Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/VT5Wd_pqOJ9dH5ke9coXfMElArk.roa
File: VT5Wd_pqOJ9dH5ke9coXfMElArk.roa (raw, json)
Hash identifier: fLcCO/2FWRaPE55k8VUjCjI94f4/oSwtLUtlY9+MVT8=
Subject key identifier: 55:3E:56:77:FA:6A:38:9F:5D:1F:99:1E:F5:CA:17:7C:C1:25:02:B9
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01941FFA7DE52BABD46721184D70DC42EB19
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/VT5Wd_pqOJ9dH5ke9coXfMElArk.roa
Signing time: Wed 01 Jan 2025 03:48:17 +0000
ROA not before: Wed 01 Jan 2025 03:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6718
IP address blocks: 5.154.171.0/24 maxlen: 24
5.154.224.0/24 maxlen: 24
91.208.75.0/24 maxlen: 24
91.239.230.0/24 maxlen: 24
128.0.34.0/24 maxlen: 24
128.0.36.0/24 maxlen: 24
185.36.252.0/24 maxlen: 24
193.93.142.0/23 maxlen: 23
195.206.164.0/24 maxlen: 24
2a00:ece0::/32 maxlen: 32
2a04:6c80::/48 maxlen: 48
2a05:1c00::/32 maxlen: 32
2a05:1c01::/32 maxlen: 32
2a05:1c02::/32 maxlen: 32
2a05:1c03::/32 maxlen: 32
2a05:1c04::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7d:e5:2b:ab:d4:67:21:18:4d:70:dc:42:eb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=553e5677fa6a389f5d1f991ef5ca177cc12502b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:48:46:c5:13:5b:d3:2f:88:29:45:9d:b9:
40:e8:56:62:e7:42:2a:27:10:9b:60:2b:d5:c7:8f:
e5:73:c2:fc:9d:46:b4:75:6d:97:63:e2:c0:e7:bb:
22:ad:4b:32:63:f9:13:41:be:a6:5e:ca:9d:0a:eb:
67:4c:1c:ff:05:c2:8d:97:58:1a:b6:8b:6b:4e:c0:
af:fc:d7:f4:99:12:39:b5:6e:a0:af:bd:c3:d5:b1:
8c:69:bf:c8:24:4c:74:8c:c3:2a:b2:45:46:40:36:
e2:6f:99:b9:83:83:5d:bf:08:55:e0:c2:3c:e3:1a:
32:89:45:16:dd:eb:9d:b0:b8:18:dc:cc:dc:39:57:
01:74:ec:27:9e:13:6c:28:15:25:77:84:4a:d7:f1:
cc:c2:1d:72:3b:93:3c:fa:e4:fa:46:56:d9:40:88:
b8:e6:8c:ab:d8:12:db:6f:c0:23:3f:fd:d0:09:38:
0d:d2:8f:19:10:f3:eb:74:46:fe:eb:94:f8:f0:38:
8b:bf:24:df:65:12:1d:4d:95:12:be:b9:cd:c9:78:
c2:7c:94:cf:6e:21:09:03:6d:48:e6:53:75:d2:ce:
dd:03:fd:a8:f8:ed:61:e5:cd:5c:86:48:32:96:f9:
a0:ee:5d:79:c6:e7:34:15:30:a9:f4:85:ac:8a:d3:
43:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3E:56:77:FA:6A:38:9F:5D:1F:99:1E:F5:CA:17:7C:C1:25:02:B9
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/VT5Wd_pqOJ9dH5ke9coXfMElArk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.171.0/24
5.154.224.0/24
91.208.75.0/24
91.239.230.0/24
128.0.34.0/24
128.0.36.0/24
185.36.252.0/24
193.93.142.0/23
195.206.164.0/24
IPv6:
2a00:ece0::/32
2a04:6c80::/48
2a05:1c00::-2a05:1c04:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a2:dd:d3:4a:1b:8e:0f:5d:6d:f9:59:31:2c:c4:4f:14:2b:99:
50:6f:a1:d4:31:ce:42:9f:13:d0:85:9c:e7:fd:d5:2e:16:15:
69:1f:a0:e9:f3:82:95:c2:72:ab:ee:a9:69:22:bc:80:da:79:
82:fc:cd:9d:75:50:90:2c:5a:2b:39:9f:79:30:b4:4a:b3:65:
5c:80:df:3e:9f:cd:bb:ff:88:52:d3:91:3a:03:2d:f8:bf:0c:
d4:df:9b:81:3f:c2:eb:8d:ae:19:e3:3e:74:ef:8c:f7:9c:45:
41:06:b3:cd:fb:88:c9:67:eb:8a:a8:be:bd:79:73:92:31:ec:
bb:a7:3d:58:62:af:d9:5d:fd:8e:82:6a:68:65:f8:61:a5:85:
66:98:72:ff:5e:49:3f:5f:6a:0d:1f:e6:f1:77:38:01:ce:88:
63:d5:1f:cc:a5:fd:aa:38:12:10:74:dc:0a:5d:b1:d0:1b:13:
c7:42:79:16:4d:1f:7b:d3:dc:75:c2:19:cd:b9:f8:32:65:64:
bc:ad:0b:2a:85:c9:25:06:24:64:bf:12:78:42:95:81:24:18:
c8:24:0a:d4:77:4d:86:d8:27:e9:28:1b:af:9a:42:3c:d4:9e:
dc:04:26:6e:91:48:31:34:5a:58:94:81:d5:28:56:c8:9c:50:
25:2f:28:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:11 2025 by rpki-client