Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Zvpde2DAKoYYxZB1CAelsOdhHtw.roa
File: Zvpde2DAKoYYxZB1CAelsOdhHtw.roa (raw, json)
Hash identifier: 24pthLy8ddqafIRlXD7Hil/Y/uUj/+/4bl1BQlCsCn8=
Subject key identifier: 66:FA:5D:7B:60:C0:2A:86:18:C5:90:75:08:07:A5:B0:E7:61:1E:DC
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019205E8646D2AF00E1BEC3DD5275B019A9F
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Zvpde2DAKoYYxZB1CAelsOdhHtw.roa
Signing time: Wed 18 Sep 2024 16:12:48 +0000
ROA not before: Wed 18 Sep 2024 16:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 5.180.32.0/22 maxlen: 24
5.180.50.0/24 maxlen: 24
5.180.51.0/24 maxlen: 24
5.180.80.0/24 maxlen: 24
5.253.39.0/24 maxlen: 24
45.8.188.0/22 maxlen: 24
45.8.192.0/22 maxlen: 24
45.8.199.0/24 maxlen: 24
45.8.203.0/24 maxlen: 24
45.8.255.0/24 maxlen: 24
45.9.0.0/24 maxlen: 24
45.9.1.0/24 maxlen: 24
85.208.107.0/24 maxlen: 24
85.208.113.0/24 maxlen: 24
85.208.115.0/24 maxlen: 24
85.209.160.0/24 maxlen: 24
193.168.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:05:e8:64:6d:2a:f0:0e:1b:ec:3d:d5:27:5b:01:9a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 18 16:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66fa5d7b60c02a8618c590750807a5b0e7611edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4d:d5:a8:51:e0:46:81:d7:70:02:ac:52:db:
33:2e:65:fa:be:5b:e3:95:f5:d2:be:e0:82:00:7b:
9c:d9:35:f2:08:f6:e8:fb:79:b3:57:f1:a1:80:67:
22:6b:66:f7:17:f7:b8:41:55:0a:f4:4c:56:25:2e:
c2:0e:e1:d9:2f:2e:8e:68:e1:0f:be:d2:dd:91:11:
0b:91:ba:fd:29:1f:58:01:b6:01:32:29:ac:6f:af:
f0:3b:a8:5d:7b:e4:e0:c6:3d:33:37:11:e5:87:f3:
25:05:7b:6f:07:b6:da:f0:56:72:42:2d:b8:d1:ff:
b2:5b:89:e8:5d:c3:da:81:d1:88:1f:b6:11:77:7b:
7a:23:85:09:ae:46:9e:8f:df:85:e9:ff:f2:9c:80:
12:d7:3b:16:17:fe:24:d7:fe:dc:b5:1b:a1:0f:2a:
e6:e1:21:22:42:c7:9b:18:2b:8b:2b:38:11:da:92:
7b:64:2a:13:ed:f1:be:7d:e6:c7:7b:28:9e:5f:1e:
4d:9f:1d:e3:ce:c8:2e:ea:3d:29:71:5b:96:e5:b6:
57:fe:5d:07:2b:4f:b2:31:a3:36:65:76:e8:ce:3b:
a2:25:6c:3a:19:fa:25:ee:4a:c8:a7:ab:76:8c:fe:
05:4d:71:55:3d:69:a5:83:b0:a8:34:d7:06:3f:50:
e6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FA:5D:7B:60:C0:2A:86:18:C5:90:75:08:07:A5:B0:E7:61:1E:DC
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Zvpde2DAKoYYxZB1CAelsOdhHtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.32.0/22
5.180.50.0/23
5.180.80.0/24
5.253.39.0/24
45.8.188.0-45.8.195.255
45.8.199.0/24
45.8.203.0/24
45.8.255.0-45.9.1.255
85.208.107.0/24
85.208.113.0/24
85.208.115.0/24
85.209.160.0/24
193.168.208.0/22
Signature Algorithm: sha256WithRSAEncryption
69:76:6c:c6:03:ec:f8:86:c7:27:24:56:d5:82:bf:ed:17:db:
b3:5d:fe:50:3d:20:cb:9f:34:61:2f:88:99:bb:38:2c:b5:bd:
a5:ef:2a:07:ff:97:4a:37:1a:a4:9b:e6:ca:a9:27:1a:fd:5f:
05:4a:b1:9e:c4:70:73:be:ec:97:82:18:03:eb:5a:86:3f:84:
c5:ff:4b:0b:21:e4:11:1b:5f:2a:1e:37:30:aa:52:d4:b1:0d:
c8:d6:10:7b:a6:1c:22:3d:d6:a6:70:c5:13:55:90:33:68:37:
54:f2:e1:d8:5c:44:c3:37:b3:d2:90:e3:7d:8d:b7:4b:1e:a5:
85:25:f9:3c:34:db:14:15:62:23:a2:88:f1:66:e9:48:a0:d0:
7c:21:b7:83:ef:fd:ce:0b:35:fa:51:95:54:66:d8:4c:24:64:
3c:1d:be:78:ee:cc:4d:3f:7c:1b:40:30:48:05:6b:5a:26:04:
da:83:24:52:ff:76:70:a1:d1:28:a6:91:fe:25:8f:0b:83:35:
25:ae:1c:9c:e1:b0:aa:8c:49:87:a5:7f:14:92:05:5e:cb:73:
fb:9a:dc:96:c3:f6:70:b9:a9:9f:fc:ad:bc:d2:a9:46:2b:52:
ab:94:1c:d9:ba:66:48:a7:7b:b6:c2:94:36:c3:b7:ff:f4:f1:
57:7b:69:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:06:05 2024 by rpki-client on console-ams.rpki-client.org