Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/CLJ3dWbm3Fq0SXRXpNjthOeswmU.roa
File: CLJ3dWbm3Fq0SXRXpNjthOeswmU.roa (raw, json)
Hash identifier: dOqj8nH9ETTXsC3jQVmsDqFFYgjmM02+KeZedXoJBVY=
Subject key identifier: 08:B2:77:75:66:E6:DC:5A:B4:49:74:57:A4:D8:ED:84:E7:AC:C2:65
Certificate issuer: /CN=31242850cad41cdf75a3c9d60b21fca543f74384
Certificate serial: 018D8DDD6DD0D02AFF513C8A9CAA2DC528EB
Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/CLJ3dWbm3Fq0SXRXpNjthOeswmU.roa
Signing time: Fri 09 Feb 2024 12:35:15 +0000
ROA not before: Fri 09 Feb 2024 12:35:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9136
IP address blocks: 5.159.24.0/21 maxlen: 21
62.176.224.0/19 maxlen: 19
91.186.32.0/19 maxlen: 19
92.118.192.0/22 maxlen: 22
185.72.232.0/22 maxlen: 22
213.162.128.0/19 maxlen: 19
2a01:580::/29 maxlen: 29
2a01:581:6::/48 maxlen: 48
2a01:581:7::/48 maxlen: 48
2a01:581:8::/48 maxlen: 48
2a01:581:9::/48 maxlen: 48
2a01:581:a::/48 maxlen: 48
2a01:581:b::/48 maxlen: 48
2a01:581:c::/48 maxlen: 48
2a01:581:d::/48 maxlen: 48
2a01:581:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:dd:6d:d0:d0:2a:ff:51:3c:8a:9c:aa:2d:c5:28:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384
Validity
Not Before: Feb 9 12:35:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08b2777566e6dc5ab4497457a4d8ed84e7acc265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:cd:87:a7:e9:ee:8e:57:33:28:3b:d5:c1:
fc:15:b7:d2:3f:85:81:6c:25:98:91:22:0b:ec:1a:
fc:b2:2a:01:4d:5e:e2:27:a4:d3:89:5f:c6:eb:98:
07:3a:de:f6:b7:d8:00:aa:e2:af:ec:05:b0:e9:31:
c4:e8:b1:c0:9a:d2:84:00:0a:1f:ac:11:8b:e0:ce:
41:16:5e:2f:a0:55:63:17:6a:3f:07:18:db:a0:a7:
28:72:4a:d8:1d:6a:1e:41:1e:25:d4:c5:be:c6:38:
c0:0a:5f:ba:0c:26:67:8e:96:31:20:ce:b8:7b:0d:
0e:f5:11:79:b3:e4:02:8d:99:f0:0a:f7:6a:65:50:
c1:a4:64:f7:0f:1e:7a:3f:c1:f9:98:2d:82:60:49:
6e:47:b3:80:13:65:17:72:47:c8:12:ff:82:57:99:
d0:1b:09:b6:ce:cf:1f:0c:eb:68:bf:63:87:b6:d2:
6e:7b:79:35:fc:18:2d:80:66:ad:95:42:8a:45:30:
02:2c:bf:f5:63:31:b2:60:c9:cd:80:5a:66:9a:1a:
48:cc:4a:31:32:d4:5a:ef:d6:7d:0e:02:44:45:b6:
22:0b:1f:e1:5b:77:98:25:88:68:97:22:4f:c2:ac:
98:37:f7:a1:c9:8f:f1:e5:72:ae:60:25:f8:74:23:
09:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B2:77:75:66:E6:DC:5A:B4:49:74:57:A4:D8:ED:84:E7:AC:C2:65
X509v3 Authority Key Identifier:
keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/CLJ3dWbm3Fq0SXRXpNjthOeswmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.24.0/21
62.176.224.0/19
91.186.32.0/19
92.118.192.0/22
185.72.232.0/22
213.162.128.0/19
IPv6:
2a01:580::/29
Signature Algorithm: sha256WithRSAEncryption
33:ea:6c:f2:9f:83:1a:cf:2e:61:48:3a:32:1f:5f:0c:49:8a:
f5:b3:4d:84:0a:ce:67:3c:5e:91:ea:4c:06:e5:18:79:05:fd:
04:60:6b:42:39:0b:11:2f:b5:38:9a:33:70:5c:fc:06:1f:76:
73:d2:ed:85:58:1d:43:a2:eb:41:79:a7:a7:9b:8a:83:03:de:
62:38:ad:c8:8f:7e:8e:c4:39:ce:1f:30:b3:fc:0d:7e:db:44:
ce:1d:3a:57:97:c4:57:84:1a:d1:4d:48:c7:45:8d:81:d6:d4:
e4:30:27:ac:4b:1b:e0:7f:fa:63:3f:2c:7e:70:83:10:46:0d:
e3:db:e2:2d:1b:84:a2:84:28:9d:32:ea:a4:9b:02:22:d4:36:
9b:bc:42:63:e8:07:13:64:80:1a:4c:16:67:43:60:bd:d5:da:
dd:49:ab:26:52:96:8f:7a:74:4b:cc:fb:0f:ff:b5:c4:4d:16:
b4:89:40:99:86:1b:c4:78:df:18:82:e4:6d:05:61:9b:87:ad:
65:de:2e:ed:db:9f:ff:ba:32:84:59:66:24:95:ef:d5:e7:c4:
69:2d:35:42:0c:bd:ad:f3:e9:31:a8:7a:41:31:ec:3c:5c:9f:
5d:9e:76:c4:d1:22:6f:41:2c:bf:81:10:25:f0:d4:cf:d3:a2:
3d:32:b6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:08:52 2024 by rpki-client on console-fra.rpki-client.org