Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/Iun51VLgtP1oqhEE9sRT93CFjKo.roa
File: Iun51VLgtP1oqhEE9sRT93CFjKo.roa (raw, json)
Hash identifier: sIikdKmdx2FkPlvu7MWdYvTdHOLU9XMOHj43tdHtO7Q=
Subject key identifier: 22:E9:F9:D5:52:E0:B4:FD:68:AA:11:04:F6:C4:53:F7:70:85:8C:AA
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 01929A090C0D5C7BA98734F967DD82007B69
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/Iun51VLgtP1oqhEE9sRT93CFjKo.roa
Signing time: Thu 17 Oct 2024 10:32:17 +0000
ROA not before: Thu 17 Oct 2024 10:32:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211183
IP address blocks: 5.35.124.0/24 maxlen: 24
5.253.62.0/24 maxlen: 24
37.140.241.0/24 maxlen: 24
45.128.204.0/24 maxlen: 24
79.133.181.0/24 maxlen: 24
79.133.182.0/24 maxlen: 24
79.133.183.0/24 maxlen: 24
89.191.225.0/24 maxlen: 24
91.200.84.0/24 maxlen: 24
94.154.11.0/24 maxlen: 24
185.198.152.0/24 maxlen: 24
185.239.50.0/24 maxlen: 24
185.239.51.0/24 maxlen: 24
185.240.103.0/24 maxlen: 24
185.244.51.0/24 maxlen: 24
185.250.44.0/24 maxlen: 24
185.250.46.0/24 maxlen: 24
185.250.47.0/24 maxlen: 24
193.187.96.0/24 maxlen: 24
217.171.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9a:09:0c:0d:5c:7b:a9:87:34:f9:67:dd:82:00:7b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Oct 17 10:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22e9f9d552e0b4fd68aa1104f6c453f770858caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:13:cc:b3:ff:9e:aa:1b:62:51:de:a7:a5:a9:
14:88:fe:64:1c:ed:bf:1f:a9:e9:90:d1:78:d7:69:
c1:f7:50:1e:1e:36:04:32:1e:d3:01:95:8b:20:26:
f1:b1:68:db:28:b0:2b:43:59:48:f8:0c:0d:d4:fe:
c0:ee:91:3c:96:2b:f1:7c:62:2f:7d:61:d5:b0:cc:
0c:a9:ff:d0:6a:cd:73:ce:ae:e2:10:5c:5f:f1:09:
87:ea:1c:88:da:ab:31:e3:ad:25:59:e4:6a:46:e4:
08:bc:5c:05:f0:be:1c:9e:23:e4:42:b6:76:57:f7:
ea:05:07:98:b3:9f:4e:79:5a:df:3a:f7:cd:67:24:
68:7f:13:8f:e8:38:13:c2:74:cc:61:73:c4:94:b4:
be:6c:e2:7b:e7:bb:ee:9c:30:aa:ed:97:e1:08:eb:
11:ba:8a:bd:1a:fe:16:de:f6:15:27:b6:f9:fa:13:
83:98:18:a1:0b:0a:25:ba:61:d5:41:f1:24:ba:2c:
17:38:f8:21:94:86:3e:f2:99:8c:cf:2f:49:0b:54:
f6:60:1b:2b:7a:89:47:f2:d4:48:8b:0d:af:23:53:
4e:f2:b9:2a:f4:78:26:a2:ec:93:a2:56:c2:b4:a7:
dc:40:f8:19:6f:4a:78:57:8e:89:25:db:c7:70:fd:
1c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E9:F9:D5:52:E0:B4:FD:68:AA:11:04:F6:C4:53:F7:70:85:8C:AA
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/Iun51VLgtP1oqhEE9sRT93CFjKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.124.0/24
5.253.62.0/24
37.140.241.0/24
45.128.204.0/24
79.133.181.0-79.133.183.255
89.191.225.0/24
91.200.84.0/24
94.154.11.0/24
185.198.152.0/24
185.239.50.0/23
185.240.103.0/24
185.244.51.0/24
185.250.44.0/24
185.250.46.0/23
193.187.96.0/24
217.171.146.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:2f:08:ad:a6:ae:39:5a:41:85:e6:e4:b6:0c:36:b4:b9:2a:
5c:a7:8b:d3:f2:a6:3a:d9:e4:f1:8c:5a:f2:85:3d:14:ec:ef:
24:dd:38:57:8d:63:3d:2f:aa:6c:78:d0:82:56:24:79:63:ab:
a8:03:74:fe:34:ad:27:7d:30:e1:ab:6d:4a:ae:89:b4:79:fd:
75:8e:31:4f:bb:ad:61:d0:ca:de:1f:54:41:20:e8:f2:f7:d1:
a0:53:94:7c:04:56:3c:e2:2b:28:41:4b:4f:c8:73:6d:c5:c0:
a4:d9:fa:d1:67:af:3b:da:32:6a:1b:a0:a5:75:26:c1:79:e0:
1d:a1:15:fe:ac:40:e8:ec:fd:0b:e0:22:99:34:81:59:a6:08:
27:08:81:5a:2e:83:42:58:11:ad:c1:fd:d5:ae:20:06:f4:8a:
09:85:1c:0a:69:fc:72:7f:c9:4f:50:7c:fd:52:fd:4d:0c:f6:
8d:ee:de:44:ae:38:e3:21:5c:ce:31:59:65:ac:41:d2:bf:41:
0d:4c:77:c2:d7:2d:e3:d4:81:ad:90:e6:ed:b1:f0:71:31:c2:
14:45:2e:69:e5:a8:44:72:20:3f:62:f2:ba:cd:2a:35:78:95:
f5:7f:a0:80:2a:4e:38:35:b8:e2:33:ee:e4:a5:23:9c:8a:8b:
fd:0b:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:22:33 2024 by rpki-client on console-ams.rpki-client.org