39:d1:2a:3b:71:5c:4d:fc:30:
2e:2f:78:cf:02:79:65:ec:bc:ff:11:df:83:98:19:a6:20:1c:
e2:ba:48:63:26:18:c5:67:27:b0:e2:4f:fa:a5:b3:79:58:8c:
29:84:0d:a8:f7:97:4a:ee:70:81:a6:e6:20:e4:50:5c:b0:d3:
ca:b8:13:ab:f7:6b:71:36:12:60:8d:7a:4a:19:42:e2:40:7d:
ca:62:29:24:00:e6:7c:96:34:47:45:c3:0e:52:e2:bc:6b:e8:
71:4c:83:71:cd:5a:9e:45:6f:06:97:81:27:3c:47:18:c6:4c:
ee:2e:f2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:05:02 2024 by rpki-client on console-fra.rpki-client.org