Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/FFo_kiOtg80eByptUnLK9AZNRhQ.roa
File: FFo_kiOtg80eByptUnLK9AZNRhQ.roa (raw, json)
Hash identifier: mpWrJWmknlI+fWiDQrXRAUZ56YAgrN1tZcIAjUKNMRk=
Subject key identifier: 14:5A:3F:92:23:AD:83:CD:1E:07:2A:6D:52:72:CA:F4:06:4D:46:14
Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial: 018CCA29A10FA2289CBDE977298974E0BBBE
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/FFo_kiOtg80eByptUnLK9AZNRhQ.roa
Signing time: Tue 02 Jan 2024 12:32:54 +0000
ROA not before: Tue 02 Jan 2024 12:32:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60423
IP address blocks: 5.145.119.0/24 maxlen: 24
185.24.253.0/24 maxlen: 24
185.24.252.0/24 maxlen: 24
185.24.255.0/24 maxlen: 24
5.145.117.0/24 maxlen: 24
5.145.118.0/24 maxlen: 24
5.145.113.0/24 maxlen: 24
5.145.114.0/24 maxlen: 24
2a04:2f00::/48 maxlen: 48
2a04:2f00:ff06::/48 maxlen: 48
2a04:2f00:1::/48 maxlen: 48
2a04:2f00:ff01::/48 maxlen: 48
2a04:2f00:ff08::/48 maxlen: 48
2a04:2f00:3::/48 maxlen: 48
2a04:2f00:ff03::/48 maxlen: 48
2a04:2f00:e::/48 maxlen: 48
2a04:2f00:ff09::/48 maxlen: 48
2a04:2f00:2::/48 maxlen: 48
2a04:2f00:ff02::/48 maxlen: 48
2a04:2f00:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 07:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:a1:0f:a2:28:9c:bd:e9:77:29:89:74:e0:bb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Validity
Not Before: Jan 2 12:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=145a3f9223ad83cd1e072a6d5272caf4064d4614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:a1:f0:bf:2c:27:6d:ba:30:02:a1:cf:11:
24:3c:38:e0:2b:b0:38:7f:1b:e9:e2:85:99:9a:7b:
63:0f:49:cc:75:9e:a1:83:56:9a:64:c7:65:5f:0f:
75:bc:e0:30:68:c8:03:2e:89:3d:4a:ff:bb:af:a3:
ad:7d:48:30:fe:9b:81:e4:21:76:6b:ad:55:3f:82:
2f:f0:df:44:f2:4b:00:24:4f:b6:50:79:ad:ae:87:
64:30:8e:e2:b6:6f:5f:aa:38:93:2f:e8:e6:4e:b8:
d6:32:fb:db:74:81:33:66:33:c4:77:c8:1c:c1:25:
f8:c7:2b:1a:b5:c5:5c:da:89:a7:fe:f5:8e:39:15:
fc:04:4a:e7:19:ba:91:c6:78:00:79:d1:68:fb:49:
28:0c:58:95:f3:45:89:e1:ff:46:1a:d9:f5:56:db:
70:14:13:d2:36:d4:e5:e1:d5:07:bb:4a:4e:bd:06:
64:34:be:d8:5c:ee:8d:06:8b:4d:e8:94:fe:16:f9:
33:06:ae:9a:0c:cf:ec:84:bc:bd:dc:93:6b:43:08:
22:45:cf:26:f0:cc:65:98:f3:ca:54:18:db:e5:a2:
60:ed:0e:21:5e:93:fc:a8:e2:62:77:37:a1:75:80:
8c:d2:34:dd:c8:4d:ad:10:d3:60:90:aa:cd:c3:71:
60:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5A:3F:92:23:AD:83:CD:1E:07:2A:6D:52:72:CA:F4:06:4D:46:14
X509v3 Authority Key Identifier:
keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/FFo_kiOtg80eByptUnLK9AZNRhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.113.0-5.145.114.255
5.145.117.0-5.145.119.255
185.24.252.0/23
185.24.255.0/24
IPv6:
2a04:2f00::/46
2a04:2f00:d::-2a04:2f00:e:ffff:ffff:ffff:ffff:ffff
2a04:2f00:ff01::-2a04:2f00:ff03:ffff:ffff:ffff:ffff:ffff
2a04:2f00:ff06::/48
2a04:2f00:ff08::/47
Signature Algorithm: sha256WithRSAEncryption
0a:30:5d:fd:b0:04:3a:4b:b7:9a:4f:99:9c:c9:fe:ad:56:37:
bd:82:46:6a:61:98:42:96:3a:fb:8f:9e:d8:7f:8a:5f:6e:b5:
db:68:77:f9:3f:31:10:93:57:6f:84:c8:17:f3:24:52:84:8a:
2b:15:97:75:d9:10:05:7c:72:de:2e:ac:14:ed:18:1f:3c:5d:
52:15:71:e0:bf:8a:36:72:67:a2:6f:b6:a7:78:37:5b:e8:94:
20:9c:63:df:99:f1:bd:eb:45:5f:85:d6:72:ec:98:5f:14:49:
d6:0f:00:89:7e:6b:9d:b7:c0:4a:6d:13:00:68:41:22:e8:7e:
7c:9d:04:0a:1e:94:1a:9e:bf:42:f7:a4:bd:ec:93:c4:ac:79:
1e:20:34:76:bc:a2:61:15:7f:94:4c:5d:91:b5:80:2c:54:b9:
c3:0a:07:de:44:5b:54:93:f3:16:33:1c:88:0f:b8:b3:b7:75:
c1:d2:29:bd:6d:59:e8:47:09:a8:40:76:e9:3b:a5:a4:44:6e:
8a:b7:95:80:de:2b:56:2d:d4:c5:2e:bd:ab:31:cb:56:12:95:
d4:d6:1d:0b:5c:3c:da:ca:12:90:1b:6e:1a:37:8f:27:76:8b:
68:bf:06:33:71:5d:9c:38:b8:35:ab:ed:87:14:bb:c9:d4:f3:
66:f1:cb:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 26 12:14:52 2024 by rpki-client on console-ams.rpki-client.org