Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/ExreR655ua4VdeYRGfJcoYet3Zc.roa
File: ExreR655ua4VdeYRGfJcoYet3Zc.roa (raw, json)
Hash identifier: VPw4ulkGEHLV6eBi0EJE6uJfcdG2H+HTdL85qNdoS8g=
Subject key identifier: 13:1A:DE:47:AE:79:B9:AE:15:75:E6:11:19:F2:5C:A1:87:AD:DD:97
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 018CC348DE95DE6D199FFB876AFF7E30003D
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/ExreR655ua4VdeYRGfJcoYet3Zc.roa
Signing time: Mon 01 Jan 2024 04:29:41 +0000
ROA not before: Mon 01 Jan 2024 04:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3261
IP address blocks: 5.153.128.0/19 maxlen: 24
195.184.192.0/19 maxlen: 24
5.153.162.0/24 maxlen: 24
5.153.161.0/24 maxlen: 24
5.153.160.0/24 maxlen: 24
5.153.160.0/22 maxlen: 22
5.153.165.0/24 maxlen: 24
5.153.164.0/24 maxlen: 24
5.153.163.0/24 maxlen: 24
5.153.166.0/24 maxlen: 24
5.153.169.0/24 maxlen: 24
5.153.168.0/24 maxlen: 24
5.153.167.0/24 maxlen: 24
5.153.171.0/24 maxlen: 24
5.153.170.0/24 maxlen: 24
2.57.112.0/22 maxlen: 24
92.242.96.0/19 maxlen: 24
5.153.174.0/24 maxlen: 24
5.153.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:de:95:de:6d:19:9f:fb:87:6a:ff:7e:30:00:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jan 1 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=131ade47ae79b9ae1575e61119f25ca187addd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:d4:bf:0d:97:34:67:c6:8c:d2:32:94:66:
bd:02:57:11:d8:2a:94:72:5e:b1:8c:f3:87:d7:c5:
d9:83:3b:d8:6f:24:ef:78:3c:79:de:77:63:90:be:
50:6d:20:e7:30:7a:cf:55:71:a2:bf:63:b5:ac:57:
db:20:a3:86:2b:2c:70:72:93:b9:e0:d5:58:1f:8c:
82:f0:76:01:96:a1:5a:5f:f5:32:60:a4:5a:41:db:
15:79:69:50:eb:0f:a5:0d:62:76:18:26:23:e9:bc:
16:53:3b:29:58:14:f2:4b:a0:9b:c6:e8:05:5f:49:
c2:4b:63:5a:a3:cf:90:f5:31:fb:7b:a6:3b:0c:ca:
48:14:91:72:36:f5:b9:6b:fb:5e:89:d6:9b:3d:86:
b7:5b:e3:57:de:32:89:26:27:db:02:b6:da:0c:14:
21:06:b0:ab:fe:ed:4e:ed:bc:97:eb:1f:36:56:75:
d5:2b:3b:19:28:a5:0c:d0:46:4c:9b:3b:8e:5f:b5:
38:92:ae:3f:66:75:18:c6:4e:2f:6f:67:b0:06:50:
53:c9:4f:c5:10:8a:86:7e:3a:fd:93:f2:b4:ce:63:
9b:14:de:bc:58:70:e2:3c:31:f1:8b:7c:ca:09:95:
5b:0d:f9:c6:43:91:12:6e:f0:9e:e9:5b:0e:37:91:
4c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1A:DE:47:AE:79:B9:AE:15:75:E6:11:19:F2:5C:A1:87:AD:DD:97
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/ExreR655ua4VdeYRGfJcoYet3Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.112.0/22
5.153.128.0-5.153.171.255
5.153.173.0-5.153.174.255
92.242.96.0/19
195.184.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:b8:18:b3:67:e0:6a:0a:51:b0:67:2f:3a:ac:2a:f5:0d:af:
57:44:9f:58:60:ed:a0:ee:d9:c3:9c:20:0c:41:dd:24:73:45:
6f:dc:83:e6:a0:2d:57:8f:96:76:af:0b:43:e4:2a:a1:dd:af:
aa:87:3d:4d:d5:87:12:fc:ff:18:4f:1f:ad:31:2b:df:5f:7a:
01:d8:dc:44:df:20:8c:4a:53:12:dd:8e:df:6b:57:97:d0:7e:
7e:fc:14:07:08:db:e8:23:d2:ee:8a:37:3f:b2:90:a7:28:2f:
29:b0:0e:98:82:7a:d5:20:03:e1:a4:ab:c0:39:58:42:ea:65:
62:ac:32:26:bb:05:1c:26:b7:91:b3:ba:75:33:f4:85:74:69:
bb:92:9f:97:16:8c:bd:f0:e3:b0:5f:a4:17:1d:d1:48:58:7b:
13:35:f9:19:9f:fe:f0:21:d6:9c:b1:da:d3:f1:a6:70:11:12:
31:9a:5a:86:16:dd:3f:e5:c3:d2:7b:45:1e:63:e7:fe:b3:dd:
2a:12:53:bc:a6:db:d5:f4:a6:35:3a:96:95:94:94:b8:9d:bc:
87:c7:88:08:c5:6d:eb:85:f0:33:f4:c7:98:aa:60:9e:20:05:
10:da:73:54:20:d0:5e:e7:ba:31:3d:15:42:17:1d:38:fc:48:
60:ea:c1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:34:44 2024 by rpki-client on console-fra.rpki-client.org