Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/2JsW6fEAJQ3sLiqVCO8eFWEtpW8.roa
File: 2JsW6fEAJQ3sLiqVCO8eFWEtpW8.roa (raw, json)
Hash identifier: yuVpYlpgxDw2Xa8DJWPEKAjMPOdJrl0VL5xmd4Dgyl4=
Subject key identifier: D8:9B:16:E9:F1:00:25:0D:EC:2E:2A:95:08:EF:1E:15:61:2D:A5:6F
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 018CC348DFE2D6BF7FD1920C7C525A61B144
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/2JsW6fEAJQ3sLiqVCO8eFWEtpW8.roa
Signing time: Mon 01 Jan 2024 04:29:42 +0000
ROA not before: Mon 01 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206575
IP address blocks: 194.5.68.0/22 maxlen: 22
185.155.224.0/23 maxlen: 23
80.253.160.0/24 maxlen: 24
80.253.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:df:e2:d6:bf:7f:d1:92:0c:7c:52:5a:61:b1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Jan 1 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d89b16e9f100250dec2e2a9508ef1e15612da56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:7e:2e:bf:53:a9:ec:cd:3b:fe:8d:cc:03:
52:a0:ac:9c:aa:2b:fa:72:4f:94:d7:e1:e6:d3:e5:
6b:64:eb:c1:3c:6a:57:e8:38:b4:3d:44:c4:33:16:
07:17:1f:5c:39:3b:82:29:44:c6:fa:76:6d:b3:07:
17:75:fe:d9:47:8f:7d:2f:19:dd:9b:3b:58:c3:de:
a4:3b:a3:78:f4:b8:37:05:af:b0:73:dc:08:f0:a8:
39:5c:d4:9e:b2:4a:5c:5f:e1:5e:86:3d:ee:3c:e8:
f1:b7:e3:ad:07:27:e7:82:de:c0:d0:ba:59:f9:b2:
7d:0e:a9:34:75:94:40:88:80:1c:5a:8a:e8:a0:70:
45:ad:f5:65:96:87:01:6d:07:05:5b:1a:ba:f3:fb:
00:55:7c:76:13:14:3d:2f:5c:65:b7:4b:fe:f8:6a:
39:30:d3:bf:36:30:2a:06:92:84:29:a4:68:19:eb:
80:1a:4a:cf:00:c5:a0:2c:52:9e:88:47:ee:0d:43:
d5:3f:30:d0:1b:ff:53:35:6e:ee:78:63:6f:c0:95:
fc:f0:12:30:23:1e:33:92:70:28:ac:3f:80:fd:3e:
b7:ac:81:c3:1e:b4:13:1d:24:f1:91:36:25:72:08:
91:91:0d:3c:9e:fd:9c:7e:f9:fc:5e:06:66:7f:fa:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9B:16:E9:F1:00:25:0D:EC:2E:2A:95:08:EF:1E:15:61:2D:A5:6F
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/2JsW6fEAJQ3sLiqVCO8eFWEtpW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.160.0/22
185.155.224.0/23
194.5.68.0/22
Signature Algorithm: sha256WithRSAEncryption
45:45:5c:fe:73:e4:98:4a:7f:3e:04:d5:21:5e:1e:26:ac:7c:
7c:a8:51:43:dd:b9:b2:78:ab:d7:e5:14:54:d5:84:3b:95:50:
63:d9:b8:46:ee:ed:53:86:0d:b1:a1:06:a5:fa:fe:a8:3b:df:
e1:ca:e6:35:73:98:a8:cb:d9:d9:d1:3b:cf:3c:67:b3:77:b0:
33:83:f6:69:83:3e:09:5b:63:af:7c:ef:53:dd:e0:16:a3:ad:
e9:38:6a:24:bd:6f:37:d4:58:92:13:f9:fe:53:59:8f:85:08:
04:ba:ba:0e:f4:00:c6:0f:26:cd:4e:a1:99:8f:6b:60:48:03:
20:56:4b:1d:df:06:eb:80:eb:7a:55:fc:6e:53:03:a6:ea:48:
be:cd:ef:cc:63:30:ef:d9:11:92:1c:de:bf:d6:b9:47:eb:bd:
fa:ee:0a:bd:6c:00:25:e0:14:57:7a:b2:5f:3e:1e:84:33:fe:
d7:8f:df:ed:4a:2d:b4:b4:41:80:ad:dc:07:ce:6c:c0:0f:08:
70:64:c3:3b:6e:1d:b1:bf:1d:85:24:c8:0a:c9:39:2c:84:aa:
02:cb:d2:cb:71:32:19:12:9d:e5:db:9b:c8:51:7c:b0:78:cc:
32:50:62:5b:b2:4c:8d:32:40:1d:ff:2e:af:0a:13:81:f9:87:
24:6b:15:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:56 2024 by rpki-client on console-fra.rpki-client.org