Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/MIMDA3wjEWojgk1d1DGlbqXK_qU.roa
File: MIMDA3wjEWojgk1d1DGlbqXK_qU.roa (raw, json)
Hash identifier: HwT9HHHUopgEbTXMoW4tXMqhNTHzJq9PBTYarN1aZdQ=
Subject key identifier: 30:83:03:03:7C:23:11:6A:23:82:4D:5D:D4:31:A5:6E:A5:CA:FE:A5
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01935CA4466D68944F0EB9F3DBCEEA95AE61
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/MIMDA3wjEWojgk1d1DGlbqXK_qU.roa
Signing time: Sun 24 Nov 2024 05:28:09 +0000
ROA not before: Sun 24 Nov 2024 05:28:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204650
IP address blocks: 5.57.35.0/24 maxlen: 24
37.32.42.0/24 maxlen: 24
37.32.44.0/24 maxlen: 24
37.32.45.0/24 maxlen: 24
178.239.156.0/24 maxlen: 24
178.239.159.0/24 maxlen: 24
185.26.34.0/23 maxlen: 24
185.124.172.0/22 maxlen: 24
185.124.175.0/24 maxlen: 24
185.212.48.0/24 maxlen: 24
185.243.49.0/24 maxlen: 24
185.243.50.0/24 maxlen: 24
2a00:7040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5c:a4:46:6d:68:94:4f:0e:b9:f3:db:ce:ea:95:ae:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Nov 24 05:28:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=308303037c23116a23824d5dd431a56ea5cafea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:3a:2c:81:24:9d:7f:ee:5f:80:ff:c5:4a:
d9:01:6a:15:cb:37:05:ed:a2:0d:e6:c8:b9:dd:4a:
82:0d:1a:55:d4:b3:38:e9:48:ea:fd:7a:26:06:92:
c1:3c:13:9f:6f:74:6c:10:cf:75:de:fd:60:cc:be:
a6:37:bf:3e:ff:0a:ed:04:54:d9:6a:c0:d9:1d:b0:
49:ac:c0:6e:e5:05:69:0e:81:70:80:89:44:41:13:
36:07:e9:00:68:c3:77:44:1b:0a:d9:ab:8b:5b:a2:
32:a3:09:cd:ed:a8:97:9e:e2:73:6d:2e:9b:a7:06:
fd:79:9c:04:e9:99:72:fb:8b:a3:57:f1:8c:37:66:
15:57:58:b2:07:ec:3e:a4:73:5d:7e:40:a8:35:07:
45:ba:41:37:77:18:f5:68:9c:e2:0a:96:67:ce:a1:
be:04:90:0f:81:78:15:84:42:cf:d3:63:3f:6c:f3:
01:ee:d9:79:1d:89:91:45:b6:f6:74:77:ad:88:a9:
d8:87:6d:08:ec:ad:11:10:e6:3b:18:17:d4:1a:7e:
93:0b:2a:04:ec:bf:36:6c:58:25:77:94:c2:d0:2c:
b5:d6:33:0d:b3:61:58:51:d0:a6:3d:5a:31:9b:d6:
ec:d6:2d:c3:02:90:32:e7:dd:c8:8c:50:72:02:a9:
ac:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:83:03:03:7C:23:11:6A:23:82:4D:5D:D4:31:A5:6E:A5:CA:FE:A5
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/MIMDA3wjEWojgk1d1DGlbqXK_qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.35.0/24
37.32.42.0/24
37.32.44.0/23
178.239.156.0/24
178.239.159.0/24
185.26.34.0/23
185.124.172.0/22
185.212.48.0/24
185.243.49.0-185.243.50.255
IPv6:
2a00:7040::/32
Signature Algorithm: sha256WithRSAEncryption
30:45:ec:33:9c:e6:58:b8:5f:aa:e3:a1:a4:5f:54:b3:f2:db:
94:35:d7:fd:31:98:f4:61:8b:97:ea:5b:61:0d:5e:65:3c:1f:
5a:88:f4:67:99:8f:8d:58:93:22:e8:c5:b4:a0:c6:a1:a8:d5:
33:1c:65:d2:88:92:48:8c:bd:a4:ff:fb:e9:e5:13:54:4d:43:
55:37:00:4e:f9:51:c1:10:e6:fa:21:ee:b1:1a:95:17:33:bf:
d5:55:5d:77:49:56:bc:5d:46:7a:48:6d:4e:fd:9a:9c:8c:76:
a4:f8:77:f3:74:47:3d:0b:83:cf:25:30:db:94:09:bb:3e:bb:
ac:df:92:2a:07:40:55:c9:96:5e:5e:20:3d:c6:5a:ea:1d:1a:
bc:45:06:e2:e4:23:36:b4:93:e4:52:3b:43:ec:d4:41:7d:cc:
40:1e:03:e3:ff:1b:71:47:84:1e:8d:5b:7f:2c:46:23:4f:3f:
aa:1f:b8:d3:65:f5:58:94:30:e6:81:37:51:91:6f:c6:62:e6:
95:ca:d6:9d:c8:66:57:75:72:ff:48:95:6b:09:be:8e:fc:cc:
e2:f0:67:2a:c9:0f:8c:b6:de:69:fe:8a:56:2c:2a:a0:04:97:
30:d2:27:02:7c:de:62:4d:44:86:69:7e:6b:3f:18:f0:7f:bc:
c0:fa:4c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:42:46 2024 by rpki-client on console-ams.rpki-client.org