Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ytU3i6FPoWu70p8hnstbhRmwZj0.roa
File: ytU3i6FPoWu70p8hnstbhRmwZj0.roa (raw, json)
Hash identifier: bLvQ2TwNZdsffUgpoey2NC3bTjNPvRl25wy0w+M9Y0g=
Subject key identifier: CA:D5:37:8B:A1:4F:A1:6B:BB:D2:9F:21:9E:CB:5B:85:19:B0:66:3D
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018CC348F0C2FCFA540D5C57EAABED8DE7F2
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ytU3i6FPoWu70p8hnstbhRmwZj0.roa
Signing time: Mon 01 Jan 2024 04:29:46 +0000
ROA not before: Mon 01 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5408
IP address blocks: 185.5.76.0/22 maxlen: 22
62.217.64.0/18 maxlen: 24
91.227.108.0/24 maxlen: 24
195.251.2.0/24 maxlen: 24
194.177.192.0/19 maxlen: 24
194.42.50.0/23 maxlen: 23
185.81.196.0/22 maxlen: 22
195.251.0.0/16 maxlen: 24
194.42.52.0/23 maxlen: 23
194.42.54.0/24 maxlen: 24
193.105.109.0/24 maxlen: 24
83.212.0.0/16 maxlen: 24
37.32.128.0/17 maxlen: 17
195.130.64.0/18 maxlen: 24
2001:648::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f0:c2:fc:fa:54:0d:5c:57:ea:ab:ed:8d:e7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cad5378ba14fa16bbbd29f219ecb5b8519b0663d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:24:88:e6:13:63:e5:1f:7e:0a:18:40:8c:
87:e7:ef:98:41:59:79:5c:66:92:f7:82:6e:03:37:
74:4b:d5:2e:26:b7:8c:f0:e5:b9:12:0a:1d:22:1e:
8b:3e:3f:b5:99:a6:a2:b1:5f:4c:e0:a8:75:a3:c8:
3b:3b:f2:b1:bc:90:05:94:8c:19:5e:36:c6:96:ed:
ac:bc:41:0c:89:83:8e:8a:55:26:85:f8:b0:c7:ff:
6e:e0:45:1b:52:7b:46:c1:5b:56:eb:f8:6d:e1:05:
f1:8a:98:91:24:04:a1:10:45:6b:dd:d7:55:cd:41:
bc:8d:b0:63:bc:95:96:47:f5:d7:33:a9:df:5f:8b:
d8:fb:72:76:4d:0f:e4:3e:cd:fd:ea:56:10:3d:33:
7e:15:e1:99:4f:55:82:08:94:c8:23:dc:f8:e9:c2:
98:b6:11:c1:4d:53:a3:ac:e0:98:0a:92:14:04:ec:
13:8e:16:58:cd:dc:10:50:cf:f3:b6:d8:df:0f:3d:
7e:a9:5c:e5:a9:fb:a6:6b:d8:36:22:62:44:d4:39:
65:79:f0:c3:21:34:2b:e4:3a:0b:9a:3a:7b:bb:64:
02:b6:97:7f:1b:32:a5:8d:59:5d:95:e5:04:c9:33:
24:c6:79:1b:69:c3:d8:8f:40:0c:f6:a7:4e:c1:00:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D5:37:8B:A1:4F:A1:6B:BB:D2:9F:21:9E:CB:5B:85:19:B0:66:3D
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ytU3i6FPoWu70p8hnstbhRmwZj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.128.0/17
62.217.64.0/18
83.212.0.0/16
91.227.108.0/24
185.5.76.0/22
185.81.196.0/22
193.105.109.0/24
194.42.50.0-194.42.54.255
194.177.192.0/19
195.130.64.0/18
195.251.0.0/16
IPv6:
2001:648::/29
Signature Algorithm: sha256WithRSAEncryption
1d:b3:ea:88:e8:ef:70:46:3c:7e:b1:26:0b:66:e7:de:f4:2d:
9d:ef:9e:30:e7:a9:94:f2:c9:f8:39:f5:d1:28:98:a0:37:30:
e8:ae:d5:93:d3:cd:13:5d:29:73:d3:8a:08:36:ec:d2:0a:c0:
d6:a4:cc:19:5b:eb:00:3b:5e:54:b5:f6:b5:e5:47:58:be:f6:
7c:e0:ce:3f:8b:c0:9c:6a:24:88:f7:d2:a1:bd:b0:9b:22:96:
5b:2d:54:25:d6:8b:36:ab:1e:ae:c3:ea:36:2e:17:13:19:0b:
ea:ed:8f:0e:8b:ec:b2:bc:62:d4:48:43:28:d7:cf:19:3c:81:
99:fe:f2:30:28:17:12:d6:68:63:6c:41:43:d4:79:8f:8b:79:
17:aa:e7:7c:2a:67:82:32:5d:73:21:2b:fc:0c:e8:37:69:c5:
d5:88:ca:1e:71:11:4c:4d:04:51:27:28:2c:af:82:37:e4:23:
38:92:a9:f9:ba:35:06:7e:1e:5b:e6:bf:2f:a9:d0:03:9b:74:
f3:14:1b:e3:26:3f:5c:13:d1:a4:73:9e:c8:02:59:74:b1:6d:
d7:99:c4:2b:50:40:d8:4b:4f:35:a3:25:7d:31:54:83:39:a3:
6c:77:37:28:41:50:73:99:d1:08:db:ac:3c:e6:08:44:63:a3:
26:7a:b7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 14:49:28 2024 by rpki-client on console-fra.rpki-client.org