Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/1RAYfzgUBpq61-YYJZoK335kkHg.roa
File: 1RAYfzgUBpq61-YYJZoK335kkHg.roa (raw, json)
Hash identifier: 59GTAUBwc28ZfcBEjaeSk6QmAJxDHB44Y007AfgG+nA=
Subject key identifier: D5:10:18:7F:38:14:06:9A:BA:D7:E6:18:25:9A:0A:DF:7E:64:90:78
Certificate issuer: /CN=5bf81435ed13789895f375dc34d04ce91aca4744
Certificate serial: 018CC7935322D4DF5E75427F1F28B1834513
Authority key identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/1RAYfzgUBpq61-YYJZoK335kkHg.roa
Signing time: Tue 02 Jan 2024 00:29:30 +0000
ROA not before: Tue 02 Jan 2024 00:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3308
IP address blocks: 158.233.228.0/24 maxlen: 24
158.233.229.0/24 maxlen: 24
158.233.242.0/24 maxlen: 24
158.233.246.0/24 maxlen: 24
158.233.244.0/24 maxlen: 24
158.233.245.0/24 maxlen: 24
158.233.243.0/24 maxlen: 24
158.233.251.0/24 maxlen: 24
158.233.250.0/24 maxlen: 24
158.233.248.0/24 maxlen: 24
158.233.249.0/24 maxlen: 24
158.233.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:53:22:d4:df:5e:75:42:7f:1f:28:b1:83:45:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf81435ed13789895f375dc34d04ce91aca4744
Validity
Not Before: Jan 2 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d510187f3814069abad7e618259a0adf7e649078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:92:d5:26:7f:b8:fe:b2:6b:bf:b3:e6:49:
be:09:c0:93:12:f8:48:7e:1d:e1:e8:81:05:f0:c9:
92:6c:70:3c:50:4a:54:b6:c9:dd:d3:e0:f2:ac:5b:
83:fa:e7:4e:e1:93:12:49:c0:cd:13:f7:cf:a7:cf:
ac:ba:b1:0e:25:21:a0:21:f4:49:2f:96:ea:9c:f6:
a2:fe:02:04:57:ed:2a:e7:61:7c:c7:b6:0a:6b:eb:
75:78:a9:d5:f3:9b:17:32:09:e2:cd:12:50:cb:b8:
a1:82:a5:cf:b4:6e:9f:93:d5:d3:72:06:86:da:27:
8b:b2:78:25:f3:bb:8f:cd:b3:e5:fa:2f:65:55:e5:
79:8a:d9:93:2c:d2:19:d1:67:3c:71:e9:9a:20:02:
df:52:bd:0d:b2:aa:ad:ef:92:cc:fa:9f:09:a7:0a:
65:eb:db:a0:24:1f:37:60:c8:c6:c4:75:e1:41:62:
1c:a3:70:e0:dd:d7:2b:ee:ff:2d:44:26:2e:81:bb:
df:e3:4f:21:74:6b:77:28:9a:98:c7:11:70:29:6f:
0c:fb:ef:1b:50:41:6e:3e:ff:b7:c0:95:c5:f8:df:
7a:a2:c3:2c:64:8e:53:4c:a7:d4:12:6c:03:02:0c:
c0:51:d1:bb:5e:c7:03:2e:51:50:c7:45:ef:c9:42:
22:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:10:18:7F:38:14:06:9A:BA:D7:E6:18:25:9A:0A:DF:7E:64:90:78
X509v3 Authority Key Identifier:
keyid:5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/1RAYfzgUBpq61-YYJZoK335kkHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.233.228.0/23
158.233.242.0-158.233.251.255
Signature Algorithm: sha256WithRSAEncryption
95:1a:00:09:c2:81:87:2b:c5:8f:cd:28:69:c1:bf:7e:9e:c3:
0a:16:1c:88:fe:a8:1f:01:d2:c5:4d:f9:b1:c3:44:12:e2:69:
65:b4:23:11:84:92:3c:ad:50:2b:c3:a0:08:54:df:d8:6e:b7:
20:57:eb:2c:ee:83:44:f0:a6:d9:fb:70:b4:f2:3e:48:9d:65:
16:74:f5:25:9a:ae:db:5b:31:d7:fd:4f:c3:c9:37:8a:18:b6:
55:0f:fb:a1:5c:bc:1e:af:e2:3e:41:30:d6:65:bc:13:ea:d4:
bd:6e:4f:c4:54:0e:64:e5:39:e4:2b:ba:24:b4:c5:92:3d:44:
65:8c:1c:00:65:10:e6:dd:ac:bb:ca:bf:42:04:2f:9a:5c:f2:
6c:ce:cb:02:10:de:74:bd:aa:53:d2:c1:dd:66:c7:5a:98:87:
94:d2:fe:27:21:67:10:19:dc:65:38:ff:85:8b:b7:1f:49:42:
d2:5c:3c:4f:83:fd:58:03:47:70:74:87:85:b7:1e:70:0d:4b:
73:3f:a8:c2:ce:26:8f:f1:37:67:8f:7f:be:5a:c5:66:06:52:
74:bd:bf:95:02:c7:58:7f:85:b6:d1:70:74:97:1f:45:80:73:
ea:37:23:f9:c2:dd:89:e8:8c:40:79:4a:6f:86:7c:e7:28:ff:
90:6e:dc:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:01 2024 by rpki-client on console-fra.rpki-client.org