Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/_nMbHfkty9vccvcqAcqCcolq_Ag.roa
File: _nMbHfkty9vccvcqAcqCcolq_Ag.roa (raw, json)
Hash identifier: d5D6+N3Uh9pJqsxsdAkcmY6dk9mS95YeXn7YWl0f1qQ=
Subject key identifier: FE:73:1B:1D:F9:2D:CB:DB:DC:72:F7:2A:01:CA:82:72:89:6A:FC:08
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 018DF0AD0976A699560D3427F97E24973A52
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/_nMbHfkty9vccvcqAcqCcolq_Ag.roa
Signing time: Wed 28 Feb 2024 17:04:48 +0000
ROA not before: Wed 28 Feb 2024 17:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212602
IP address blocks: 5.133.114.0/24 maxlen: 32
5.180.112.0/24 maxlen: 32
5.180.113.0/24 maxlen: 32
185.194.208.0/22 maxlen: 32
2a10:7040::/29 maxlen: 29
2a10:7040:2::/64 maxlen: 64
2a10:7041::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f0:ad:09:76:a6:99:56:0d:34:27:f9:7e:24:97:3a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: Feb 28 17:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe731b1df92dcbdbdc72f72a01ca8272896afc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:42:ff:67:8c:5e:be:1c:ba:e1:66:f9:54:
bb:7f:50:95:9f:ab:36:8e:58:69:86:97:c6:3e:f2:
3a:ab:99:28:c4:65:ec:cc:11:51:c9:54:c1:c8:4c:
61:dd:f2:bc:d1:8d:64:13:09:95:53:2f:3f:20:0b:
9c:29:55:d1:b8:7e:bc:7a:6e:4a:64:a4:9e:39:f3:
d0:94:5b:e4:ee:96:92:96:da:4c:52:30:24:7f:ff:
58:cb:cf:e0:63:8a:72:7f:18:28:ad:72:a5:a2:f8:
0d:b8:43:4a:8c:7b:bc:ac:c3:ac:2a:e9:62:7d:57:
8f:5a:5c:7c:9b:70:1d:b9:33:27:33:e1:c0:b4:01:
2d:28:54:2a:f1:33:f5:58:39:c5:23:fe:be:54:3b:
3a:35:4a:20:15:aa:3e:2e:25:2a:6d:55:ac:bd:42:
55:39:1c:2d:63:de:c3:a8:d9:a2:24:8e:26:8c:af:
6d:f0:b9:8a:a9:7f:d8:3f:db:7f:fb:e9:fc:34:f7:
68:43:a0:b2:7e:96:c1:a9:ae:0c:4f:ab:bc:22:45:
ce:4e:05:47:b5:94:f0:f4:61:4b:f2:64:91:6d:b0:
4d:ef:2e:b4:01:fb:26:68:1d:2d:c5:1f:57:80:b4:
ea:4d:4c:27:b9:84:3c:20:d2:c7:88:19:2c:e9:82:
90:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:73:1B:1D:F9:2D:CB:DB:DC:72:F7:2A:01:CA:82:72:89:6A:FC:08
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/_nMbHfkty9vccvcqAcqCcolq_Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.114.0/24
5.180.112.0/23
185.194.208.0/22
IPv6:
2a10:7040::/29
Signature Algorithm: sha256WithRSAEncryption
c0:bc:ca:02:9c:b3:76:fd:e7:28:72:de:0c:12:fd:ff:f5:5a:
0a:10:cf:6b:3f:1a:ea:9b:a9:4d:5b:01:3d:02:74:95:24:ae:
11:77:50:54:ca:32:5a:23:65:f8:21:fc:a4:1d:67:15:51:b1:
c5:3b:97:4e:94:17:30:b7:4b:1f:0f:66:81:97:ab:1a:09:d5:
f8:63:3c:b6:86:26:1f:1c:11:d4:5a:5a:0f:94:68:f3:ff:69:
b8:a5:31:ad:a5:9b:77:73:3b:ab:74:49:41:0e:53:d4:39:21:
6e:91:14:02:08:a4:1d:78:6d:df:50:82:d6:7c:3c:94:a7:e9:
7c:76:61:1b:f0:3e:05:e6:9a:39:4b:92:14:ed:c2:80:74:f3:
60:12:a5:db:9c:63:ed:86:59:58:6b:3b:f4:24:ca:2f:12:dd:
f3:37:bc:ac:05:20:bd:16:50:36:67:8f:7f:62:7e:4e:e9:4a:
61:22:b2:26:ff:05:31:61:e9:42:09:08:38:39:56:2e:68:f7:
de:2b:14:70:c2:12:a2:f9:bc:f2:11:f3:96:30:a8:9f:8d:07:
ee:3d:d2:ad:30:48:1b:78:2e:87:f3:4c:71:52:36:a0:dc:65:
fa:bb:fc:ce:a2:2c:b1:ea:30:9a:96:af:ad:c3:46:86:cb:af:
da:24:a4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:31:54 2024 by rpki-client on console-ams.rpki-client.org