Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/mCTyg2hg8kl5bLfXqDm1Zxuum_4.roa
File: mCTyg2hg8kl5bLfXqDm1Zxuum_4.roa (raw, json)
Hash identifier: kmi93h7jNYWe6mjuCGJR6cd1ktBl6Fi7yD87wm7DRDc=
Subject key identifier: 98:24:F2:83:68:60:F2:49:79:6C:B7:D7:A8:39:B5:67:1B:AE:9B:FE
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 018CC9BC0C3D7215A86B19E0EFDD0C67697D
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/mCTyg2hg8kl5bLfXqDm1Zxuum_4.roa
Signing time: Tue 02 Jan 2024 10:33:13 +0000
ROA not before: Tue 02 Jan 2024 10:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12757
IP address blocks: 5.44.191.0/24 maxlen: 24
5.44.190.0/24 maxlen: 24
188.227.248.0/21 maxlen: 21
2a03:5880::/32 maxlen: 32
2a03:5880:104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:0c:3d:72:15:a8:6b:19:e0:ef:dd:0c:67:69:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Jan 2 10:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9824f2836860f249796cb7d7a839b5671bae9bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7f:0a:1f:fb:d4:eb:57:55:b6:95:cd:9d:02:
3f:cc:33:0b:5a:74:16:83:12:c7:a4:11:38:14:b5:
38:94:3a:9b:e4:a7:aa:61:08:ab:b0:91:b2:56:02:
28:80:bd:b1:36:bb:fe:11:44:60:6f:bc:af:a9:7a:
9a:42:76:76:f1:26:6a:8a:3d:9e:ed:d9:ea:c1:49:
38:23:d7:f0:63:4f:eb:43:6f:27:da:f9:eb:ef:3b:
4b:f8:98:d6:42:bf:ff:69:11:a1:09:21:57:ab:b7:
f5:01:5d:2d:fa:6f:ec:b5:f3:a2:19:cb:7c:7e:f4:
bc:37:f2:df:b5:7a:d7:e3:7a:ef:7b:a6:16:70:df:
9e:2e:53:2f:dd:40:c3:6b:0f:85:10:02:26:ba:d4:
22:cd:62:00:3b:5d:a3:65:3d:53:b7:f5:13:fa:b2:
df:f7:85:e7:b7:14:60:a6:f5:f9:d8:79:56:1f:e5:
23:57:37:12:af:5f:03:24:38:ef:a8:15:72:25:c2:
92:24:d8:27:ff:34:43:9f:3e:c1:62:7f:00:03:1e:
c7:69:f6:b4:c6:d8:ba:68:2f:01:08:d9:47:a7:ff:
87:fe:32:90:f6:2e:be:7d:c4:96:23:76:f5:18:7e:
ea:50:51:f9:4b:8e:ec:65:0f:6a:52:71:4d:9f:61:
c5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:24:F2:83:68:60:F2:49:79:6C:B7:D7:A8:39:B5:67:1B:AE:9B:FE
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/mCTyg2hg8kl5bLfXqDm1Zxuum_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.190.0/23
188.227.248.0/21
IPv6:
2a03:5880::/32
Signature Algorithm: sha256WithRSAEncryption
28:e8:4c:b7:7b:eb:38:70:af:13:3c:5a:d0:d3:9d:e7:c5:02:
01:94:9c:dc:92:6f:c3:9b:ff:f1:95:e1:31:50:98:78:e4:8d:
86:35:05:5e:cc:66:e1:e3:b1:09:98:cf:12:c4:95:14:42:ae:
98:38:d4:a6:8e:cb:f0:50:da:74:e9:ed:df:db:c6:c8:cc:71:
f0:b3:e7:02:56:24:28:09:f6:4d:56:4b:19:49:42:9a:3c:9d:
47:73:8a:7b:f7:92:8d:b5:a0:25:0c:1f:b5:96:3f:26:61:2b:
0c:8c:eb:e2:af:b3:1d:a4:d6:c8:8a:42:16:e3:c7:00:4d:e4:
ea:9d:9c:7a:0a:d4:e4:01:bb:80:7a:f0:8e:4d:03:67:11:ae:
b7:99:b7:33:40:d6:8c:37:e0:81:f2:b1:5c:60:04:be:9e:e2:
02:39:02:f4:15:99:64:f7:41:25:8f:05:95:25:2d:15:07:40:
a6:4c:7c:aa:4d:5d:f7:21:06:27:61:e9:06:c1:b4:4c:41:2e:
a8:94:47:b3:e9:57:40:84:8f:f9:74:f9:8e:d6:e0:d7:27:43:
d4:c3:a6:2e:6a:12:53:aa:8f:33:b1:1a:61:0b:23:11:96:bd:
8c:6c:1b:b9:ef:87:6e:4c:11:c3:2c:66:e8:69:53:dd:a2:2a:
f9:5d:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:56:55 2024 by rpki-client on console-ams.rpki-client.org