Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/5lc5ZmxcIf_S-qtTdxwVFYdfw74.roa
File: 5lc5ZmxcIf_S-qtTdxwVFYdfw74.roa (raw, json)
Hash identifier: nWQ6LzHmMcNUWFVJjD8F6A2IBDinnQ/3GkZ+tOcMhcc=
Subject key identifier: E6:57:39:66:6C:5C:21:FF:D2:FA:AB:53:77:1C:15:15:87:5F:C3:BE
Certificate issuer: /CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Certificate serial: 0194266BDFE8711736CE71186AE9C37FEB95
Authority key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/5lc5ZmxcIf_S-qtTdxwVFYdfw74.roa
Signing time: Thu 02 Jan 2025 09:49:51 +0000
ROA not before: Thu 02 Jan 2025 09:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48159
IP address blocks: 178.251.208.0/24 maxlen: 24
178.251.212.0/24 maxlen: 24
178.251.213.0/24 maxlen: 24
178.251.214.0/24 maxlen: 24
178.251.215.0/24 maxlen: 24
185.11.88.0/24 maxlen: 24
185.11.89.0/24 maxlen: 24
185.11.90.0/24 maxlen: 24
2a03:57c0::/32 maxlen: 32
2a03:57c0:7c00::1208:3/128 maxlen: 128
2a03:57c0:7c00::1208:25/128 maxlen: 128
2a03:57c0:7c00::1208:27/128 maxlen: 128
2a03:57c0:7c00::1208:45/128 maxlen: 128
2a03:57c0:7c00::1208:55/128 maxlen: 128
2a03:57c0:7c00::1208:65/128 maxlen: 128
2a03:57c0:7c00::1208:75/128 maxlen: 128
2a03:57c0:7c00::1208:95/128 maxlen: 128
2a03:57c0:7c00::1208:137/128 maxlen: 128
2a03:57c0:7c00::1208:143/128 maxlen: 128
2a03:57c0:7c00::1208:165/128 maxlen: 128
2a03:57c0:7c00::1208:175/128 maxlen: 128
2a03:57c0:7c00::1208:177/128 maxlen: 128
2a03:57c0:7c00::1208:185/128 maxlen: 128
2a03:57c0:7c00::1208:201/128 maxlen: 128
2a03:57c0:7c00::1208:215/128 maxlen: 128
2a03:57c0:7c00::1208:220/128 maxlen: 128
2a03:57c0:7c00::1208:235/128 maxlen: 128
2a03:57c0:7c00::1209:25/128 maxlen: 128
2a03:57c0:7c00::1209:27/128 maxlen: 128
2a03:57c0:7c00::1209:55/128 maxlen: 128
2a03:57c0:7c00::1209:75/128 maxlen: 128
2a03:57c0:7c00::1209:85/128 maxlen: 128
2a03:57c0:7c00::1209:95/128 maxlen: 128
2a03:57c0:7c00::1209:135/128 maxlen: 128
2a03:57c0:7c00::1209:155/128 maxlen: 128
2a03:57c0:7c00::1209:165/128 maxlen: 128
2a03:57c0:7c00::1209:177/128 maxlen: 128
2a03:57c0:7c00::1209:211/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:df:e8:71:17:36:ce:71:18:6a:e9:c3:7f:eb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e65739666c5c21ffd2faab53771c1515875fc3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a2:71:69:55:54:5c:49:33:7f:40:45:b4:c9:
60:7c:87:e6:d6:09:35:2d:f6:46:62:2f:83:45:37:
c9:7e:72:d1:5a:8d:0d:c7:28:10:81:be:8f:a1:61:
b1:7f:99:df:01:86:84:f6:7b:58:82:cf:62:5a:f7:
52:f8:86:ff:73:39:0a:1b:d2:f8:99:0e:68:4e:ec:
f7:08:fe:e4:9b:33:74:f5:b6:64:7c:78:59:b1:a2:
90:ab:10:67:2d:e5:89:62:e6:6f:4e:2a:90:ef:97:
c0:18:65:9d:ab:4d:2e:86:86:f7:4d:b3:cc:b5:19:
7d:cc:9c:eb:98:8a:e3:7f:22:81:59:67:a0:18:f5:
44:35:11:0f:11:8e:f3:01:0c:4b:70:0f:0f:73:26:
0f:36:86:d4:0f:e8:9f:96:f8:8b:23:e4:b3:95:1c:
3c:02:19:1a:20:52:cf:b9:72:a8:bc:59:5e:a9:37:
ff:9f:30:9f:16:b4:2c:0b:e7:23:bd:87:33:07:4e:
c2:1b:a7:37:fc:64:eb:82:53:a9:17:10:36:56:6b:
78:16:f7:3f:c5:9f:0d:cd:0c:59:4f:e1:8d:e9:78:
9e:34:f5:b7:77:3a:54:9f:7d:1a:d2:1c:d3:b7:76:
cd:af:22:cd:20:81:83:02:3c:47:db:75:16:6c:a1:
90:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:57:39:66:6C:5C:21:FF:D2:FA:AB:53:77:1C:15:15:87:5F:C3:BE
X509v3 Authority Key Identifier:
keyid:5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/5lc5ZmxcIf_S-qtTdxwVFYdfw74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.208.0/24
178.251.212.0/22
185.11.88.0-185.11.90.255
IPv6:
2a03:57c0::/32
Signature Algorithm: sha256WithRSAEncryption
75:a0:d5:e9:02:a2:5d:af:a7:f2:86:17:18:80:a9:0b:43:96:
78:b4:c9:68:7d:2e:ff:53:f2:34:4c:4c:e8:36:72:a7:b1:0e:
15:cc:27:94:a0:ec:ad:74:e4:f9:15:bf:a8:69:72:26:2f:96:
3a:db:82:e1:42:6b:43:fe:1b:aa:47:91:e1:0a:e0:b4:fd:18:
73:bd:8c:3b:4a:7f:25:0a:bc:a5:24:ca:dd:91:13:ac:dd:06:
86:4e:97:18:66:bb:d6:da:5e:48:3f:80:ae:f1:38:99:fd:60:
b7:42:ad:5b:07:64:a1:3c:10:0f:93:41:69:b8:de:8c:41:59:
fd:d2:08:9c:fe:e1:56:db:56:8b:94:f9:1f:65:52:6a:53:c7:
91:81:d5:3f:22:8c:b0:a9:eb:2a:77:ed:a8:ef:a7:13:fd:ba:
6f:82:85:05:74:27:82:e7:a7:da:39:27:0a:55:c3:b8:95:af:
c8:d8:5a:c6:19:09:84:cb:a8:4a:46:e8:a1:dc:6f:8a:1a:af:
1d:0a:89:dd:81:de:22:50:12:6a:82:10:d9:b7:1d:ac:7f:cd:
6b:7b:8b:74:5d:20:ab:95:32:af:6f:5a:9b:8c:74:c1:21:3e:
0e:2b:3e:23:a8:1d:44:61:e4:62:82:b0:d1:b8:0f:37:ff:2e:
fb:d0:72:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:51 2025 by rpki-client