Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/CCEwzOWT626i1iIrQD6Ph3Lc1eo.roa
File: CCEwzOWT626i1iIrQD6Ph3Lc1eo.roa (raw, json)
Hash identifier: W2MPNjFVr9DOnNGUjWa8qxP/CVjPybR3HZ3I7oMKZrc=
Subject key identifier: 08:21:30:CC:E5:93:EB:6E:A2:D6:22:2B:40:3E:8F:87:72:DC:D5:EA
Certificate issuer: /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Certificate serial: 018CC86FA99BF31604265A501AD210390F43
Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/CCEwzOWT626i1iIrQD6Ph3Lc1eo.roa
Signing time: Tue 02 Jan 2024 04:30:10 +0000
ROA not before: Tue 02 Jan 2024 04:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61137
IP address blocks: 91.229.65.0/24 maxlen: 24
185.76.128.0/22 maxlen: 22
185.76.130.0/24 maxlen: 24
185.76.131.0/24 maxlen: 24
5.53.96.0/21 maxlen: 21
5.53.96.0/22 maxlen: 22
5.53.100.0/24 maxlen: 24
109.205.28.0/23 maxlen: 23
91.229.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:a9:9b:f3:16:04:26:5a:50:1a:d2:10:39:0f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Validity
Not Before: Jan 2 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=082130cce593eb6ea2d6222b403e8f8772dcd5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:76:25:cb:d2:29:75:ad:35:20:35:8e:2e:78:
0a:d1:c3:24:51:d3:b6:a1:55:19:1a:a3:4a:ca:34:
61:fe:a0:2a:5b:99:5c:93:e7:2c:8c:4d:8b:66:a5:
04:b7:1b:5b:da:3f:97:02:7d:0d:a4:73:08:ec:10:
2b:39:cb:ec:98:42:48:8a:7d:f7:36:2d:2e:44:fb:
3f:e6:a7:4f:9d:a1:ca:aa:22:f5:09:a2:3e:62:8d:
52:be:9b:60:f4:2b:55:46:92:96:9f:97:28:ff:fb:
c4:e5:36:a2:77:95:be:28:a4:d0:b0:83:56:48:4d:
54:e3:d1:5e:8c:b4:41:4d:06:b5:d8:6a:6f:d3:92:
7c:60:fd:62:70:b2:4e:ba:64:75:dc:35:c8:a0:41:
54:4a:b4:2e:8b:7e:36:e0:45:fb:af:ba:77:bc:dd:
60:ad:b4:da:77:bd:c5:d9:a9:3e:40:04:c0:b6:dc:
34:7c:9d:c5:36:e2:03:75:5d:69:cf:33:69:b9:93:
d7:92:a0:10:f5:77:ec:ae:33:0c:f1:0b:e2:ae:2e:
11:b0:6d:4f:d9:74:2c:d1:ab:4e:8e:40:74:d2:81:
66:ce:0f:2b:e0:0e:4c:a7:cd:39:a9:a2:df:d5:8b:
d1:10:a9:73:9d:6c:22:70:b2:31:ba:88:4f:59:90:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:21:30:CC:E5:93:EB:6E:A2:D6:22:2B:40:3E:8F:87:72:DC:D5:EA
X509v3 Authority Key Identifier:
keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/CCEwzOWT626i1iIrQD6Ph3Lc1eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.96.0/21
91.229.64.0/23
109.205.28.0/23
185.76.128.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:0e:14:04:c9:26:86:4f:a9:e4:92:73:93:45:08:f4:97:6b:
9a:c9:8b:bb:3c:ed:42:c0:72:2d:09:84:d7:80:91:f4:e8:a0:
90:67:27:fb:4d:42:7b:a5:e0:a9:68:c4:62:51:17:a3:e1:a5:
34:b1:63:86:1a:1b:bd:de:bb:67:bb:83:ed:c6:66:8c:30:ce:
fb:6e:48:50:52:ad:89:c9:b0:dd:30:b2:9d:9a:be:d5:b3:86:
64:d9:b3:e0:a4:b3:ad:2d:6b:3d:f2:65:78:3e:41:9c:c2:c1:
9b:a0:ff:a8:2e:71:e3:e9:10:d3:29:13:dc:37:dc:a3:0f:4b:
eb:7b:cf:53:22:5d:d4:79:63:36:6c:f6:27:a4:89:45:f5:4a:
fe:09:1d:09:41:a2:f5:46:2a:06:7f:04:c8:b5:82:c8:26:58:
d5:75:e6:72:f4:e1:79:8a:81:c7:e8:d7:92:93:c4:0e:6a:e8:
be:6c:a6:46:a8:f1:7d:db:ec:4e:68:8d:bc:fc:49:1c:af:fe:
dc:34:71:ba:0a:48:fd:50:0e:f1:f8:02:0c:f8:76:95:3d:c1:
fa:ad:98:3c:3e:2a:f3:b4:7c:98:43:b5:ac:53:c7:50:19:95:
12:46:51:a3:61:76:a9:a4:6d:60:18:56:f5:b6:99:a0:cc:05:
a1:72:f0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:37:52 2024 by rpki-client on console-fra.rpki-client.org