Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/IEJiA5A4YyFW813ez61jPwRB-Ww.roa
File: IEJiA5A4YyFW813ez61jPwRB-Ww.roa (raw, json)
Hash identifier: a+i/melkkcpf9u+b5GFQ7e6fXXJjrvYa9b4x+lOAsDI=
Subject key identifier: 20:42:62:03:90:38:63:21:56:F3:5D:DE:CF:AD:63:3F:04:41:F9:6C
Certificate issuer: /CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6
Certificate serial: 018CC348C582C0BAE15EDE28DF5076F5287A
Authority key identifier: 02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/IEJiA5A4YyFW813ez61jPwRB-Ww.roa
Signing time: Mon 01 Jan 2024 04:29:35 +0000
ROA not before: Mon 01 Jan 2024 04:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14537
IP address blocks: 193.33.228.0/23 maxlen: 24
193.31.208.0/20 maxlen: 24
109.202.112.0/21 maxlen: 24
45.85.4.0/22 maxlen: 24
78.24.208.0/21 maxlen: 24
5.62.80.0/20 maxlen: 24
66.84.64.0/20 maxlen: 24
185.28.72.0/22 maxlen: 24
94.125.56.0/21 maxlen: 24
2a03:9e00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c5:82:c0:ba:e1:5e:de:28:df:50:76:f5:28:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6
Validity
Not Before: Jan 1 04:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=204262039038632156f35ddecfad633f0441f96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ff:3a:c2:fb:cb:64:c0:5f:9e:44:4a:cd:72:
ed:85:01:07:ad:d4:aa:e3:45:76:34:05:60:0c:79:
e0:44:5e:6e:04:44:ee:08:0f:1f:85:1b:b1:a6:e5:
5e:5b:21:81:ae:c2:b4:0e:e3:f0:25:04:dd:9d:82:
25:15:d2:48:ce:dc:d0:44:94:ff:17:d6:85:5e:05:
41:a2:77:10:a7:b8:25:5b:30:d2:99:e6:4b:8e:72:
13:7e:78:94:20:fa:18:5c:7d:f1:7b:c7:13:34:03:
44:08:ef:56:1e:a3:a3:6d:4f:31:88:d2:3e:3e:8c:
b6:8a:71:a3:c0:5b:19:10:99:54:46:ac:16:5e:33:
f6:df:91:86:3a:a4:03:95:1d:b3:b1:2f:49:8e:8a:
ed:8b:37:3d:df:94:07:5e:e9:c1:94:0f:4e:e1:e5:
70:be:87:fd:92:7c:90:fe:86:95:61:d5:bf:ef:a0:
3b:df:0e:42:52:d7:4b:4b:24:fb:6f:4d:ca:12:f7:
bc:81:ca:e3:78:75:c0:eb:55:e3:37:88:b8:26:24:
1b:88:9b:f8:d5:f3:81:71:b6:de:12:9a:a3:f6:b7:
94:36:d5:e4:1a:18:8b:36:1b:bd:58:23:7b:dc:8f:
f7:f8:03:cd:c1:05:49:f2:ed:66:5e:19:80:13:67:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:42:62:03:90:38:63:21:56:F3:5D:DE:CF:AD:63:3F:04:41:F9:6C
X509v3 Authority Key Identifier:
keyid:02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/IEJiA5A4YyFW813ez61jPwRB-Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.80.0/20
45.85.4.0/22
66.84.64.0/20
78.24.208.0/21
94.125.56.0/21
109.202.112.0/21
185.28.72.0/22
193.31.208.0/20
193.33.228.0/23
IPv6:
2a03:9e00::/32
Signature Algorithm: sha256WithRSAEncryption
9e:ca:50:02:a0:a7:9f:81:f2:36:e1:45:1a:9d:24:9a:c1:e4:
ee:86:07:fc:25:58:70:7c:ad:47:73:d5:11:a6:36:07:4d:63:
36:99:d8:4c:78:63:39:fb:a0:e2:aa:9f:5d:ba:a9:a5:d3:4f:
63:c3:b9:c9:7c:a3:3e:70:3a:0e:4f:eb:45:8b:f5:e3:28:88:
8d:87:26:a4:c4:2e:02:fa:a9:b4:42:04:68:e4:c9:29:5c:e8:
c4:1e:e9:32:49:36:16:10:0d:15:9e:75:09:d9:ac:00:f2:24:
8f:4d:d0:ab:b0:60:a2:b4:48:7f:5f:cb:58:53:2f:da:44:25:
43:81:23:52:33:c7:12:7b:f2:68:da:c9:b2:df:3f:a7:f3:f5:
6c:e8:39:e2:d1:f1:5e:6d:f0:da:aa:a4:81:31:e7:ff:3c:35:
34:30:ca:10:dc:a3:99:1c:98:b5:6f:d1:c3:1e:0b:1a:78:1b:
41:ef:60:1e:7c:0c:1d:61:fa:a8:14:83:2c:48:2f:af:6a:80:
51:e4:e2:25:d2:85:c6:12:e7:2e:8c:b0:0d:a0:8b:e7:d0:2c:
40:d2:0e:8c:a0:f2:94:5f:29:87:ad:db:cf:51:e6:d0:73:31:
6b:bd:1b:28:e1:21:a2:3d:91:9b:fd:5e:66:75:6c:70:a0:2b:
ea:ad:b5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:33:33 2024 by rpki-client on console-ams.rpki-client.org