Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eJ7Zj8ciYYoTCQMB_QJ7yT7Isic.roa
File: eJ7Zj8ciYYoTCQMB_QJ7yT7Isic.roa (raw, json)
Hash identifier: nVUTvZCE4NU3FG28C3V8+XVC0TVbIF1b/xm/+0MwYEE=
Subject key identifier: 78:9E:D9:8F:C7:22:61:8A:13:09:03:01:FD:02:7B:C9:3E:C8:B2:27
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018F39F0DA21B23ADE454076B9127616089A
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eJ7Zj8ciYYoTCQMB_QJ7yT7Isic.roa
Signing time: Thu 02 May 2024 15:33:56 +0000
ROA not before: Thu 02 May 2024 15:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18978
IP address blocks: 5.180.25.0/24 maxlen: 24
5.180.26.0/24 maxlen: 24
5.180.28.0/24 maxlen: 24
5.180.41.0/24 maxlen: 24
5.180.44.0/24 maxlen: 24
5.180.53.0/24 maxlen: 24
5.180.144.0/24 maxlen: 24
5.180.146.0/24 maxlen: 24
45.66.156.0/22 maxlen: 24
45.128.61.0/24 maxlen: 24
45.128.62.0/23 maxlen: 23
45.136.112.0/23 maxlen: 23
45.136.118.0/23 maxlen: 23
45.136.130.0/23 maxlen: 23
45.136.148.0/24 maxlen: 24
45.136.150.0/23 maxlen: 23
85.208.111.0/24 maxlen: 24
85.208.116.0/23 maxlen: 24
85.208.118.0/24 maxlen: 24
85.209.152.0/24 maxlen: 24
85.209.192.0/23 maxlen: 23
194.59.220.0/24 maxlen: 24
194.124.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:39:f0:da:21:b2:3a:de:45:40:76:b9:12:76:16:08:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 2 15:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=789ed98fc722618a13090301fd027bc93ec8b227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:49:b9:52:76:9d:88:c0:49:38:89:f6:84:bd:
e0:f8:4a:0e:d6:38:e6:9d:d0:a2:5a:6a:f4:e3:2b:
98:22:25:c5:22:f5:86:c8:13:e0:3d:f1:cd:9f:25:
b7:05:4b:26:69:48:be:36:de:76:fb:10:40:8f:a1:
9e:6a:7f:05:be:51:73:6b:46:33:36:40:40:74:cc:
39:53:f7:3c:97:80:dc:4e:d3:3b:7c:3f:65:d1:8b:
69:55:22:b1:3e:00:db:60:82:38:c6:8d:c6:d5:38:
91:83:d1:f1:ac:21:ab:dd:72:f1:39:c8:96:65:26:
5d:66:a7:2f:87:18:b6:44:a0:4e:7f:d1:5e:f9:c3:
ed:5d:c8:d3:00:e7:ce:e5:64:15:29:69:33:ea:59:
30:b6:8d:3a:1f:4e:5c:e2:8e:b7:4a:29:f6:15:0e:
2f:7a:dc:60:46:d5:86:da:6c:29:56:42:99:c9:f5:
2f:19:92:17:30:22:1e:17:01:ff:76:18:d0:74:8a:
76:5c:ea:a3:cd:66:df:af:2a:dc:d4:7c:99:e9:6c:
6a:27:55:34:84:fa:fb:56:81:1c:2f:d6:4d:a4:57:
4b:a5:28:29:aa:04:dd:ab:bf:32:25:f8:eb:78:13:
3d:63:ed:e8:45:3b:a7:5e:6f:90:b5:43:85:d6:23:
7c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9E:D9:8F:C7:22:61:8A:13:09:03:01:FD:02:7B:C9:3E:C8:B2:27
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eJ7Zj8ciYYoTCQMB_QJ7yT7Isic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.25.0-5.180.26.255
5.180.28.0/24
5.180.41.0/24
5.180.44.0/24
5.180.53.0/24
5.180.144.0/24
5.180.146.0/24
45.66.156.0/22
45.128.61.0-45.128.63.255
45.136.112.0/23
45.136.118.0/23
45.136.130.0/23
45.136.148.0/24
45.136.150.0/23
85.208.111.0/24
85.208.116.0-85.208.118.255
85.209.152.0/24
85.209.192.0/23
194.59.220.0/24
194.124.244.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:39:15:c0:bb:cf:88:e2:25:f6:27:9d:ac:8b:b9:88:f3:f6:
76:f7:3a:68:b2:14:26:e7:54:92:06:e3:5f:d4:ee:e7:c0:12:
b9:b0:83:f8:4b:e7:32:e7:0e:f2:d5:0b:eb:35:e7:4f:14:19:
78:7a:a4:fa:d9:9c:47:74:3d:d8:a8:c3:0b:07:1d:63:06:87:
47:df:d4:38:ba:ff:11:4d:3b:6c:a2:fa:e0:63:be:eb:ef:ef:
8d:28:e1:af:56:c0:af:b3:f3:dc:05:08:94:1d:37:53:f1:71:
c6:67:b2:39:1e:6b:13:8a:94:b6:6e:7e:27:e3:78:2a:79:68:
51:65:b7:6f:b0:5e:4f:de:6d:a6:a9:46:3d:c4:ef:88:35:62:
37:95:bd:87:3d:47:77:c3:75:07:e0:23:6e:b2:96:e7:ad:9a:
ae:8b:d7:ad:a9:26:79:be:f1:39:82:40:81:99:7a:61:82:0f:
eb:c8:dc:ec:8d:53:15:a8:ed:3c:55:a9:46:da:a7:59:b8:46:
ae:d2:67:b5:69:eb:84:e0:79:cc:09:68:12:ba:74:5b:94:f5:
27:6c:b9:c7:7c:ed:b0:c7:c9:6b:81:04:80:0e:93:7a:50:e6:
8e:0f:3f:9e:9b:47:16:3b:f1:92:32:98:53:c7:2e:1a:74:e7:
14:94:21:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:20:15 2024 by rpki-client on console-ams.rpki-client.org