Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/5OlYaVOhI0SCKEIUUiYsHhEFMMI.roa
File: 5OlYaVOhI0SCKEIUUiYsHhEFMMI.roa (raw, json)
Hash identifier: YShzu/eEd15uFYmrmymsRyvmltlahvnrP7KmaIMgxDI=
Subject key identifier: E4:E9:58:69:53:A1:23:44:82:28:42:14:52:26:2C:1E:11:05:30:C2
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 018CCA2A00972ED0AC8AB4BA7EE40A96907B
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/5OlYaVOhI0SCKEIUUiYsHhEFMMI.roa
Signing time: Tue 02 Jan 2024 12:33:19 +0000
ROA not before: Tue 02 Jan 2024 12:33:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36454
IP address blocks: 65.181.112.0/24 maxlen: 24
65.181.116.0/24 maxlen: 24
65.181.113.0/24 maxlen: 24
192.243.98.0/24 maxlen: 24
192.243.97.0/24 maxlen: 24
192.243.96.0/24 maxlen: 24
162.208.9.0/24 maxlen: 24
162.208.11.0/24 maxlen: 24
162.208.10.0/24 maxlen: 24
162.208.8.0/24 maxlen: 24
192.243.105.0/24 maxlen: 24
192.243.102.0/24 maxlen: 24
192.243.101.0/24 maxlen: 24
192.243.104.0/24 maxlen: 24
192.243.99.0/24 maxlen: 24
192.243.100.0/24 maxlen: 24
192.243.103.0/24 maxlen: 24
192.243.109.0/24 maxlen: 24
192.243.108.0/24 maxlen: 24
192.243.111.0/24 maxlen: 24
192.243.106.0/24 maxlen: 24
192.243.107.0/24 maxlen: 24
192.250.226.0/24 maxlen: 24
192.250.224.0/20 maxlen: 20
192.250.227.0/24 maxlen: 24
192.250.236.0/24 maxlen: 24
65.181.125.0/24 maxlen: 24
65.181.124.0/24 maxlen: 24
65.181.123.0/24 maxlen: 24
199.175.51.0/24 maxlen: 24
199.175.48.0/24 maxlen: 24
199.175.50.0/24 maxlen: 24
199.175.49.0/24 maxlen: 24
199.175.55.0/24 maxlen: 24
199.175.54.0/24 maxlen: 24
199.175.52.0/24 maxlen: 24
199.175.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:00:97:2e:d0:ac:8a:b4:ba:7e:e4:0a:96:90:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jan 2 12:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4e9586953a123448228421452262c1e110530c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a4:36:e4:9f:08:dd:1e:fe:a2:48:89:ad:03:
7a:75:2d:6f:99:69:e2:91:24:58:26:33:f9:ad:d6:
ec:9d:ae:fe:64:d9:96:2b:6a:05:63:61:68:03:b5:
57:34:0b:73:49:92:e1:7f:48:db:44:d1:62:e9:64:
52:5b:54:fa:7d:1e:fc:9c:2d:e8:2c:9d:e8:f3:8c:
86:16:8f:d6:7c:74:e8:89:d7:de:5a:07:62:8e:d2:
88:da:71:66:f2:e1:0f:e9:90:14:da:4e:ee:5f:b8:
72:27:00:35:4f:71:4f:a9:a8:a2:21:d5:9b:af:2e:
7a:d0:07:8a:42:68:06:84:8f:5c:d4:79:d4:95:9c:
24:20:39:e8:17:73:f4:8b:9c:2e:a9:81:a4:cb:6d:
47:ef:fb:bb:52:f0:4e:77:b5:22:52:16:df:40:f6:
32:f3:87:c3:33:a1:0b:ae:de:66:99:13:0b:da:f5:
39:9f:c5:5f:6f:d5:8a:10:9e:35:91:db:e6:4f:d8:
6a:8e:c9:12:1c:9b:0b:b2:83:f4:5c:86:5c:7b:e4:
9c:b7:2c:a5:42:75:c7:49:d1:3a:b2:3e:16:a8:69:
44:65:3c:b1:53:4e:91:09:27:65:c8:fc:31:bd:ce:
35:8d:e7:bf:d9:70:4c:d3:8f:42:ff:2c:23:d6:04:
17:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E9:58:69:53:A1:23:44:82:28:42:14:52:26:2C:1E:11:05:30:C2
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/5OlYaVOhI0SCKEIUUiYsHhEFMMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.181.112.0/23
65.181.116.0/24
65.181.123.0-65.181.125.255
162.208.8.0/22
192.243.96.0-192.243.109.255
192.243.111.0/24
192.250.224.0/20
199.175.48.0/21
Signature Algorithm: sha256WithRSAEncryption
22:84:d9:04:59:50:8f:bc:f2:03:01:d3:46:a6:ea:13:92:45:
7d:5c:ad:a9:31:9f:26:a9:d5:32:93:2b:03:5a:06:99:6a:29:
c8:b6:1e:c2:2d:15:8f:70:5a:bb:93:ae:11:4a:3e:41:c9:fb:
cb:87:85:45:c2:25:59:15:18:f7:3c:4e:b4:a6:15:4c:8c:ee:
be:91:b5:88:4f:8a:7e:51:3b:0a:78:c9:5a:44:3f:cb:53:e4:
10:82:c3:93:d5:9c:0e:98:25:3a:4e:10:60:20:a4:60:c9:81:
9d:98:71:11:b1:b7:1c:f7:ce:42:ef:9b:79:b3:96:bf:08:0b:
92:67:44:1e:64:b4:c1:2b:40:52:00:35:a9:11:75:97:25:cc:
6a:dc:ce:50:8a:98:0a:87:10:5f:e5:cb:6f:b1:ff:a4:d9:b1:
b4:52:ad:a0:91:ca:76:82:11:c9:b9:b4:26:0b:8d:42:82:6f:
aa:c9:e0:5a:52:3f:01:35:2f:67:18:2e:72:85:93:43:14:86:
06:96:b9:8c:aa:db:85:3f:80:74:b9:ba:b1:cd:5e:f9:82:76:
e6:37:ab:22:7d:c2:20:7a:31:f9:53:5c:b5:84:5c:61:0b:5a:
4c:06:a2:b6:35:e8:4f:93:f8:45:85:30:00:e9:1e:4e:c0:a3:
88:44:bc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:44:21 2024 by rpki-client on console-ams.rpki-client.org