Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/lF4f9B8efZeW_6Q_bN28o1qp7DQ.roa
File: lF4f9B8efZeW_6Q_bN28o1qp7DQ.roa (raw, json)
Hash identifier: T2nDt5ziIHl2OtO1gvSnJ5L+D8JJ3fWv4HKSmlsEr+c=
Subject key identifier: 94:5E:1F:F4:1F:1E:7D:97:96:FF:A4:3F:6C:DD:BC:A3:5A:A9:EC:34
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018EBE0E9EEA6598C4790F4E3B5E33AEE39F
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/lF4f9B8efZeW_6Q_bN28o1qp7DQ.roa
Signing time: Mon 08 Apr 2024 14:13:32 +0000
ROA not before: Mon 08 Apr 2024 14:13:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38136
IP address blocks: 5.34.216.0/21 maxlen: 24
5.226.48.0/22 maxlen: 24
45.137.180.0/22 maxlen: 24
178.236.36.0/22 maxlen: 24
185.36.192.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
185.248.184.0/22 maxlen: 24
188.253.4.0/22 maxlen: 24
188.253.112.0/21 maxlen: 24
188.253.120.0/21 maxlen: 24
212.87.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:be:0e:9e:ea:65:98:c4:79:0f:4e:3b:5e:33:ae:e3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 8 14:13:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=945e1ff41f1e7d9796ffa43f6cddbca35aa9ec34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:00:fc:ed:54:5b:a8:b2:c0:0c:65:d9:3d:19:
57:de:3d:07:6b:08:0a:1b:48:15:1b:a5:ab:28:61:
89:68:bf:29:71:66:24:4c:c2:c8:95:17:a6:90:f2:
c5:bc:d2:36:78:25:86:88:bd:4f:49:50:f3:26:06:
d2:12:7d:85:17:2a:ec:13:34:5f:6f:63:81:7d:ec:
ea:84:92:02:c7:fd:21:e9:a6:97:6b:1b:50:78:81:
33:74:30:1d:c1:bd:ec:86:2a:dd:3f:8d:6c:47:61:
cd:5c:7c:57:67:c5:bf:33:c1:e2:70:9f:e8:4b:ba:
60:cf:cb:c1:f1:4d:b3:01:95:63:0e:5b:2d:a1:d1:
3e:5b:9b:be:f8:ef:23:62:d7:f8:ed:6f:af:dc:ba:
5c:74:13:6d:5d:e8:e7:6c:d5:ed:e6:0f:25:18:6f:
93:4b:b9:35:96:88:7f:f0:66:45:c6:09:32:2d:d3:
80:3e:ba:6a:ca:92:9a:b7:c1:76:9e:e1:38:ba:dd:
1e:37:21:aa:5e:9e:bf:16:ad:c1:72:5d:43:18:10:
c0:6d:fd:01:6c:59:68:8d:0a:38:33:46:78:b1:65:
4a:5c:c7:5b:91:60:6c:52:b6:0f:95:79:0d:74:0c:
52:7c:15:6d:14:12:c3:25:0a:94:20:56:e5:7b:e8:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5E:1F:F4:1F:1E:7D:97:96:FF:A4:3F:6C:DD:BC:A3:5A:A9:EC:34
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/lF4f9B8efZeW_6Q_bN28o1qp7DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.216.0/21
5.226.48.0/22
45.137.180.0/22
178.236.36.0/22
185.36.192.0/22
185.220.236.0/22
185.248.184.0/22
188.253.4.0/22
188.253.112.0/20
212.87.192.0/22
Signature Algorithm: sha256WithRSAEncryption
62:ee:3d:ed:4a:ab:a1:9f:96:fe:ad:28:10:52:49:1c:ec:65:
6f:ff:06:e0:cb:b3:69:6a:97:94:a8:8a:ee:00:00:f5:e6:03:
c7:3f:5b:75:97:97:f0:4b:4d:eb:92:9b:d0:7e:52:39:6f:2a:
12:12:dd:5d:cc:45:5e:c9:19:37:25:a6:f1:42:b4:02:dc:d8:
9e:c4:9e:77:ed:95:45:2d:da:a7:ad:41:88:6b:5a:99:e7:67:
8c:0a:e4:93:b4:f1:56:39:cf:4f:c0:92:3e:e2:25:17:a7:9d:
77:cd:a7:b9:5f:d1:e6:1f:85:d5:db:fc:c0:12:0a:2e:be:fd:
00:f4:fd:8f:44:d6:8c:76:fb:85:db:56:e5:ec:42:1c:c2:3c:
11:40:56:5b:da:41:32:9c:72:88:1e:3e:7a:6b:04:9a:44:21:
0a:58:e6:84:0b:f6:67:77:9f:49:bf:3f:fa:b9:fe:ab:8d:44:
17:c1:d0:66:8d:bd:0b:eb:ec:6a:31:2d:b5:1a:77:9e:6c:5d:
02:41:fa:3c:8d:2e:8a:9f:19:a6:e2:4f:e4:7f:d8:ec:ba:e2:
f1:16:db:91:44:0f:42:c6:8f:e2:b4:0c:5a:46:b6:b8:0e:71:
08:4c:82:f6:e2:d2:9d:fe:b5:aa:21:5a:cd:71:71:40:0c:58:
b6:35:ff:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 21:02:09 2024 by rpki-client on console-fra.rpki-client.org