Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/sHU9KJykBo4nRUH_on4-1oYncZs.roa
File: sHU9KJykBo4nRUH_on4-1oYncZs.roa (raw, json)
Hash identifier: 5kV7Lp5n/dQcBs1kYULFj2FMNLZeK0CFkDKpKyfidnI=
Subject key identifier: B0:75:3D:28:9C:A4:06:8E:27:45:41:FF:A2:7E:3E:D6:86:27:71:9B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018EA8D5A540ACA9FD6127DA6EF39367F434
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/sHU9KJykBo4nRUH_on4-1oYncZs.roa
Signing time: Thu 04 Apr 2024 11:19:17 +0000
ROA not before: Thu 04 Apr 2024 11:19:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41111
IP address blocks: 5.180.20.0/24 maxlen: 24
5.180.21.0/24 maxlen: 24
5.180.22.0/23 maxlen: 24
5.180.40.0/24 maxlen: 24
5.180.42.0/24 maxlen: 24
5.180.43.0/24 maxlen: 24
5.180.46.0/24 maxlen: 24
5.180.47.0/24 maxlen: 24
5.180.52.0/24 maxlen: 24
5.180.54.0/24 maxlen: 24
5.180.145.0/24 maxlen: 24
5.180.147.0/24 maxlen: 24
5.253.28.0/24 maxlen: 24
5.253.29.0/24 maxlen: 24
5.253.30.0/24 maxlen: 24
5.253.31.0/24 maxlen: 24
5.253.42.0/24 maxlen: 24
45.66.160.0/22 maxlen: 24
45.66.164.0/22 maxlen: 24
45.86.66.0/24 maxlen: 24
45.128.60.0/24 maxlen: 24
45.136.116.0/24 maxlen: 24
45.136.117.0/24 maxlen: 24
45.136.124.0/22 maxlen: 24
45.136.128.0/23 maxlen: 24
45.136.149.0/24 maxlen: 24
45.149.112.0/24 maxlen: 24
85.208.119.0/24 maxlen: 24
85.209.155.0/24 maxlen: 24
85.209.156.0/22 maxlen: 24
85.209.194.0/24 maxlen: 24
88.218.92.0/24 maxlen: 24
88.218.94.0/24 maxlen: 24
88.218.95.0/24 maxlen: 24
141.98.188.0/22 maxlen: 24
194.36.36.0/22 maxlen: 24
194.55.136.0/23 maxlen: 24
194.55.188.0/24 maxlen: 24
194.55.189.0/24 maxlen: 24
194.59.221.0/24 maxlen: 24
194.59.244.0/24 maxlen: 24
194.59.245.0/24 maxlen: 24
194.76.146.0/24 maxlen: 24
194.76.147.0/24 maxlen: 24
194.76.154.0/23 maxlen: 24
194.124.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:d5:a5:40:ac:a9:fd:61:27:da:6e:f3:93:67:f4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 4 11:19:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0753d289ca4068e274541ffa27e3ed68627719b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:24:8c:cf:19:2f:83:45:52:69:f5:dd:33:72:
4a:91:33:8c:0a:76:26:21:40:78:38:a4:90:57:55:
f8:6c:e5:fc:db:6a:cc:e0:55:72:45:cc:c4:b7:fa:
3f:2b:fc:5d:0e:38:f9:34:7c:7b:ab:93:7f:1e:f8:
1b:8c:e5:70:10:e0:24:1b:e6:00:a5:23:cb:3c:fb:
68:50:4c:94:a4:e1:63:88:fe:85:ae:32:d5:15:ee:
4a:24:e0:ac:42:ca:64:31:01:3d:a0:5b:54:48:fc:
31:e5:10:76:54:a5:cb:d3:44:ce:b5:89:46:ec:80:
b3:44:3b:a4:76:f7:83:a8:89:6c:09:ec:81:a4:18:
cb:37:52:fa:f0:70:a8:cc:a7:3a:ea:cb:97:8f:8f:
8f:e9:11:a2:f0:ad:bd:67:20:fe:5a:7b:cd:b3:f5:
ee:f7:d4:9c:08:a4:4e:e9:4d:b7:55:e9:ca:00:f1:
06:fa:71:5c:47:71:ad:78:dd:1d:90:ba:56:f5:52:
d3:d9:b8:74:92:8a:ac:55:6c:cb:e0:7a:67:44:42:
4a:b5:a1:10:d7:43:f7:a3:11:7e:50:5c:82:b0:48:
31:37:36:d5:aa:1c:7e:02:c0:f2:ec:20:45:c1:cd:
bd:d4:7e:6e:61:42:a5:c5:7c:4a:0d:07:72:8d:ed:
88:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:75:3D:28:9C:A4:06:8E:27:45:41:FF:A2:7E:3E:D6:86:27:71:9B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/sHU9KJykBo4nRUH_on4-1oYncZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.20.0/22
5.180.40.0/24
5.180.42.0/23
5.180.46.0/23
5.180.52.0/24
5.180.54.0/24
5.180.145.0/24
5.180.147.0/24
5.253.28.0/22
5.253.42.0/24
45.66.160.0/21
45.86.66.0/24
45.128.60.0/24
45.136.116.0/23
45.136.124.0-45.136.129.255
45.136.149.0/24
45.149.112.0/24
85.208.119.0/24
85.209.155.0-85.209.159.255
85.209.194.0/24
88.218.92.0/24
88.218.94.0/23
141.98.188.0/22
194.36.36.0/22
194.55.136.0/23
194.55.188.0/23
194.59.221.0/24
194.59.244.0/23
194.76.146.0/23
194.76.154.0/23
194.124.250.0/23
Signature Algorithm: sha256WithRSAEncryption
31:f8:f0:45:4a:26:fd:0a:82:34:ba:40:a5:1b:1d:86:91:94:
c2:07:fa:a7:1f:78:19:3a:e0:ce:2a:2f:23:34:b9:a5:86:99:
f5:fa:9f:d1:3c:85:78:b2:3a:05:5d:6c:63:2e:4e:05:8f:9d:
0f:42:55:de:22:5c:6b:0b:c2:4c:ad:c1:59:4f:df:e0:95:31:
44:5c:6f:50:d4:42:f1:df:83:e3:71:c5:8d:20:fc:21:d3:89:
ad:34:6e:8c:c6:00:ab:9f:b7:4c:6c:37:a6:d8:6b:71:f8:6c:
37:0d:d5:cd:5c:39:d6:d1:64:0a:a2:cb:3a:20:f7:ad:3e:d5:
15:0a:4b:ae:19:4f:67:f9:e3:04:35:18:45:b5:d1:82:e2:32:
18:0a:bd:a0:50:5d:b3:fb:3a:fb:aa:06:9c:5b:0c:ab:9d:12:
df:04:44:6e:4c:7e:ad:c9:98:e9:13:84:ac:22:e3:23:4e:2f:
36:97:4b:c1:c4:19:4a:42:b0:ee:8b:74:4e:01:ec:9d:4d:c6:
8f:29:80:ed:50:a4:85:3a:01:ca:36:20:08:7f:be:67:d5:f2:
56:11:39:34:0f:4a:61:e5:41:e8:38:df:05:6d:36:38:56:b8:
e9:e8:e9:53:d2:0a:2d:f1:1e:da:58:d6:cc:ca:c4:36:33:06:
48:53:c1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:37:56 2024 by rpki-client on console-fra.rpki-client.org