Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/mkB4SicZVGVWHTxw9oi0-PVxn0E.roa
File: mkB4SicZVGVWHTxw9oi0-PVxn0E.roa (raw, json)
Hash identifier: 2wDNVFd31otqzR0DUqjmHU5P99370PEDq5aHd3jA9Wk=
Subject key identifier: 9A:40:78:4A:27:19:54:65:56:1D:3C:70:F6:88:B4:F8:F5:71:9F:41
Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Certificate serial: 019425FD4783198411B65185EBC9D7A396B7
Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/mkB4SicZVGVWHTxw9oi0-PVxn0E.roa
Signing time: Thu 02 Jan 2025 07:49:03 +0000
ROA not before: Thu 02 Jan 2025 07:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3188
IP address blocks: 5.2.80.0/24 maxlen: 24
5.2.81.0/24 maxlen: 24
5.2.82.0/24 maxlen: 24
5.2.83.0/24 maxlen: 24
5.2.84.0/24 maxlen: 24
5.2.85.0/24 maxlen: 24
5.2.86.0/24 maxlen: 24
5.2.87.0/24 maxlen: 24
185.8.32.0/24 maxlen: 24
185.8.33.0/24 maxlen: 24
185.8.34.0/24 maxlen: 24
185.8.35.0/24 maxlen: 24
185.8.128.0/24 maxlen: 24
185.8.129.0/24 maxlen: 24
185.8.130.0/24 maxlen: 24
185.8.131.0/24 maxlen: 24
185.67.121.0/24 maxlen: 24
185.150.128.0/24 maxlen: 24
185.150.131.0/24 maxlen: 24
193.31.118.0/24 maxlen: 24
2a02:d9c0::/29 maxlen: 29
2a04:b600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:47:83:19:84:11:b6:51:85:eb:c9:d7:a3:96:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Validity
Not Before: Jan 2 07:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a40784a27195465561d3c70f688b4f8f5719f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:73:21:44:8f:c9:98:8e:45:bd:ef:a9:57:d6:
3b:2b:34:43:0d:f0:5e:14:76:e7:8d:ef:29:c1:b8:
95:49:5d:96:d7:e0:bb:28:1f:a0:3e:e6:d7:66:a8:
1b:58:fd:f9:10:b6:d7:64:70:17:39:12:c9:0f:8d:
70:84:3d:12:de:e4:8e:1e:f9:51:e6:4d:58:36:fb:
03:65:9b:e3:9c:c8:95:d2:6d:70:81:f1:f6:f9:6f:
6f:d4:0e:06:22:87:f7:05:e3:be:50:a3:b2:5e:f4:
bf:1a:f8:fe:8d:69:f3:46:f2:b7:82:42:1a:b2:cf:
b6:e9:9c:d0:d2:d1:94:65:93:5e:35:8f:df:1d:22:
2d:78:c2:6b:d8:80:f1:9b:86:e1:29:de:70:57:af:
9d:93:60:eb:0f:e5:03:a4:06:df:9f:30:f0:48:ed:
07:b3:5c:2c:33:9c:c2:a6:c9:3b:02:56:bc:32:ac:
3d:9c:bb:72:f3:c4:34:5a:db:43:89:5c:56:35:d2:
a3:b7:a3:91:2d:d8:e3:b2:ee:38:f7:e0:33:f2:d6:
90:59:f1:4b:8c:53:52:5e:a7:77:a8:2c:3b:96:3b:
19:20:1d:02:8d:2c:5b:40:fe:3f:2d:a5:67:a8:61:
b9:14:dc:8f:84:02:50:45:80:fb:e5:f2:1b:cb:fa:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:40:78:4A:27:19:54:65:56:1D:3C:70:F6:88:B4:F8:F5:71:9F:41
X509v3 Authority Key Identifier:
keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/mkB4SicZVGVWHTxw9oi0-PVxn0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.80.0/21
185.8.32.0/22
185.8.128.0/22
185.67.121.0/24
185.150.128.0/24
185.150.131.0/24
193.31.118.0/24
IPv6:
2a02:d9c0::/29
2a04:b600::/29
Signature Algorithm: sha256WithRSAEncryption
2c:b5:97:67:ce:61:95:08:27:65:1c:df:bf:a3:35:b0:92:cc:
c4:54:9e:cd:14:3c:50:94:ac:b9:be:fa:f5:55:d8:90:66:9e:
f3:3a:da:bc:4a:98:0e:80:9a:51:a7:94:9e:8a:2b:fe:49:e1:
14:a6:12:20:6b:6d:af:cf:f5:0b:55:49:e0:34:33:69:62:98:
19:10:1d:cb:d9:c3:6e:5a:59:c5:5a:17:5a:96:cf:70:60:60:
fe:54:9b:a7:63:3b:53:38:9f:ed:fd:c0:16:0e:2a:4a:44:8b:
04:f6:81:71:e8:4a:1b:3d:7e:75:28:a7:b9:08:86:19:70:6d:
22:e1:b8:d7:48:14:a5:6a:01:24:03:ed:02:9b:89:57:3b:6e:
89:04:c8:fe:b9:f1:39:d2:e5:97:64:2a:38:f9:35:25:89:0d:
d4:34:2b:41:a9:c4:da:8a:8a:63:5c:fd:70:f4:67:02:77:35:
28:c5:fa:b5:b7:af:1d:9c:68:9b:41:73:b9:b3:8a:73:47:e0:
51:12:80:da:d1:aa:bd:7a:7d:06:37:94:db:0d:4c:f0:5d:6a:
22:b5:36:27:cd:cf:00:c5:ea:f8:e8:ac:c1:82:b1:21:60:54:
1a:88:d2:0d:bf:a4:ee:26:a8:5a:7b:71:04:50:8d:7f:8e:cb:
27:48:c1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:33 2025 by rpki-client