Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/5R2_zC5O_WNYOAGlu7by2_fhzYo.roa
File: 5R2_zC5O_WNYOAGlu7by2_fhzYo.roa (raw, json)
Hash identifier: Eq+hBI8YGdr0edeJFDWardc1U5Cf7U1rPC+h2snaoOY=
Subject key identifier: E5:1D:BF:CC:2E:4E:FD:63:58:38:01:A5:BB:B6:F2:DB:F7:E1:CD:8A
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 01942067EC667BAB849412669B823B97A812
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/5R2_zC5O_WNYOAGlu7by2_fhzYo.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208221
IP address blocks: 185.84.172.0/23 maxlen: 23
185.84.172.0/24 maxlen: 24
185.84.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ec:66:7b:ab:84:94:12:66:9b:82:3b:97:a8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e51dbfcc2e4efd63583801a5bbb6f2dbf7e1cd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fb:93:e6:e5:82:e5:88:ff:7e:cb:34:c5:53:
0e:00:e3:5c:a2:17:20:d8:11:ff:c1:f3:4f:86:e2:
91:ae:7a:62:e3:0f:ba:1b:4b:3c:ae:82:10:88:f6:
4a:75:cf:50:98:d6:b9:38:73:e9:5b:b8:46:ff:b2:
b0:2f:de:af:bf:41:1c:4f:39:66:7d:6b:72:18:cb:
10:5a:92:50:43:45:7c:c1:37:5b:7e:e7:1b:98:ad:
d2:8a:9b:5d:a3:f3:3a:6b:bc:f9:a1:70:ef:30:8a:
07:a8:65:5c:df:14:82:84:b2:90:cd:cd:06:06:22:
46:97:ac:8e:af:6d:b2:b2:76:64:33:c5:f9:4a:c2:
90:e8:7f:ad:1e:d0:5b:ed:5d:75:9e:91:a3:81:d6:
eb:47:40:6f:75:1c:e2:d5:06:6c:fe:0a:61:2c:71:
2c:5b:3a:00:7f:a3:d1:84:f1:fb:c3:a0:02:2b:c3:
a7:f1:20:0f:db:25:ef:7d:28:00:b0:fa:75:2b:05:
6e:b8:9e:06:2e:dd:f0:71:af:1f:7a:d6:7e:4a:88:
91:72:40:2f:33:95:c4:55:16:1e:5e:b3:59:e3:1b:
63:ab:ad:81:0f:94:12:d0:8a:35:5c:b9:91:2b:04:
df:bc:61:2f:25:de:5d:e2:f6:27:6a:d9:ae:62:39:
30:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1D:BF:CC:2E:4E:FD:63:58:38:01:A5:BB:B6:F2:DB:F7:E1:CD:8A
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/5R2_zC5O_WNYOAGlu7by2_fhzYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.172.0/23
Signature Algorithm: sha256WithRSAEncryption
74:f3:99:35:fa:a1:0c:ff:2e:de:f3:9b:8f:c4:61:4b:76:f7:
20:4e:fa:42:0c:89:22:81:8d:22:11:63:3e:fe:fa:59:6b:92:
07:ef:82:f8:15:da:89:cf:88:8d:96:56:53:03:f5:7a:79:5b:
da:09:79:80:6e:c9:a7:c0:3e:7c:dc:d3:37:dc:71:8c:d4:fd:
46:f2:86:d6:19:d6:3a:6c:12:a4:83:1c:24:57:26:53:d6:82:
3f:80:9d:af:f3:97:a7:b1:ef:03:8d:22:8e:03:8c:30:e9:75:
b9:6b:06:30:ed:ee:0c:68:19:cb:6f:16:fd:ef:9d:54:89:4c:
9a:13:ba:0f:cd:c3:c6:2e:9e:1c:ea:19:cb:8b:a5:3d:71:3d:
06:ab:6e:e3:58:d9:c3:72:09:fc:23:ee:be:93:14:a5:3f:71:
66:f1:9c:9c:58:fc:14:1a:20:58:13:98:77:22:7b:2d:fe:97:
c0:6b:b1:62:d9:42:6c:7a:ba:2b:c4:bc:5c:dd:fa:91:a4:64:
2e:5f:87:d3:47:2d:62:69:e9:08:8a:a1:a4:27:9b:d2:11:40:
35:15:44:71:e6:a9:f8:21:ac:14:aa:3b:81:b5:18:b0:17:80:
86:c5:60:03:3a:4a:5a:bc:fe:d5:2d:d9:0e:2b:25:f2:9f:66:
6f:34:6f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:14 2025 by rpki-client