Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/F5eqTyfYuaVGMASJHG_Xu1HhrNY.roa
File: F5eqTyfYuaVGMASJHG_Xu1HhrNY.roa (raw, json)
Hash identifier: R1kylBzoKH8ZA3pvmGR4YHO3gbGJCd0jPjGfgUGhxhE=
Subject key identifier: 17:97:AA:4F:27:D8:B9:A5:46:30:04:89:1C:6F:D7:BB:51:E1:AC:D6
Certificate issuer: /CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Certificate serial: 018CC9BBF0669F2047A860EA5B9C05E61060
Authority key identifier: 4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/F5eqTyfYuaVGMASJHG_Xu1HhrNY.roa
Signing time: Tue 02 Jan 2024 10:33:06 +0000
ROA not before: Tue 02 Jan 2024 10:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62282
IP address blocks: 109.235.64.0/21 maxlen: 21
176.223.128.0/20 maxlen: 20
31.14.176.0/22 maxlen: 22
79.98.24.0/21 maxlen: 21
80.208.224.0/21 maxlen: 21
195.181.240.0/21 maxlen: 21
94.176.232.0/21 maxlen: 21
62.77.152.0/21 maxlen: 21
185.5.52.0/22 maxlen: 22
185.69.52.0/22 maxlen: 22
80.209.224.0/20 maxlen: 20
212.24.96.0/20 maxlen: 20
185.81.164.0/22 maxlen: 22
212.237.232.0/22 maxlen: 22
89.40.0.0/20 maxlen: 20
89.47.160.0/21 maxlen: 21
89.47.172.0/24 maxlen: 24
89.47.175.0/24 maxlen: 24
89.47.174.0/24 maxlen: 24
89.47.173.0/24 maxlen: 24
194.135.80.0/20 maxlen: 20
2a02:7b40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f0:66:9f:20:47:a8:60:ea:5b:9c:05:e6:10:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Validity
Not Before: Jan 2 10:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1797aa4f27d8b9a5463004891c6fd7bb51e1acd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:23:1d:19:38:61:26:54:54:59:93:65:04:df:
ce:d8:2c:59:e7:d0:a1:1f:66:a3:a4:f7:dc:68:74:
5e:04:b7:cf:87:3b:00:68:9d:14:fa:c9:dc:69:e5:
3a:7c:37:22:cd:18:3e:e0:63:db:9c:15:34:e6:f8:
04:c6:4f:ee:bf:cd:ba:ba:4f:94:21:64:31:92:79:
26:3b:71:84:7b:ca:d5:0a:b3:83:75:59:96:94:6e:
7e:f9:e4:da:f1:94:84:f7:38:91:c7:86:70:68:60:
0d:c8:8f:8a:e9:8f:8e:aa:6c:c9:68:6e:ff:ea:a9:
90:2e:a7:a7:51:47:4f:eb:98:8d:e5:29:c4:4b:fa:
d7:4c:76:47:36:d8:7f:13:6d:40:ef:1a:29:6a:11:
d0:77:8d:4b:99:6c:6d:e8:43:58:26:7f:16:24:1a:
da:90:99:8c:f3:7c:22:63:2c:ee:3a:35:e3:85:25:
97:c8:82:96:2d:1c:35:d6:84:a0:39:bd:a1:e8:5f:
75:4b:71:44:5b:96:6a:f9:d9:28:ae:b1:19:f6:49:
65:5d:ce:7b:4b:11:ec:9f:f8:e9:3e:b8:e2:a4:4f:
3a:2f:28:90:b8:04:23:2c:07:b6:2e:29:f4:20:18:
1d:ae:83:a7:85:af:34:54:38:1d:ee:d6:f6:2e:d0:
7b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:97:AA:4F:27:D8:B9:A5:46:30:04:89:1C:6F:D7:BB:51:E1:AC:D6
X509v3 Authority Key Identifier:
keyid:4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/F5eqTyfYuaVGMASJHG_Xu1HhrNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.176.0/22
62.77.152.0/21
79.98.24.0/21
80.208.224.0/21
80.209.224.0/20
89.40.0.0/20
89.47.160.0/21
89.47.172.0/22
94.176.232.0/21
109.235.64.0/21
176.223.128.0/20
185.5.52.0/22
185.69.52.0/22
185.81.164.0/22
194.135.80.0/20
195.181.240.0/21
212.24.96.0/20
212.237.232.0/22
IPv6:
2a02:7b40::/32
Signature Algorithm: sha256WithRSAEncryption
8d:ca:0d:9c:11:c9:44:81:8c:48:05:3b:90:0c:2c:51:17:4b:
7d:ac:41:8a:3b:be:1c:21:36:ec:81:ec:0f:e2:b1:e4:b8:7c:
64:45:38:73:b7:99:7c:15:ee:c2:a0:a1:9a:cd:29:39:76:e0:
37:c6:a4:87:57:83:76:de:be:35:23:d1:80:ed:61:ea:a8:16:
c4:d9:71:be:4a:e5:86:ee:3d:a5:89:43:2e:f7:a9:c4:20:9a:
94:31:59:10:2e:4c:a8:67:e4:82:c3:26:3a:2a:89:6f:e3:d8:
4d:4a:ac:5c:e2:84:55:58:df:90:b0:49:8d:ac:b7:69:9b:cc:
6d:d4:55:50:43:3e:38:98:74:0f:fa:64:ad:60:47:54:01:2a:
14:86:b1:bf:22:87:71:56:86:18:84:ce:ed:f5:3b:eb:89:e3:
91:91:e9:f0:be:77:46:07:eb:52:a3:d1:f1:c0:4f:03:8c:25:
5d:e2:92:70:c6:0a:97:11:09:cf:3d:6f:85:1d:e8:64:80:4e:
cd:6e:bc:e7:b4:7b:ca:64:bd:63:1b:a1:e2:b7:58:f3:49:3f:
9b:a1:bd:99:1c:a1:b2:4d:d5:2b:8b:5a:57:0f:47:50:f3:5b:
78:c8:3c:2b:cd:57:68:0a:42:76:91:1d:f1:55:61:27:be:7d:
95:6f:ab:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:20:10 2024 by rpki-client on console-ams.rpki-client.org