Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5ZecBWk0Az8hZbQ1XAzPo4jN1uo.roa
File: 5ZecBWk0Az8hZbQ1XAzPo4jN1uo.roa (raw, json)
Hash identifier: oIqIpST8FSjapTyiPfTrXE5V6saA3ys0lTVj+YBNIj8=
Subject key identifier: E5:97:9C:05:69:34:03:3F:21:65:B4:35:5C:0C:CF:A3:88:CD:D6:EA
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01931388EFE28C99478B55A7E840723D0A42
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5ZecBWk0Az8hZbQ1XAzPo4jN1uo.roa
Signing time: Sun 10 Nov 2024 00:46:01 +0000
ROA not before: Sun 10 Nov 2024 00:46:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39018
IP address blocks: 185.119.253.0/24 maxlen: 32
185.177.81.0/24 maxlen: 32
185.182.50.0/24 maxlen: 32
185.193.38.0/24 maxlen: 32
185.236.82.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:13:88:ef:e2:8c:99:47:8b:55:a7:e8:40:72:3d:0a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Nov 10 00:46:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5979c056934033f2165b4355c0ccfa388cdd6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:c9:db:0f:09:02:13:3a:4a:83:59:bc:92:
a6:1c:bf:4d:49:2d:6f:6f:1f:d1:13:a2:fd:b4:8a:
48:46:ce:6d:58:28:a3:49:34:ff:33:a1:ff:5d:e7:
88:5c:0d:38:77:4d:f6:45:9f:c1:34:75:53:81:49:
6a:1c:8b:e7:01:40:75:b8:57:4d:04:68:c9:ac:54:
fc:a6:25:d5:76:63:8f:f8:9c:4f:90:a1:24:15:12:
d0:21:24:2a:37:56:69:cf:ff:b4:87:7d:ab:06:62:
c1:e1:29:e8:12:af:fc:4c:e4:a9:68:fb:a3:d3:8c:
6a:8c:35:bc:2a:8f:e4:c0:7c:ef:00:5f:ac:4a:b6:
27:cd:14:dc:99:15:f9:60:88:3e:da:40:8b:ea:bb:
c1:6a:96:8a:d9:b7:7c:a3:cf:40:ae:04:83:c6:5b:
d4:72:83:7c:fe:d0:4c:8f:61:8b:60:6e:14:09:32:
50:43:95:27:03:58:06:17:b7:d8:a8:34:0a:9b:a4:
63:e1:20:eb:8e:9c:bf:0d:16:07:10:cf:d3:23:54:
c6:88:c1:fb:bb:22:cd:b4:59:50:18:27:d1:fb:69:
3f:62:e6:5b:ed:38:72:2c:2b:0e:b6:dd:4d:39:63:
e5:e9:bc:75:75:0a:95:24:ed:ae:b0:9a:68:0f:b5:
34:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:97:9C:05:69:34:03:3F:21:65:B4:35:5C:0C:CF:A3:88:CD:D6:EA
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5ZecBWk0Az8hZbQ1XAzPo4jN1uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.253.0/24
185.177.81.0/24
185.182.50.0/24
185.193.38.0/24
185.236.82.0/24
Signature Algorithm: sha256WithRSAEncryption
78:06:cd:f9:c2:05:9f:03:c1:cd:27:68:02:ac:9c:d5:00:f6:
65:2c:37:53:55:a7:55:db:6c:1e:a4:18:4e:c7:26:ae:ca:29:
bf:12:b8:9e:50:a7:85:5b:5a:b8:29:ed:b9:68:df:b1:07:a6:
38:0a:c9:6a:ea:ac:02:9e:7e:ba:36:4a:9b:c2:cf:09:46:54:
72:d3:37:a4:b7:30:13:2a:e2:a6:fe:7a:30:79:ee:bf:2d:fc:
b9:9f:8f:46:bd:1a:04:34:c7:ce:bc:ba:bd:74:b3:ca:6e:ec:
e6:b0:2a:d4:a0:9a:ad:76:46:20:04:04:3e:ce:8f:f8:17:c0:
29:b4:45:4e:1a:6b:45:2a:54:39:6e:31:56:df:3d:45:dc:f3:
70:57:6b:6e:4d:03:5c:79:8c:e7:36:e1:6e:e1:af:54:d3:6e:
34:41:f6:15:fe:1b:de:d4:f3:ff:e8:39:0e:c1:0a:9e:6e:c7:
2d:0a:78:87:af:af:9a:19:19:df:f7:62:d4:3e:98:e1:cd:84:
d0:19:12:7c:bd:81:71:3e:ce:87:80:bc:d4:99:8f:44:e2:eb:
9b:5f:91:af:2d:72:da:89:38:31:8c:04:85:f0:b4:fd:ef:11:
73:20:24:31:bd:a8:a9:2c:9b:fe:fa:cd:ec:0a:82:3a:0c:97:
dd:31:61:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:43:13 2024 by rpki-client on console-ams.rpki-client.org