Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/FD7-xYqOHJJ6R2fAoKWiOL2x4yU.roa
File: FD7-xYqOHJJ6R2fAoKWiOL2x4yU.roa (raw, json)
Hash identifier: gAlKRGbOyFEJxG8A+s4lJVPq71TjRKLwNFTtIs+WoO0=
Subject key identifier: 14:3E:FE:C5:8A:8E:1C:92:7A:47:67:C0:A0:A5:A2:38:BD:B1:E3:25
Certificate issuer: /CN=5bf81435ed13789895f375dc34d04ce91aca4744
Certificate serial: 018CC79353965AFFF5DABAC4C348CA364F66
Authority key identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/FD7-xYqOHJJ6R2fAoKWiOL2x4yU.roa
Signing time: Tue 02 Jan 2024 00:29:30 +0000
ROA not before: Tue 02 Jan 2024 00:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201271
IP address blocks: 158.233.228.0/24 maxlen: 24
158.233.228.0/23 maxlen: 23
158.233.227.0/24 maxlen: 24
158.233.229.0/24 maxlen: 24
158.233.242.0/24 maxlen: 24
158.233.242.0/23 maxlen: 23
158.233.244.0/24 maxlen: 24
158.233.244.0/23 maxlen: 23
158.233.243.0/24 maxlen: 24
158.233.245.0/24 maxlen: 24
158.233.246.0/23 maxlen: 23
158.233.246.0/24 maxlen: 24
158.233.247.0/24 maxlen: 24
158.233.249.0/24 maxlen: 24
158.233.248.0/24 maxlen: 24
158.233.248.0/23 maxlen: 23
158.233.251.0/24 maxlen: 24
158.233.250.0/24 maxlen: 24
158.233.250.0/23 maxlen: 23
158.233.224.0/24 maxlen: 24
2001:67c:2af0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:53:96:5a:ff:f5:da:ba:c4:c3:48:ca:36:4f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf81435ed13789895f375dc34d04ce91aca4744
Validity
Not Before: Jan 2 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=143efec58a8e1c927a4767c0a0a5a238bdb1e325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:73:5e:63:1f:b5:a7:69:ac:7b:ec:99:69:
11:eb:ae:36:34:a3:d7:1f:62:09:b7:9b:fe:1f:b9:
c0:1d:56:dd:0b:42:5d:cd:e8:c3:31:33:6b:21:dc:
32:dd:d2:ab:37:be:18:a1:73:33:8f:11:48:1e:10:
38:89:7c:d8:cc:eb:9f:89:89:cc:17:9e:d4:9d:f2:
75:cb:56:98:b2:d7:a4:bc:7d:cd:19:a7:65:ed:20:
14:25:b5:6f:9d:2a:6c:ba:99:25:1a:1f:7b:a0:a0:
fa:98:50:96:bb:da:4c:68:49:32:ec:98:19:b5:74:
75:dc:1b:48:51:f2:9c:1b:d8:97:2c:35:38:60:db:
16:8d:65:16:60:6f:87:be:21:2a:72:ab:f7:12:49:
80:3b:a7:82:fd:82:3d:21:e4:b3:ef:82:bd:d4:f2:
d5:b7:96:41:f6:8c:a6:78:77:4a:74:9c:ff:78:f4:
69:5a:e9:54:1f:e6:32:67:2b:69:8a:6a:bc:ad:fc:
a6:ba:eb:1e:b1:42:02:4f:4f:33:04:ec:08:27:b3:
54:34:c6:c6:80:44:4e:96:33:f9:d3:cd:31:54:fc:
18:a3:1d:00:bc:a0:94:94:6d:e1:ba:3b:64:32:c2:
8d:2e:54:a8:73:a6:34:0b:ab:54:6a:57:c7:02:bb:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3E:FE:C5:8A:8E:1C:92:7A:47:67:C0:A0:A5:A2:38:BD:B1:E3:25
X509v3 Authority Key Identifier:
keyid:5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/FD7-xYqOHJJ6R2fAoKWiOL2x4yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.233.224.0/24
158.233.227.0-158.233.229.255
158.233.242.0-158.233.251.255
IPv6:
2001:67c:2af0::/48
Signature Algorithm: sha256WithRSAEncryption
aa:60:77:f8:59:75:3a:b0:e4:bd:14:c6:41:d8:83:c3:3a:2b:
99:f1:22:e0:bf:18:52:48:87:b6:2e:32:6c:bc:be:57:ac:1e:
fe:ca:eb:ed:31:d2:d2:af:6d:42:63:48:9a:13:ae:84:cc:fc:
0a:2d:b1:bf:e6:95:38:e3:71:73:e4:ce:82:2d:c5:11:97:77:
83:48:56:39:05:e1:07:a0:dd:9c:86:3a:a3:60:65:92:cb:dc:
33:1d:98:9c:cf:5a:3e:3f:41:61:26:03:a6:ab:1e:07:ee:cf:
06:1f:f5:d1:02:c4:9b:b6:24:00:39:7e:bf:8a:d7:d0:e0:5f:
af:1c:70:34:20:2e:77:ac:6b:32:54:67:a2:36:cd:be:3f:4e:
8e:e1:04:f2:e8:1d:6f:02:fe:ab:4e:b9:6e:bc:83:a6:88:ae:
63:95:77:f2:a8:77:f5:6b:0a:d1:0a:ea:53:da:cb:27:64:58:
86:2e:df:a3:69:3f:8f:a9:b5:e0:d4:29:f2:57:84:13:4e:a3:
29:41:8f:4e:05:3d:39:27:d0:fc:02:d0:68:06:4a:85:21:61:
b7:f1:18:af:01:5a:c6:8b:95:8b:6f:45:8f:65:5a:ff:ae:64:
18:c2:9b:6c:0f:38:dc:60:87:e3:6a:75:bb:c3:67:aa:ca:d7:
65:a3:fa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:28:11 2024 by rpki-client on console-ams.rpki-client.org