Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/1MpjHXfWIXDG4Y99AZJmprMFUvs.roa
File: 1MpjHXfWIXDG4Y99AZJmprMFUvs.roa (raw, json)
Hash identifier: 96aRGf0tYXgvfLmnID6Fp91yl4Vm2nAFq5EapxV58dY=
Subject key identifier: D4:CA:63:1D:77:D6:21:70:C6:E1:8F:7D:01:92:66:A6:B3:05:52:FB
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 018CCA99B0F12E2CE8591C248F6EA631ED2A
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/1MpjHXfWIXDG4Y99AZJmprMFUvs.roa
Signing time: Tue 02 Jan 2024 14:35:19 +0000
ROA not before: Tue 02 Jan 2024 14:35:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32590
IP address blocks: 155.133.233.0/24 maxlen: 24
155.133.232.0/24 maxlen: 24
155.133.230.0/23 maxlen: 24
155.133.228.0/23 maxlen: 24
155.133.227.0/24 maxlen: 24
155.133.240.0/23 maxlen: 24
155.133.239.0/24 maxlen: 24
155.133.238.0/24 maxlen: 24
155.133.236.0/23 maxlen: 24
155.133.235.0/24 maxlen: 24
155.133.234.0/24 maxlen: 24
146.66.152.0/23 maxlen: 24
155.133.246.0/23 maxlen: 24
155.133.245.0/24 maxlen: 24
155.133.244.0/24 maxlen: 24
155.133.242.0/23 maxlen: 24
155.133.251.0/24 maxlen: 24
146.66.158.0/23 maxlen: 24
155.133.253.0/24 maxlen: 24
155.133.252.0/24 maxlen: 24
155.133.250.0/24 maxlen: 24
146.66.156.0/23 maxlen: 24
155.133.249.0/24 maxlen: 24
146.66.155.0/24 maxlen: 24
146.66.154.0/24 maxlen: 24
155.133.248.0/24 maxlen: 24
155.133.255.0/24 maxlen: 24
155.133.254.0/24 maxlen: 24
155.133.226.0/24 maxlen: 24
155.133.224.0/23 maxlen: 24
185.25.183.0/24 maxlen: 24
185.25.182.0/24 maxlen: 24
185.25.180.0/23 maxlen: 24
2a01:bc80:9::/48 maxlen: 48
2a01:bc80:c::/48 maxlen: 48
2a01:bc80:7::/48 maxlen: 48
2a01:bc80:2::/48 maxlen: 48
2a01:bc80:b::/48 maxlen: 48
2a01:bc80:6::/48 maxlen: 48
2a01:bc80:1::/48 maxlen: 48
2a01:bc80:4::/48 maxlen: 48
2a01:bc80:8::/48 maxlen: 48
2a01:bc80:3::/48 maxlen: 48
2a01:bc80::/48 maxlen: 48
2a01:bc80:a::/48 maxlen: 48
2a01:bc80:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 01:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:b0:f1:2e:2c:e8:59:1c:24:8f:6e:a6:31:ed:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: Jan 2 14:35:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4ca631d77d62170c6e18f7d019266a6b30552fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d9:e5:9d:78:ec:c5:57:0f:ca:a1:c1:52:7c:
38:e7:8f:14:ba:06:29:38:fd:5d:fa:9b:00:93:6b:
a4:6e:3b:06:89:66:5b:9b:2a:ea:34:2d:2e:6b:86:
a9:b4:a1:7a:aa:17:90:8a:44:a5:f3:1d:86:c9:07:
79:dd:74:a5:3b:9e:8a:54:0f:97:45:88:41:f8:3c:
05:c1:c9:bf:3c:b8:50:f4:15:69:2d:df:4d:18:28:
e5:08:b6:81:8c:77:5f:e6:0a:59:d9:c1:d9:44:c3:
25:1f:e0:ff:c8:41:39:ba:8f:ab:09:ba:3d:91:de:
ca:bf:2b:2a:24:d0:08:c3:a7:a3:ca:85:f5:38:c6:
18:1f:e7:cd:bc:d7:ec:ef:cc:11:bc:ff:cd:dd:62:
75:f6:75:70:72:e0:a7:41:3e:e2:f7:fb:26:43:8e:
8a:49:9a:3d:56:b4:9f:1d:de:42:0e:41:bc:41:3f:
f1:9f:73:d3:ae:00:c3:bc:aa:17:07:86:7b:af:1d:
27:1f:7b:7b:28:14:d7:92:22:4f:3b:9d:f1:0f:47:
a7:64:21:d3:cf:ea:11:34:03:07:c5:a6:17:58:ac:
01:9f:4b:50:7a:28:14:69:ce:8b:52:9a:48:7c:af:
a4:94:89:8b:54:00:52:5e:46:ef:7d:86:45:8b:3a:
72:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CA:63:1D:77:D6:21:70:C6:E1:8F:7D:01:92:66:A6:B3:05:52:FB
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/1MpjHXfWIXDG4Y99AZJmprMFUvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.66.152.0/21
155.133.224.0/19
185.25.180.0/22
IPv6:
2a01:bc80::-2a01:bc80:c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9b:cc:aa:cc:46:c3:e1:1a:4a:d1:89:83:fd:9a:2f:b1:44:4d:
17:73:ec:6e:c6:04:d9:02:04:89:28:57:40:11:22:db:46:13:
24:4f:2f:ce:ea:3c:47:da:5b:98:61:59:50:49:ab:a4:8c:ec:
52:be:e0:2b:89:f3:b0:79:e0:b4:56:72:25:a9:ca:fa:27:63:
55:22:9b:cf:58:1b:11:92:5a:2f:57:60:41:2b:7c:5a:a8:74:
7c:66:0a:cd:64:87:b7:96:06:2b:55:14:76:89:b5:a1:d1:d5:
8b:a5:f5:86:c5:88:c3:51:ee:ae:79:a4:90:98:15:dd:f6:22:
15:f4:09:99:87:05:85:80:99:a5:f0:a2:81:05:63:ab:71:a5:
aa:ee:2e:76:06:9c:1a:c3:be:85:19:29:1a:bb:2a:9d:b4:05:
b1:f3:58:9c:cc:b3:03:ef:fd:70:06:16:a0:1c:aa:2c:62:5a:
bc:30:97:6f:fa:46:76:20:62:cb:17:bd:45:26:99:86:19:92:
89:e0:61:3a:65:e7:78:17:be:76:f0:b8:a0:b0:cf:73:fb:2e:
05:c8:98:78:8b:b1:4a:39:a1:42:20:db:f5:c0:02:67:24:b8:
d0:de:65:94:d7:b2:3e:6d:25:8b:52:b1:29:e3:24:fb:6d:02:
82:85:67:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 06:23:29 2024 by rpki-client on console-ams.rpki-client.org