Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/9fWrdysaOTYM7rMG-ryBC1S3gTk.roa
File: 9fWrdysaOTYM7rMG-ryBC1S3gTk.roa (raw, json)
Hash identifier: YV+0PAHkjGhfDc7eeFTR6AOSCYEADjBu8q2NnXLWqnE=
Subject key identifier: F5:F5:AB:77:2B:1A:39:36:0C:EE:B3:06:FA:BC:81:0B:54:B7:81:39
Certificate issuer: /CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Certificate serial: 018F7B9EF393E9EEC0511E393850FB88A83F
Authority key identifier: 38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/9fWrdysaOTYM7rMG-ryBC1S3gTk.roa
Signing time: Wed 15 May 2024 09:39:25 +0000
ROA not before: Wed 15 May 2024 09:39:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58173
IP address blocks: 5.61.72.0/21 maxlen: 21
5.61.72.0/22 maxlen: 22
5.61.72.0/24 maxlen: 24
5.61.76.0/22 maxlen: 22
134.0.80.0/21 maxlen: 24
185.18.48.0/22 maxlen: 22
185.18.48.0/23 maxlen: 23
185.18.48.0/24 maxlen: 24
185.18.50.0/23 maxlen: 23
185.18.50.0/24 maxlen: 24
185.96.192.0/22 maxlen: 24
185.96.192.0/23 maxlen: 23
185.205.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7b:9e:f3:93:e9:ee:c0:51:1e:39:38:50:fb:88:a8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Validity
Not Before: May 15 09:39:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5f5ab772b1a39360ceeb306fabc810b54b78139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:b8:03:0c:5b:b8:2b:85:14:23:5f:31:09:
ac:aa:fb:5f:b2:30:1b:65:d9:91:4a:34:30:df:72:
a1:1f:f4:f3:62:b4:c5:74:26:67:e0:15:6b:10:73:
66:83:36:04:81:b8:47:af:34:70:ac:aa:33:57:e8:
c4:22:58:a2:48:42:06:31:21:86:e7:67:9a:a2:1b:
21:36:18:a1:5a:fa:29:83:a1:ea:18:4a:a4:00:9b:
66:7d:02:46:38:03:69:4a:52:8f:0f:fd:7b:4e:a4:
f5:d5:72:9d:36:9d:3d:e8:8d:e3:37:e0:65:21:eb:
83:1b:d6:60:cc:0c:d5:3b:fd:6a:92:85:67:46:e8:
36:10:d0:73:ac:b7:b7:da:5d:b4:8f:8a:73:5c:f1:
09:16:8e:b0:ad:b1:cb:03:89:7c:d5:1b:11:20:25:
f0:5b:aa:32:ce:b7:2c:e9:9a:0e:72:33:af:f4:ed:
8c:9f:0c:7e:c0:c8:92:d8:f0:22:ec:6a:60:9f:7b:
06:16:aa:2a:bb:bd:a6:a9:c4:a9:a4:ef:99:98:25:
a8:cf:e6:4e:27:f2:70:2c:7d:3f:1f:89:22:d6:a4:
0a:49:fd:9e:05:b6:62:b2:0a:f1:cb:f4:fe:ab:6f:
d1:7f:d9:c7:20:bc:c3:71:c7:ec:01:2f:c8:24:17:
a7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F5:AB:77:2B:1A:39:36:0C:EE:B3:06:FA:BC:81:0B:54:B7:81:39
X509v3 Authority Key Identifier:
keyid:38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/9fWrdysaOTYM7rMG-ryBC1S3gTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.72.0/21
134.0.80.0/21
185.18.48.0/22
185.96.192.0/22
185.205.160.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:0b:0c:67:2e:08:e8:35:e3:40:38:f0:b5:91:e5:68:3f:3f:
3f:fe:60:4d:c0:e5:bf:1e:17:7f:03:61:0d:98:d3:7b:b2:b3:
7a:a6:e1:ed:84:dd:58:e2:47:3a:e1:ad:f3:68:8d:dd:e5:35:
e5:e1:a2:a7:68:fa:58:2a:55:76:dd:80:24:d9:e1:eb:69:9f:
4c:51:36:2f:5d:41:1e:05:7b:67:cc:03:ed:4b:b5:f7:eb:52:
ac:a6:d8:7c:af:d2:a7:8c:4f:d9:f8:50:7a:27:21:a9:0a:66:
af:33:b8:a4:17:36:9b:e1:60:60:74:05:a0:db:62:d7:e5:78:
11:23:8a:b5:fa:1d:00:24:1d:c7:83:42:1c:23:1b:76:bc:95:
1b:2f:2f:3d:04:ff:54:b6:a6:c4:b2:5e:3f:ed:e3:17:34:6f:
a1:03:a7:10:b8:74:83:fb:9f:b9:62:a3:6c:85:af:cb:09:54:
3e:94:4f:15:70:0d:ca:ed:13:22:c7:1c:29:c6:cd:8a:e9:8f:
3e:a4:4d:ba:48:99:65:70:64:aa:5b:34:f9:f1:1f:02:ff:84:
ac:6f:56:e9:d7:ba:06:a2:17:e4:f8:40:f2:0e:9f:70:ac:fb:
8c:ab:0f:79:5f:74:88:48:4a:91:a9:12:be:4b:1d:c6:8a:a9:
35:58:5b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:24:32 2024 by rpki-client on console-ams.rpki-client.org