Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/YBleno5V-6BaCjWUQHvdtuHXAcM.roa
File: YBleno5V-6BaCjWUQHvdtuHXAcM.roa (raw, json)
Hash identifier: D+710NsJyMNvUOLPE+dc5FTERmLJ+cX5rOBpyq6eVGo=
Subject key identifier: 60:19:5E:9E:8E:55:FB:A0:5A:0A:35:94:40:7B:DD:B6:E1:D7:01:C3
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018CCA29D07E7093A0E70A423D19C8674FB8
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/YBleno5V-6BaCjWUQHvdtuHXAcM.roa
Signing time: Tue 02 Jan 2024 12:33:07 +0000
ROA not before: Tue 02 Jan 2024 12:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35830
IP address blocks: 45.66.211.0/24 maxlen: 24
45.66.210.0/24 maxlen: 24
185.61.216.0/24 maxlen: 24
185.61.220.0/24 maxlen: 24
45.132.186.0/24 maxlen: 24
45.132.187.0/24 maxlen: 24
185.102.112.0/24 maxlen: 24
185.102.113.0/24 maxlen: 24
5.181.171.0/24 maxlen: 24
45.148.125.0/24 maxlen: 24
45.138.103.0/24 maxlen: 24
45.138.102.0/24 maxlen: 24
45.148.126.0/24 maxlen: 24
45.148.127.0/24 maxlen: 24
5.183.253.0/24 maxlen: 24
213.232.121.0/24 maxlen: 24
213.232.123.0/24 maxlen: 24
185.96.37.0/24 maxlen: 24
141.98.85.0/24 maxlen: 24
141.98.86.0/24 maxlen: 24
185.81.145.0/24 maxlen: 24
185.81.144.0/24 maxlen: 24
185.88.102.0/24 maxlen: 24
185.88.101.0/24 maxlen: 24
185.88.103.0/24 maxlen: 24
5.183.254.0/24 maxlen: 24
185.88.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:d0:7e:70:93:a0:e7:0a:42:3d:19:c8:67:4f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 2 12:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60195e9e8e55fba05a0a3594407bddb6e1d701c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d6:31:56:a8:c2:09:0c:2b:33:20:26:54:2a:
36:55:b6:4b:dc:a4:40:7f:06:ba:ed:69:e3:29:66:
67:38:4d:cd:44:08:b3:65:07:2e:9d:d1:28:13:9e:
13:95:92:1e:18:c7:2f:eb:47:e4:49:fc:03:96:88:
16:73:79:6d:5b:96:ad:e9:85:d9:f8:b9:1c:ce:a1:
c7:a4:a2:36:94:aa:db:de:8a:f7:b8:d2:9d:d9:18:
81:57:6e:d8:76:a8:0c:36:75:85:e1:18:44:80:32:
10:4e:ca:aa:b8:9c:62:f3:5b:c8:cf:80:68:11:bd:
51:b0:98:63:f4:11:88:e8:06:b3:8a:85:4f:22:41:
43:95:98:43:4b:d0:ea:68:db:54:26:f1:54:9f:03:
2f:8b:f8:38:76:d4:5f:4e:58:d8:27:c2:bc:bf:e1:
aa:76:97:f3:e2:dd:9c:d2:db:df:1f:8d:d5:40:45:
14:dd:3c:22:e1:ca:54:90:ab:17:5c:4f:98:48:cb:
84:a6:34:23:0f:cf:3f:bf:0d:31:17:03:ad:4d:26:
d0:dd:7d:f2:95:53:0a:a4:bb:69:3a:5f:e6:92:66:
a9:b0:0c:f3:f2:71:43:c6:bc:25:0d:0a:a4:8d:9b:
0e:07:57:8a:54:9d:f8:36:f7:a3:69:6e:a3:0a:32:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:19:5E:9E:8E:55:FB:A0:5A:0A:35:94:40:7B:DD:B6:E1:D7:01:C3
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/YBleno5V-6BaCjWUQHvdtuHXAcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.171.0/24
5.183.253.0-5.183.254.255
45.66.210.0/23
45.132.186.0/23
45.138.102.0/23
45.148.125.0-45.148.127.255
141.98.85.0-141.98.86.255
185.61.216.0/24
185.61.220.0/24
185.81.144.0/23
185.88.37.0/24
185.88.101.0-185.88.103.255
185.96.37.0/24
185.102.112.0/23
213.232.121.0/24
213.232.123.0/24
Signature Algorithm: sha256WithRSAEncryption
11:2a:bb:af:b5:3a:0b:8d:08:b9:f5:3b:18:32:ef:85:d7:09:
ed:33:23:4a:13:f9:42:77:57:9a:43:17:42:40:dd:42:7f:bf:
7a:25:75:d4:16:41:7e:32:47:ae:7c:44:3a:99:ee:4f:7d:11:
65:7e:73:53:e7:a3:8c:6a:4c:fc:29:3d:35:bd:82:00:60:2c:
4e:69:a7:f4:e3:f1:75:e4:f0:e7:a5:12:da:34:d4:ff:e5:2b:
96:7a:52:2e:7d:79:0b:8f:67:0f:51:07:83:98:82:1b:b9:d3:
50:a7:1e:21:90:fc:41:ae:c7:51:67:d7:a6:b0:4e:33:d0:75:
40:38:e9:af:4d:fb:78:d6:29:d4:3f:98:d4:0d:f8:bb:6e:c4:
a8:67:37:53:9d:cc:32:e1:83:07:bd:7a:cc:34:91:7d:83:3e:
7f:01:58:1c:f3:33:28:65:3e:ab:34:b2:55:69:49:ec:4a:7d:
72:cb:85:14:23:68:d0:5c:bf:d9:54:01:a6:3e:40:29:2f:b9:
32:03:3a:a2:dd:49:a4:ae:9d:5a:51:fd:f3:45:fb:81:0f:6b:
11:e8:20:d2:1e:46:36:2a:d1:44:f1:6a:f0:af:67:6b:6f:4e:
29:7a:24:b0:4a:ea:41:1b:bc:2d:79:b2:51:41:75:12:cf:dd:
cd:57:ed:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:45:08 2024 by rpki-client on console-ams.rpki-client.org