Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Fw4iuP-ajKynmcVrtlhuX6fMKZs.roa
File: Fw4iuP-ajKynmcVrtlhuX6fMKZs.roa (raw, json)
Hash identifier: BgunJ34RLgW0WE0UjAQcfuFpPSDnVhzsfWnfeyVwv3E=
Subject key identifier: 17:0E:22:B8:FF:9A:8C:AC:A7:99:C5:6B:B6:58:6E:5F:A7:CC:29:9B
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018CCA287356BCA41EC0F69B503F897316D3
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Fw4iuP-ajKynmcVrtlhuX6fMKZs.roa
Signing time: Tue 02 Jan 2024 12:31:37 +0000
ROA not before: Tue 02 Jan 2024 12:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197343
IP address blocks: 5.57.34.0/24 maxlen: 24
5.57.36.0/24 maxlen: 24
5.57.35.0/24 maxlen: 24
185.212.48.0/24 maxlen: 24
178.239.156.0/23 maxlen: 23
178.239.156.0/22 maxlen: 22
5.56.128.0/22 maxlen: 22
37.32.42.0/24 maxlen: 24
37.32.41.0/24 maxlen: 24
37.32.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:73:56:bc:a4:1e:c0:f6:9b:50:3f:89:73:16:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 2 12:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=170e22b8ff9a8caca799c56bb6586e5fa7cc299b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ec:ab:43:26:a2:17:3f:1c:a9:15:eb:f0:73:
ed:0d:6b:91:ab:9b:4e:f4:4f:61:ca:ee:c6:26:13:
b7:0c:40:c7:97:e4:49:b8:51:17:b1:21:18:bf:b9:
b4:a0:00:24:7a:69:48:07:62:d1:67:34:9d:60:e0:
fe:8e:ae:5c:27:17:2f:67:15:82:05:7d:a5:56:b5:
82:1b:11:94:cf:a7:d4:b1:7d:88:1d:5c:aa:c9:6f:
35:a8:1a:32:75:7a:16:e3:4d:cc:6c:a2:4e:84:46:
c2:a0:0a:3d:f8:85:0c:fd:2d:d8:89:b1:34:6f:ca:
38:48:d5:42:f8:2f:4d:6a:ba:e1:60:a4:9a:4e:91:
a6:73:91:df:49:81:3e:40:84:5e:07:fa:03:4c:a4:
dd:53:2d:3c:ba:6f:4f:ac:e2:a5:c7:43:14:73:67:
bd:4f:3f:c3:09:01:4f:a8:d6:7e:5d:69:f6:a3:4e:
44:c2:89:ac:53:6d:9e:97:b3:f9:b3:1a:a2:1c:23:
db:4d:72:bf:a4:26:6f:6e:5c:2f:ff:d0:64:b1:28:
ff:0c:d6:78:08:67:76:db:d8:fa:89:c7:63:e2:06:
85:1e:3c:b4:f4:08:7e:e1:bd:40:fd:35:27:93:cb:
0b:c2:3e:c4:81:d6:62:67:0f:2d:10:53:c3:e4:ec:
77:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0E:22:B8:FF:9A:8C:AC:A7:99:C5:6B:B6:58:6E:5F:A7:CC:29:9B
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Fw4iuP-ajKynmcVrtlhuX6fMKZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.128.0/22
5.57.34.0-5.57.36.255
37.32.40.0/22
178.239.156.0/22
185.212.48.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:eb:fe:8c:da:34:a5:7b:aa:75:89:ba:2a:bc:dd:d5:e3:29:
11:b9:e8:7a:fc:ea:84:dc:79:28:e1:75:67:be:0c:8d:63:df:
65:a1:54:1a:5d:dc:6b:fe:43:d0:c8:a0:7a:0f:56:28:a9:3a:
36:48:ac:e4:16:e7:12:d8:fc:53:d6:de:20:9e:b6:28:0c:c7:
aa:0a:d0:2a:98:16:69:ff:93:cc:2c:1a:e0:c5:a7:a5:74:4b:
60:b5:1b:c3:38:85:a1:7b:52:6f:01:0d:a2:a5:48:a2:e6:be:
45:ea:47:e3:f1:cf:ae:a5:1a:f4:56:dc:a1:97:9b:95:10:fd:
2a:95:48:9b:fe:13:9e:4d:79:b5:66:2a:20:4f:68:a3:7a:28:
93:75:84:40:9f:c9:52:69:d8:ae:75:74:a1:c8:c9:76:9f:fd:
a0:88:8d:bc:f6:e6:f1:4c:de:2d:12:e7:3c:f8:54:88:ae:e0:
8c:a8:2b:78:f1:b8:cb:35:05:44:01:22:06:b7:44:ba:32:7f:
97:34:e7:07:6c:4b:14:45:2a:ad:28:2d:f0:e5:4b:68:66:60:
b8:03:08:f2:0e:31:58:6c:27:c2:03:61:08:f7:6a:ab:25:ac:
c7:1e:6e:4d:d4:21:d3:34:38:fb:93:ff:04:90:bc:20:b8:c8:
54:2e:8f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:19 2024 by rpki-client on console-ams.rpki-client.org