Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/GQymvP-YAD8bQhA9YsA5dB6V1oA.roa
File: GQymvP-YAD8bQhA9YsA5dB6V1oA.roa (raw, json)
Hash identifier: SqSqsStBBTDpv7HWjYTwjwW2GO3NlqxObGoYkpSjFRQ=
Subject key identifier: 19:0C:A6:BC:FF:98:00:3F:1B:42:10:3D:62:C0:39:74:1E:95:D6:80
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 01903F19CF67F7EFFD57E2F13E5CFBF3C53C
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/GQymvP-YAD8bQhA9YsA5dB6V1oA.roa
Signing time: Sat 22 Jun 2024 08:39:34 +0000
ROA not before: Sat 22 Jun 2024 08:39:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51020
IP address blocks: 5.62.128.0/23 maxlen: 23
5.62.128.0/24 maxlen: 24
5.62.129.0/24 maxlen: 24
5.62.136.0/23 maxlen: 23
5.62.136.0/24 maxlen: 24
5.62.137.0/24 maxlen: 24
31.7.80.0/23 maxlen: 23
31.7.80.0/24 maxlen: 24
31.7.81.0/24 maxlen: 24
31.7.82.0/23 maxlen: 23
31.7.82.0/24 maxlen: 24
31.7.84.0/23 maxlen: 23
31.7.84.0/24 maxlen: 24
31.7.85.0/24 maxlen: 24
31.7.86.0/23 maxlen: 23
31.7.86.0/24 maxlen: 24
31.7.87.0/24 maxlen: 24
37.77.48.0/23 maxlen: 23
37.77.48.0/24 maxlen: 24
37.77.49.0/24 maxlen: 24
37.77.50.0/23 maxlen: 23
37.77.50.0/24 maxlen: 24
37.77.51.0/24 maxlen: 24
37.77.52.0/23 maxlen: 23
37.77.52.0/24 maxlen: 24
37.77.53.0/24 maxlen: 24
37.77.54.0/23 maxlen: 23
37.77.54.0/24 maxlen: 24
37.77.55.0/24 maxlen: 24
185.69.4.0/23 maxlen: 23
185.69.4.0/24 maxlen: 24
185.69.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3f:19:cf:67:f7:ef:fd:57:e2:f1:3e:5c:fb:f3:c5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Jun 22 08:39:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=190ca6bcff98003f1b42103d62c039741e95d680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c4:8e:01:c4:d6:e7:74:78:66:cc:e7:3f:ef:
08:14:99:c7:fa:29:5c:64:7a:8f:33:16:af:21:ed:
92:ca:9b:30:3f:91:c2:c6:b5:cf:3b:9f:a7:c0:8f:
b9:a8:b8:1c:39:c6:1a:f4:cf:91:68:b3:41:10:c0:
c6:3f:ed:0d:ed:d6:b4:49:a1:29:5e:59:7c:bd:bb:
97:75:b9:9d:fd:bc:06:a1:75:62:6d:c2:ee:67:7b:
cb:92:5a:1b:45:83:95:46:99:ed:39:08:bc:8d:35:
df:48:89:d5:91:23:4a:1d:17:1f:32:73:cb:95:c7:
3b:40:1c:9c:42:06:7c:0b:98:c9:75:fc:55:f2:4d:
26:51:e3:13:ee:db:85:de:69:ce:dc:33:2c:f3:1b:
15:b8:4d:57:f2:f1:e7:0c:66:9b:99:9a:1f:ad:8d:
f7:ec:a6:89:f1:59:0b:a1:46:e4:94:90:09:16:2d:
63:86:5c:c4:10:ec:87:f7:33:08:a7:4c:8f:c0:73:
88:cd:d2:1e:63:13:37:7d:4f:74:1f:7f:02:fe:0e:
ec:c2:17:71:25:bf:b1:ee:d7:84:c2:af:e0:01:01:
b4:4b:7a:a7:62:cf:8b:b7:8c:a2:13:79:54:d7:ad:
9f:be:ab:06:c7:bc:60:d5:ce:e5:89:f5:5e:65:b0:
e8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0C:A6:BC:FF:98:00:3F:1B:42:10:3D:62:C0:39:74:1E:95:D6:80
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/GQymvP-YAD8bQhA9YsA5dB6V1oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.128.0/23
5.62.136.0/23
31.7.80.0/21
37.77.48.0/21
185.69.4.0/23
Signature Algorithm: sha256WithRSAEncryption
de:c3:83:6a:0a:95:f7:b9:76:a1:65:74:cc:9b:2e:0d:08:31:
70:26:e1:f3:78:d4:57:39:6b:a1:ef:c8:32:30:37:a4:a6:77:
85:bd:59:ab:0f:d4:3c:8b:45:9c:d2:8e:b8:41:56:51:dc:7e:
0e:69:2a:a9:c9:5e:df:80:f6:b9:9c:b5:d1:af:fc:f6:61:4c:
82:02:e6:25:f6:6d:f2:75:85:33:41:27:cd:dc:53:82:17:88:
c9:5a:8c:f4:57:9b:d2:d6:a0:66:ca:c1:7b:7b:49:9d:18:56:
45:83:13:47:62:ec:0a:4a:1d:57:8e:10:78:55:d2:02:34:9e:
4d:f4:e9:ed:8b:1e:dc:8c:ca:fe:b9:7b:25:44:64:b5:b5:a2:
27:d6:20:f5:48:42:31:8a:32:1d:57:81:1b:d4:6b:2e:81:28:
65:44:0a:d7:05:cb:d1:35:9d:d4:dc:04:82:a9:b9:d2:c2:d8:
cd:91:46:f3:68:c2:dd:55:4e:6e:f9:6c:ce:f8:be:b1:2b:6d:
e0:c2:c1:f6:5f:e6:e6:c2:e1:d7:67:69:83:af:b4:7b:db:00:
8d:03:ee:ce:60:58:69:1c:59:dd:d9:e0:60:7a:ea:25:5f:a2:
ea:af:05:34:c9:52:ec:b4:d5:3e:38:7f:ed:91:57:e5:a7:bf:
dd:fe:0e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:12:54 2024 by rpki-client on console-fra.rpki-client.org