Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/5mIrNQoatIIIB4z91I9IIV3k9SQ.roa
File: 5mIrNQoatIIIB4z91I9IIV3k9SQ.roa (raw, json)
Hash identifier: GWP0JMSiS0pvRG9A5xT512heO9BpZYoEUn/zhlQbNX4=
Subject key identifier: E6:62:2B:35:0A:1A:B4:82:08:07:8C:FD:D4:8F:48:21:5D:E4:F5:24
Certificate issuer: /CN=efa842e67147252505f41551f0f735b7f72e3e97
Certificate serial: 01924A9717CEAABA1A3D296BC9446E15E087
Authority key identifier: EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/5mIrNQoatIIIB4z91I9IIV3k9SQ.roa
Signing time: Wed 02 Oct 2024 00:17:48 +0000
ROA not before: Wed 02 Oct 2024 00:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 185.30.233.0/24 maxlen: 24
185.142.236.0/24 maxlen: 24
185.142.238.0/23 maxlen: 23
185.142.238.0/24 maxlen: 24
185.142.239.0/24 maxlen: 24
185.165.188.0/24 maxlen: 24
185.165.190.0/24 maxlen: 24
185.165.191.0/24 maxlen: 24
195.144.21.0/24 maxlen: 24
2a07:85c0::/48 maxlen: 48
2a07:85c1::/48 maxlen: 48
2a07:85c5::/48 maxlen: 48
2a07:85c6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4a:97:17:ce:aa:ba:1a:3d:29:6b:c9:44:6e:15:e0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa842e67147252505f41551f0f735b7f72e3e97
Validity
Not Before: Oct 2 00:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6622b350a1ab48208078cfdd48f48215de4f524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:97:c2:d9:02:58:d8:24:0e:a6:b5:f8:a1:
f7:e8:df:3d:0d:4d:ce:be:86:2e:07:46:ef:e2:ca:
45:9d:67:77:94:64:1f:cd:04:b0:1c:7a:3e:a6:a8:
09:4d:45:e6:72:72:20:75:5f:ae:0d:b6:20:ef:0f:
e9:74:01:13:c4:38:86:52:8d:09:91:23:21:f7:cf:
50:e6:50:06:c8:7a:0f:bc:16:52:f4:69:b7:e5:41:
5c:3d:f2:f5:71:f1:9b:71:91:83:a5:e2:df:e3:52:
a4:46:79:f7:ee:53:e7:ff:66:dc:49:64:9e:e7:c5:
f7:fa:77:31:25:ba:96:7a:c8:22:50:e0:ea:d7:36:
c0:7b:aa:ea:57:64:05:b0:19:11:93:3e:c8:79:54:
65:42:1b:a6:19:7a:f2:3a:30:71:8c:99:25:19:9d:
86:6f:46:ec:05:84:8f:16:83:d2:dc:d7:f5:18:67:
99:1a:9a:f6:be:d3:6a:e3:38:ef:b0:ff:af:2c:28:
0d:61:f2:75:ef:d1:e8:d5:e0:48:25:03:03:96:7e:
70:1c:68:f0:4a:9f:a7:c0:e7:b9:3d:b6:f5:c6:eb:
a3:b6:54:1c:3b:92:54:1c:7f:d0:03:70:b8:6b:03:
cc:59:6a:3b:77:7a:d2:aa:10:c9:42:7c:70:ff:8a:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:62:2B:35:0A:1A:B4:82:08:07:8C:FD:D4:8F:48:21:5D:E4:F5:24
X509v3 Authority Key Identifier:
keyid:EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/5mIrNQoatIIIB4z91I9IIV3k9SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.233.0/24
185.142.236.0/24
185.142.238.0/23
185.165.188.0/24
185.165.190.0/23
195.144.21.0/24
IPv6:
2a07:85c0::/48
2a07:85c1::/48
2a07:85c5::/48
2a07:85c6::/48
Signature Algorithm: sha256WithRSAEncryption
5d:dc:6a:8d:9e:30:a8:05:f6:31:b9:85:83:b7:f2:7f:ba:4a:
a0:28:84:2e:d9:b9:10:a2:ce:78:dc:bf:5f:ca:85:c4:e6:fe:
c7:f3:dd:98:7a:9a:ae:30:d6:d9:66:d6:b7:ed:5b:b3:8f:4d:
22:c9:22:4f:db:aa:5f:5e:41:0d:09:3f:87:b0:5e:e9:9d:04:
c1:73:b4:f9:c3:35:f7:65:6f:f0:82:19:35:59:e1:3c:f0:c3:
99:44:59:f1:1d:44:5f:71:13:f1:77:59:4c:94:e7:48:e3:58:
63:8e:4b:5e:40:6c:5c:60:5a:06:3e:44:83:10:c5:45:23:e2:
94:3e:82:c7:ef:5c:08:39:6c:ab:a7:47:0f:4a:ca:24:26:12:
c9:c2:71:d9:33:25:83:ab:03:94:95:00:8a:54:9d:37:47:96:
f5:6f:db:5f:37:90:af:e0:06:b0:48:45:47:a1:6c:ad:74:1f:
95:83:d7:42:1b:8f:f5:5a:e5:1c:06:bd:96:df:55:3c:2c:86:
3d:e2:4f:4e:39:dd:5b:a8:8c:6a:bb:ca:99:2a:ef:03:85:c6:
53:0e:15:e5:ef:70:8d:e6:73:84:ed:9f:d5:e3:c7:70:62:c3:
2d:71:ad:ec:b1:15:e6:f1:12:97:12:05:76:ed:4a:10:d7:ca:
91:a2:a3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:08:05 2024 by rpki-client on console-ams.rpki-client.org