Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/OTClwVpeLNYR-O65oZYvby9WwTo.roa
File: OTClwVpeLNYR-O65oZYvby9WwTo.roa (raw, json)
Hash identifier: e7Mih644ejfqvbKf7CrLGWZG48WBppyjNLqguxeucoA=
Subject key identifier: 39:30:A5:C1:5A:5E:2C:D6:11:F8:EE:B9:A1:96:2F:6F:2F:56:C1:3A
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 018CC64AE498334F5C6137E832E22479886D
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/OTClwVpeLNYR-O65oZYvby9WwTo.roa
Signing time: Mon 01 Jan 2024 18:30:46 +0000
ROA not before: Mon 01 Jan 2024 18:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211261
IP address blocks: 185.210.192.0/24 maxlen: 24
185.210.195.0/24 maxlen: 24
185.210.193.0/24 maxlen: 24
91.210.126.0/24 maxlen: 24
5.253.157.0/24 maxlen: 24
5.253.156.0/24 maxlen: 24
5.253.159.0/24 maxlen: 24
185.146.67.0/24 maxlen: 24
185.204.201.0/24 maxlen: 24
185.204.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e4:98:33:4f:5c:61:37:e8:32:e2:24:79:88:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Jan 1 18:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3930a5c15a5e2cd611f8eeb9a1962f6f2f56c13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:d4:f2:fb:80:00:f7:13:2c:44:6c:ea:66:
1f:67:c7:63:77:c8:da:fa:fa:88:19:27:4f:e1:e0:
04:ae:8a:c2:eb:da:50:f6:0a:a6:3c:06:d9:03:17:
4c:7c:c3:3c:6b:4b:f7:65:de:15:3f:24:35:14:99:
d4:06:79:81:11:bd:bd:63:01:b0:ce:7c:02:2d:c2:
67:2c:ef:3c:4d:7a:7e:77:57:a6:46:91:a0:e0:a6:
06:04:15:52:6a:13:f8:ef:da:fa:75:97:9c:84:10:
24:1f:e0:1f:ea:95:b3:70:f4:ab:01:e6:48:48:98:
c2:b5:d8:5d:fb:d8:a6:49:ab:e5:e2:f7:62:9a:0a:
65:c9:4a:4b:ff:24:bd:41:2a:71:15:67:ab:02:50:
92:cc:e7:a9:f1:4a:47:ce:89:24:c5:22:be:3e:4b:
69:2d:07:14:b5:ea:94:c8:36:15:4a:c7:d0:ba:d5:
19:b2:b4:88:a0:9b:7a:ac:6d:7b:f1:2a:fe:91:bc:
7d:7f:b5:45:48:d2:41:3e:11:19:0b:6e:3b:67:22:
ee:8e:bd:78:cf:38:fa:f7:e4:5e:e6:50:29:47:4c:
c6:47:cd:9f:29:a1:6d:16:fa:0f:8f:16:da:47:cb:
bc:48:3d:0c:1a:94:5e:d5:40:36:c0:29:d7:0a:b3:
e2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:30:A5:C1:5A:5E:2C:D6:11:F8:EE:B9:A1:96:2F:6F:2F:56:C1:3A
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/OTClwVpeLNYR-O65oZYvby9WwTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.156.0/23
5.253.159.0/24
91.210.126.0/24
185.146.67.0/24
185.204.200.0/23
185.210.192.0/23
185.210.195.0/24
Signature Algorithm: sha256WithRSAEncryption
86:da:75:a1:73:9c:43:66:21:e3:7d:50:00:39:6d:d9:ac:f9:
6e:86:b1:c6:35:b6:21:19:b1:ed:5e:3c:16:b1:cc:78:f7:e8:
f5:75:0c:50:aa:88:8e:3b:6c:fa:31:35:78:5a:e0:3a:5f:ce:
b4:19:00:bd:98:3f:e3:a5:36:cf:fd:36:8a:3a:3d:b0:4a:02:
ef:67:12:05:0b:9d:eb:5d:a4:15:17:98:9e:53:08:42:12:dd:
72:1a:da:93:85:b3:15:68:d3:e1:ad:af:44:6a:2d:57:c1:b4:
6c:9e:20:01:85:f6:1a:a7:cc:8a:4a:21:37:68:9e:e0:77:2c:
70:d7:8d:e8:12:72:8f:0c:a3:9f:0f:7c:e3:14:c4:04:81:1e:
be:da:bd:c2:7e:cf:f4:6c:21:d7:5d:6f:8a:94:80:96:13:c6:
52:99:a3:38:7e:a3:3c:1b:c2:f4:53:c5:98:36:64:44:d8:6e:
62:fa:53:9d:0d:2e:c9:dd:26:d8:86:ff:4c:1d:01:4e:0d:9b:
f2:34:52:a2:07:24:5d:b2:02:12:61:1c:d3:cb:66:a2:c9:86:
fc:11:49:b1:7d:ad:db:8d:57:12:76:78:e1:63:ed:c3:96:f8:
a9:60:af:08:7a:b7:22:8e:a0:9f:0d:b8:c1:fa:bd:2e:26:ba:
3f:b4:88:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:16:25 2024 by rpki-client on console-fra.rpki-client.org