Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/zbtyxdlgkSPlkibOiUCLudzZUzY.roa
File: zbtyxdlgkSPlkibOiUCLudzZUzY.roa (raw, json)
Hash identifier: bdiNTXb/JBhrk5hG7UPElH0xvZZtm+winVoBG/pZtHQ=
Subject key identifier: CD:BB:72:C5:D9:60:91:23:E5:92:26:CE:89:40:8B:B9:DC:D9:53:36
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 018D301494C4049A55753D9A4D631747E2E6
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/zbtyxdlgkSPlkibOiUCLudzZUzY.roa
Signing time: Mon 22 Jan 2024 07:31:11 +0000
ROA not before: Mon 22 Jan 2024 07:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198589
IP address blocks: 5.62.128.0/20 maxlen: 20
5.62.128.0/24 maxlen: 24
5.62.129.0/24 maxlen: 24
5.62.130.0/23 maxlen: 23
5.62.130.0/24 maxlen: 24
5.62.131.0/24 maxlen: 24
5.62.132.0/23 maxlen: 23
5.62.132.0/24 maxlen: 24
5.62.133.0/24 maxlen: 24
5.62.134.0/23 maxlen: 23
5.62.134.0/24 maxlen: 24
5.62.135.0/24 maxlen: 24
5.62.136.0/24 maxlen: 24
5.62.137.0/24 maxlen: 24
5.62.138.0/23 maxlen: 23
5.62.138.0/24 maxlen: 24
5.62.139.0/24 maxlen: 24
5.62.140.0/23 maxlen: 23
5.62.140.0/24 maxlen: 24
5.62.141.0/24 maxlen: 24
5.62.142.0/23 maxlen: 23
5.62.142.0/24 maxlen: 24
5.62.143.0/24 maxlen: 24
5.62.144.0/21 maxlen: 21
5.62.144.0/23 maxlen: 23
5.62.144.0/24 maxlen: 24
5.62.145.0/24 maxlen: 24
5.62.146.0/23 maxlen: 23
5.62.146.0/24 maxlen: 24
5.62.147.0/24 maxlen: 24
5.62.148.0/23 maxlen: 23
5.62.148.0/24 maxlen: 24
5.62.149.0/24 maxlen: 24
5.62.150.0/23 maxlen: 23
5.62.150.0/24 maxlen: 24
5.62.151.0/24 maxlen: 24
31.7.80.0/24 maxlen: 24
31.7.81.0/24 maxlen: 24
31.7.82.0/24 maxlen: 24
31.7.83.0/24 maxlen: 24
31.7.84.0/24 maxlen: 24
31.7.85.0/24 maxlen: 24
31.7.86.0/24 maxlen: 24
31.7.87.0/24 maxlen: 24
37.77.48.0/21 maxlen: 21
37.77.49.0/24 maxlen: 24
37.77.50.0/24 maxlen: 24
37.77.51.0/24 maxlen: 24
37.77.52.0/24 maxlen: 24
37.77.53.0/24 maxlen: 24
37.77.54.0/24 maxlen: 24
37.77.55.0/24 maxlen: 24
185.69.4.0/22 maxlen: 22
185.69.4.0/24 maxlen: 24
185.69.5.0/24 maxlen: 24
185.69.6.0/23 maxlen: 23
185.69.6.0/24 maxlen: 24
185.69.7.0/24 maxlen: 24
2a00:c9e0::/32 maxlen: 32
2a00:c9e0:1::/48 maxlen: 48
2a00:c9e0:5::/48 maxlen: 48
2a00:c9e0:8::/48 maxlen: 48
2a00:c9e0:b::/48 maxlen: 48
2a00:c9e0:c::/48 maxlen: 48
2a00:c9e0:8000::/48 maxlen: 48
2a00:c9e0:8001::/48 maxlen: 48
2a00:c9e0:8002::/48 maxlen: 48
2a00:c9e7:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:14:94:c4:04:9a:55:75:3d:9a:4d:63:17:47:e2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Jan 22 07:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdbb72c5d9609123e59226ce89408bb9dcd95336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:c0:9e:73:de:5f:ec:21:78:ac:13:3f:ce:
55:a3:d8:4c:83:65:3b:c2:0e:04:e4:94:bb:d1:7f:
17:aa:0d:c1:b4:05:6f:83:21:c1:c7:5e:9b:6b:5d:
17:14:28:54:b7:16:3a:c9:41:75:28:85:de:83:9a:
bc:5a:74:3b:84:38:36:7f:6b:2b:4e:a7:95:e2:2c:
10:59:65:82:c9:78:d5:5d:d1:3e:d8:92:8a:d7:45:
fc:fd:37:91:61:e2:00:d7:27:16:fd:51:92:0a:71:
18:82:98:eb:e6:12:74:34:0b:99:c9:71:e2:ca:0f:
d3:2d:64:56:cd:3f:ec:80:e2:cd:64:eb:74:bf:18:
ee:19:c0:82:ab:26:21:ea:1a:dd:27:bc:31:88:57:
f9:da:f2:30:c7:40:ba:cf:c7:81:79:d3:d2:d5:de:
f5:76:b4:d6:e1:f2:31:ad:9d:d4:e0:9e:1a:89:91:
1c:cc:20:71:66:3f:bf:4c:c7:82:8a:c9:19:f0:6b:
af:36:97:98:90:9e:c1:ce:de:c1:c0:df:b2:d5:45:
c4:12:6e:23:2a:c0:f3:40:da:a5:55:de:88:78:83:
0b:f7:f3:93:fd:ca:8e:15:a9:a3:cb:8a:0c:cc:9f:
be:b5:c3:c7:28:2d:cd:49:44:6c:fc:65:48:dc:5f:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BB:72:C5:D9:60:91:23:E5:92:26:CE:89:40:8B:B9:DC:D9:53:36
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/zbtyxdlgkSPlkibOiUCLudzZUzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.128.0-5.62.151.255
31.7.80.0/21
37.77.48.0/21
185.69.4.0/22
IPv6:
2a00:c9e0::/32
2a00:c9e7:1::/48
Signature Algorithm: sha256WithRSAEncryption
2b:40:35:d9:eb:bf:f6:a5:36:5e:79:b2:20:ab:b7:4f:5a:43:
31:d6:12:e0:a9:11:87:f1:34:36:d7:48:87:c0:72:2a:5b:2c:
ab:40:ad:90:c9:21:4c:e7:40:c0:ee:35:17:01:a3:38:ce:5e:
c9:97:fc:7a:c7:23:22:c2:4b:b9:55:bc:7b:3d:a7:41:56:18:
22:59:90:ec:e7:e5:4e:7b:ac:75:09:c2:e3:d2:36:0f:ce:06:
3a:d3:55:f5:89:62:3a:86:92:0e:92:db:94:63:3a:68:5f:5c:
94:8f:b9:37:68:c2:6b:d9:13:72:94:e6:ec:0b:02:a0:61:6c:
03:22:5f:b7:9b:06:34:83:fc:e7:21:11:da:81:2f:05:b7:a5:
c3:5e:14:c5:46:d5:88:ac:b9:0c:19:dc:70:6d:d9:35:1a:85:
96:d9:93:63:44:ca:a5:00:a6:18:a8:aa:83:9d:7e:c6:47:38:
81:31:53:ce:2d:6a:83:ee:4f:a6:e3:2c:c3:93:26:6b:81:44:
88:4f:47:04:64:b3:00:1c:a8:da:cf:75:22:a6:d1:b6:9c:0f:
09:cd:cd:20:b5:84:17:2f:20:87:70:22:be:4d:9d:0d:17:9c:
cc:e1:f9:42:70:91:f2:fd:b3:44:b0:70:7c:32:a1:89:4f:94:
cc:f8:9a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:21:26 2024 by rpki-client on console-fra.rpki-client.org