Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/2Uvwbx1Pyl6sYDiOEIRXgKMRlvQ.roa
File: 2Uvwbx1Pyl6sYDiOEIRXgKMRlvQ.roa (raw, json)
Hash identifier: +wHVs9PxB4+BColekiK4/WHWyRWZKfjekhdONlXqPJI=
Subject key identifier: D9:4B:F0:6F:1D:4F:CA:5E:AC:60:38:8E:10:84:57:80:A3:11:96:F4
Certificate issuer: /CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Certificate serial: 0190C4FE3C2CADD812793CA42880E9839B92
Authority key identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/2Uvwbx1Pyl6sYDiOEIRXgKMRlvQ.roa
Signing time: Thu 18 Jul 2024 08:38:34 +0000
ROA not before: Thu 18 Jul 2024 08:38:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202207
IP address blocks: 5.56.160.0/21 maxlen: 24
5.56.160.0/24 maxlen: 24
5.56.161.0/24 maxlen: 24
5.56.162.0/24 maxlen: 24
5.56.163.0/24 maxlen: 24
5.56.164.0/24 maxlen: 24
5.56.165.0/24 maxlen: 24
5.56.166.0/24 maxlen: 24
5.56.167.0/24 maxlen: 24
5.181.44.0/22 maxlen: 24
5.181.44.0/24 maxlen: 24
5.181.45.0/24 maxlen: 24
5.181.46.0/24 maxlen: 24
5.181.47.0/24 maxlen: 24
185.5.124.0/22 maxlen: 24
185.5.124.0/24 maxlen: 24
185.5.125.0/24 maxlen: 24
185.5.126.0/24 maxlen: 24
185.5.127.0/24 maxlen: 24
2a03:1c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c4:fe:3c:2c:ad:d8:12:79:3c:a4:28:80:e9:83:9b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Validity
Not Before: Jul 18 08:38:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d94bf06f1d4fca5eac60388e10845780a31196f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:3c:95:c5:2d:10:45:bf:02:76:0d:dd:49:
08:3e:cd:70:c7:9a:33:64:33:f3:c3:3b:7a:ef:a4:
f8:ea:67:9e:2e:42:3e:c3:8d:81:1b:98:6b:05:93:
ec:ee:3a:a8:cb:45:0f:18:bc:ff:5d:35:c3:2f:64:
9a:9e:8b:5e:4e:25:7e:45:73:f9:85:26:e0:c9:fe:
58:be:fc:95:f1:ed:05:70:04:dd:76:ca:bf:f0:49:
e0:6d:ac:18:3e:cc:4f:d5:9a:4a:6a:5b:b6:f9:ec:
60:84:80:e4:3f:32:92:db:85:95:01:44:78:27:e7:
87:63:06:0f:b4:c6:74:3f:1e:f5:ca:01:1a:a7:57:
9b:83:b1:4f:42:ab:17:40:ac:25:70:ce:ae:9d:8a:
87:26:74:22:a4:9b:6f:a6:1f:a4:cd:54:58:0c:8b:
79:e8:dd:14:04:af:99:96:b6:dd:4c:4e:54:70:fb:
5c:da:9e:1e:07:cc:5b:f0:06:e0:09:fa:10:b6:08:
44:f3:33:36:01:6c:55:67:99:2c:04:53:11:a6:53:
77:9a:80:59:0a:df:1c:2f:52:ef:2d:37:24:37:58:
6f:09:58:21:26:56:17:26:79:2c:29:a1:b6:0c:c6:
57:9d:24:5c:37:39:92:5a:e5:2b:96:39:38:11:65:
fc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4B:F0:6F:1D:4F:CA:5E:AC:60:38:8E:10:84:57:80:A3:11:96:F4
X509v3 Authority Key Identifier:
keyid:39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/2Uvwbx1Pyl6sYDiOEIRXgKMRlvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.160.0/21
5.181.44.0/22
185.5.124.0/22
IPv6:
2a03:1c0::/32
Signature Algorithm: sha256WithRSAEncryption
2d:ae:70:a3:57:18:7d:3b:c3:0f:da:39:00:20:eb:b3:a5:24:
09:70:af:44:c9:22:fc:2a:ac:49:92:7c:ec:df:05:aa:c3:ea:
86:00:ec:db:61:49:df:05:60:de:e3:5c:a5:92:f6:16:bf:3e:
d5:bb:60:3b:4b:3a:ce:2e:9b:77:3b:02:71:be:42:15:c6:81:
50:db:63:53:74:7c:5d:9d:60:20:8f:aa:2f:d7:4f:45:bc:52:
2b:cd:f0:06:b5:b5:66:9c:a5:45:c6:e1:66:ab:46:c6:75:f7:
d4:f3:5e:04:9c:12:c8:55:9d:16:b2:b3:a9:a9:43:f2:b7:a6:
fe:2e:87:2f:9f:16:f5:4b:35:44:c0:03:95:cb:0b:f2:80:30:
ef:20:bb:40:be:b0:d0:8c:f0:33:17:98:cb:ad:d2:b3:03:1a:
b8:16:a2:67:3e:68:a5:19:94:73:d9:6e:5d:8f:03:92:a6:a8:
c0:db:77:8e:30:2f:4d:66:8c:0b:11:5f:be:60:73:76:ea:d7:
92:82:76:be:61:f6:f5:61:fb:0c:1c:1f:e6:90:c7:02:a8:72:
95:b3:68:ce:09:51:8a:6b:2f:3a:5f:de:6c:37:03:62:68:46:
ff:85:72:aa:94:12:fb:5e:08:11:72:60:4f:d1:ad:58:fc:32:
05:ce:cb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:20:17 2024 by rpki-client on console-ams.rpki-client.org