Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/AyI-odnbmNEnX-yIKwId7LfOqlE.roa
File: AyI-odnbmNEnX-yIKwId7LfOqlE.roa (raw, json)
Hash identifier: 6Rn4BpVQN/cEakiESJXuzVKVQOifNYOrbxEwC/24km8=
Subject key identifier: 03:22:3E:A1:D9:DB:98:D1:27:5F:EC:88:2B:02:1D:EC:B7:CE:AA:51
Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial: 01934371789932756D2FBD11E93A0B7E7D94
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/AyI-odnbmNEnX-yIKwId7LfOqlE.roa
Signing time: Tue 19 Nov 2024 08:02:10 +0000
ROA not before: Tue 19 Nov 2024 08:02:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42705
IP address blocks: 5.11.16.0/22 maxlen: 22
5.11.16.0/23 maxlen: 23
5.11.16.0/24 maxlen: 24
5.11.17.0/24 maxlen: 24
5.11.18.0/23 maxlen: 23
5.11.18.0/24 maxlen: 24
5.11.21.0/24 maxlen: 24
5.11.22.0/24 maxlen: 24
5.11.24.0/21 maxlen: 21
5.11.24.0/22 maxlen: 22
5.11.24.0/23 maxlen: 23
5.11.24.0/24 maxlen: 24
5.11.25.0/24 maxlen: 24
5.11.26.0/23 maxlen: 23
5.11.26.0/24 maxlen: 24
5.11.27.0/24 maxlen: 24
80.251.10.0/24 maxlen: 24
80.251.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:43:71:78:99:32:75:6d:2f:bd:11:e9:3a:0b:7e:7d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
Validity
Not Before: Nov 19 08:02:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03223ea1d9db98d1275fec882b021decb7ceaa51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:c2:16:6c:81:d3:88:fe:37:c2:7f:73:ec:
7e:7b:7a:c3:53:7b:f8:5b:2e:aa:9f:25:ed:e4:b5:
b8:69:eb:bc:ef:01:5f:44:ed:54:3c:4f:b8:47:4b:
49:c1:84:98:79:e0:86:cf:01:e6:ef:50:99:52:ed:
76:7c:7e:38:ae:00:68:b9:d8:5d:82:00:1c:57:6e:
8c:bd:93:e9:9a:c3:92:c3:cd:de:80:0a:49:ef:be:
af:f9:82:ec:d8:69:00:92:2a:88:6f:49:31:a1:3f:
28:65:62:38:a9:aa:0b:8a:a4:93:65:95:8e:61:56:
e4:5b:05:80:43:d7:43:af:92:4b:ae:62:05:12:8a:
16:da:5a:f4:e4:cc:ba:07:a5:67:c2:47:93:7d:bf:
e8:f7:7e:35:ff:20:b4:b3:6c:95:40:50:cd:da:3b:
41:cf:84:34:b6:88:4f:cf:0d:c4:cc:48:3c:23:66:
39:4a:c3:fc:a0:1d:f5:89:19:84:13:48:2f:0b:ce:
a4:c9:78:87:9e:31:76:a5:9a:79:e4:bd:4e:91:71:
72:89:d1:ea:09:60:5a:49:4d:67:75:4e:cd:4b:ee:
44:a9:97:b7:85:a6:e9:bf:f4:7a:f8:20:e0:e1:a9:
ff:7f:10:b2:35:47:b2:c0:45:68:57:26:5f:b3:05:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:22:3E:A1:D9:DB:98:D1:27:5F:EC:88:2B:02:1D:EC:B7:CE:AA:51
X509v3 Authority Key Identifier:
keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/AyI-odnbmNEnX-yIKwId7LfOqlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.16.0/22
5.11.21.0-5.11.22.255
5.11.24.0/21
80.251.10.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:c4:af:d1:51:1d:8f:6e:cd:bd:c9:dc:48:04:35:f8:cc:20:
7b:58:7b:5b:0f:eb:95:d8:4d:74:5f:69:ce:7b:7f:78:c3:dd:
78:75:71:04:b1:2b:b1:52:c8:df:02:eb:f1:7f:2d:4e:55:5c:
7a:0d:7b:22:d0:a7:eb:e7:24:0c:f5:96:30:da:4c:c4:7f:78:
ea:18:81:8f:cc:90:6b:d4:10:ea:89:03:bc:30:72:92:45:61:
cc:c3:18:ce:f0:6d:ca:4a:26:f2:da:59:da:6d:b0:82:05:f5:
39:2e:96:3b:b4:96:cb:60:cb:9e:c2:e9:1f:3c:b4:e7:0c:82:
fa:29:bc:5c:7a:10:05:14:b3:6a:ff:ce:50:85:4f:e0:00:f7:
cd:07:47:cb:9b:b9:1c:56:e3:1e:8f:1a:a4:80:0f:55:3f:b2:
55:68:97:d7:02:10:b7:c9:37:f2:dc:63:83:ac:14:c7:3f:63:
5f:14:93:60:4f:69:4e:20:f7:16:9d:20:66:37:49:be:6d:28:
04:6c:61:2a:c1:51:ee:ce:c8:3d:87:ef:59:8d:c7:6b:95:f6:
b4:b8:72:62:0f:fc:a3:20:85:0f:85:fe:61:86:5e:4d:4b:60:
ba:4d:2d:3e:30:dc:fa:4c:2e:f1:f9:29:7e:98:04:82:d6:83:
1e:c5:5b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:23:37 2024 by rpki-client on console-ams.rpki-client.org