Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/j_y5E2Rx5_YTKNCCN80Qky7Y0QM.roa
File: j_y5E2Rx5_YTKNCCN80Qky7Y0QM.roa (raw, json)
Hash identifier: tVVN0rHCtiNO9+/NiHHjpYluvsMB6U/S0lNREAEjC5c=
Subject key identifier: 8F:FC:B9:13:64:71:E7:F6:13:28:D0:82:37:CD:10:93:2E:D8:D1:03
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018EA8D026A65C52BAC86F09B33E44DB8CB3
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/j_y5E2Rx5_YTKNCCN80Qky7Y0QM.roa
Signing time: Thu 04 Apr 2024 11:13:17 +0000
ROA not before: Thu 04 Apr 2024 11:13:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18978
IP address blocks: 5.180.22.0/23 maxlen: 23
5.180.24.0/22 maxlen: 22
5.180.28.0/22 maxlen: 24
5.180.40.0/22 maxlen: 24
5.180.44.0/22 maxlen: 24
5.180.52.0/22 maxlen: 24
5.180.144.0/22 maxlen: 24
5.253.28.0/22 maxlen: 24
45.66.156.0/22 maxlen: 24
45.66.164.0/22 maxlen: 24
45.128.60.0/22 maxlen: 24
45.136.112.0/22 maxlen: 24
45.136.116.0/22 maxlen: 24
45.136.128.0/22 maxlen: 24
45.136.148.0/22 maxlen: 24
45.149.112.0/22 maxlen: 24
85.208.108.0/22 maxlen: 24
85.208.116.0/22 maxlen: 24
85.209.152.0/22 maxlen: 24
85.209.192.0/22 maxlen: 24
88.218.92.0/22 maxlen: 24
141.98.188.0/22 maxlen: 24
194.36.36.0/22 maxlen: 24
194.55.188.0/23 maxlen: 24
194.59.220.0/23 maxlen: 24
194.59.244.0/23 maxlen: 24
194.76.146.0/23 maxlen: 24
194.124.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:d0:26:a6:5c:52:ba:c8:6f:09:b3:3e:44:db:8c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 4 11:13:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ffcb9136471e7f61328d08237cd10932ed8d103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e0:c5:7d:14:bd:58:45:cf:e9:41:9a:9a:2c:
0a:48:56:f4:a0:c6:71:e5:c1:4b:d2:fc:3c:b2:85:
a8:6a:d4:3f:d0:c6:29:73:81:b0:14:51:bf:13:b0:
f4:b4:61:15:02:d3:b2:9f:fa:d2:f2:2f:67:b0:10:
e4:f7:1a:7e:4f:c3:17:30:03:25:19:a2:3e:90:10:
1b:f5:78:13:06:e6:be:9c:2f:f1:2d:a0:d2:a0:9e:
48:91:3b:87:f7:61:6d:43:7e:1f:5f:ca:00:ee:82:
cd:04:31:39:61:7f:09:39:47:91:c9:31:d6:ab:18:
7f:a6:3f:b2:dc:fa:3f:ca:68:e8:ca:07:58:4a:07:
c2:dd:07:1f:f4:99:be:98:b4:f0:b3:b4:6d:aa:53:
c6:19:a4:f0:8d:34:05:55:b6:7c:fc:da:b6:ed:cd:
36:07:11:e1:fa:86:16:a6:d9:30:79:e8:0f:95:cf:
5d:14:9b:c1:fc:59:d3:d3:03:1a:95:64:69:ce:52:
c2:89:0f:9a:af:3f:d1:47:6b:0d:d0:18:8c:f4:ea:
dd:b5:33:6b:10:29:49:69:23:e0:b7:0c:cd:5f:68:
14:77:90:31:e3:c0:6c:27:01:79:ff:c5:04:88:c0:
40:63:a6:be:01:36:33:93:79:dd:81:01:2b:b3:bd:
62:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FC:B9:13:64:71:E7:F6:13:28:D0:82:37:CD:10:93:2E:D8:D1:03
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/j_y5E2Rx5_YTKNCCN80Qky7Y0QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.22.0-5.180.31.255
5.180.40.0/21
5.180.52.0/22
5.180.144.0/22
5.253.28.0/22
45.66.156.0/22
45.66.164.0/22
45.128.60.0/22
45.136.112.0/21
45.136.128.0/22
45.136.148.0/22
45.149.112.0/22
85.208.108.0/22
85.208.116.0/22
85.209.152.0/22
85.209.192.0/22
88.218.92.0/22
141.98.188.0/22
194.36.36.0/22
194.55.188.0/23
194.59.220.0/23
194.59.244.0/23
194.76.146.0/23
194.124.244.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:e3:05:ed:f0:5e:3e:ad:f0:cc:aa:7d:64:e4:f4:69:76:e9:
08:f2:bf:e5:2d:af:eb:7b:b5:3c:82:d9:5b:06:20:ea:67:2a:
93:87:09:06:49:97:98:5d:59:64:02:b4:16:fb:51:ba:43:bb:
0d:4b:b5:08:09:e8:0e:2e:b9:43:0c:0c:42:b4:9a:ce:6a:c9:
12:70:ca:ad:a6:32:24:5a:3d:f0:c9:cc:0b:1b:1d:f6:7a:03:
2c:d7:6e:94:16:70:88:6c:4f:b9:0b:2f:49:5d:fc:85:b8:93:
02:47:9f:5a:aa:e9:bb:e6:2c:a7:c8:56:4d:e9:a7:e8:1f:d5:
b6:0c:05:bc:59:68:c1:f3:4d:7d:0a:14:d0:9e:98:a6:21:1d:
ec:d2:c1:b9:6d:b1:05:e9:f5:01:33:e9:d9:b4:b0:5b:8e:a4:
3a:4b:4a:41:96:2e:38:d6:55:9a:16:4b:dd:eb:d5:af:e1:65:
ab:1b:5c:44:df:89:95:56:69:96:7d:2a:1f:88:5c:d0:95:26:
b6:54:4c:c7:2f:8e:0c:94:ae:d5:00:64:f0:b2:d5:b2:36:2a:
3c:90:f4:33:d4:a8:1c:d4:c3:10:8f:0f:7b:96:43:53:d1:29:
d0:2a:7f:4e:2b:39:30:31:25:e8:15:4b:1c:a4:62:4b:c0:1b:
2c:5f:a3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:37:56 2024 by rpki-client on console-fra.rpki-client.org