Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/koOOxK5B10dXhvEg0BGtwQ0DSkM.roa
File: koOOxK5B10dXhvEg0BGtwQ0DSkM.roa (raw, json)
Hash identifier: YY/fh+SSFIRRJXopQNGcHA9Uk2dPlAHHNsQz5me4xSA=
Subject key identifier: 92:83:8E:C4:AE:41:D7:47:57:86:F1:20:D0:11:AD:C1:0D:03:4A:43
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 018D5BAB74C181174C1AE9668B0286B70F10
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/koOOxK5B10dXhvEg0BGtwQ0DSkM.roa
Signing time: Tue 30 Jan 2024 18:39:39 +0000
ROA not before: Tue 30 Jan 2024 18:39:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49223
IP address blocks: 5.44.250.0/24 maxlen: 24
45.15.42.0/24 maxlen: 24
62.106.82.0/24 maxlen: 24
91.224.141.0/24 maxlen: 24
91.242.246.0/24 maxlen: 24
109.107.143.0/24 maxlen: 24
109.205.59.0/24 maxlen: 24
146.19.159.0/24 maxlen: 24
176.126.108.0/24 maxlen: 24
178.23.191.0/24 maxlen: 24
185.99.23.0/24 maxlen: 24
185.145.233.0/24 maxlen: 24
185.197.151.0/24 maxlen: 24
185.218.186.0/24 maxlen: 24
185.249.54.0/24 maxlen: 24
185.252.209.0/24 maxlen: 24
193.56.147.0/24 maxlen: 24
193.163.6.0/24 maxlen: 24
193.228.127.0/24 maxlen: 24
194.56.149.0/24 maxlen: 24
194.126.176.0/24 maxlen: 24
195.69.149.0/24 maxlen: 24
195.234.29.0/24 maxlen: 24
212.6.63.0/24 maxlen: 24
212.18.97.0/24 maxlen: 24
213.109.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5b:ab:74:c1:81:17:4c:1a:e9:66:8b:02:86:b7:0f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Jan 30 18:39:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92838ec4ae41d7475786f120d011adc10d034a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:3c:04:81:40:c1:f9:ab:f5:d3:68:3a:88:
38:a0:f9:a5:51:4d:7b:aa:75:db:cf:08:5c:0a:1f:
b6:eb:33:4a:ba:60:79:48:57:e3:18:e0:91:41:0f:
f5:ea:6e:c0:57:0b:52:68:c3:f9:f5:bb:89:24:f4:
48:bd:bc:4c:1c:c0:91:98:7e:59:d1:a2:16:f1:10:
30:a7:1c:4f:81:be:49:43:47:7b:c0:e8:54:6d:8f:
0e:4b:e1:dd:24:04:fd:f7:b3:9d:29:11:99:b1:04:
05:b8:98:0e:84:1e:7c:e9:45:fe:61:47:24:85:c2:
c1:a9:a0:4b:ba:01:30:c2:33:32:f0:b4:55:ca:40:
00:bd:00:e8:05:b5:dc:10:b1:9f:69:a0:ba:fd:a8:
7e:9b:c8:c1:82:dd:8b:88:0e:47:5b:07:c5:16:c4:
b9:6d:db:58:65:10:9a:a9:43:e0:64:4d:5c:66:18:
af:c5:e1:b7:b9:2d:e9:5b:d5:10:ec:3b:05:b3:51:
00:6e:5c:5a:84:c2:82:c6:44:c6:1d:98:7b:df:64:
49:0b:db:f7:51:3b:da:1d:29:f3:09:b5:dc:87:cd:
83:ab:af:f0:92:4d:40:1a:e6:1c:00:b4:b8:a3:5e:
2f:99:f9:d5:cf:e0:50:f5:59:8a:2f:33:33:7f:96:
d3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:83:8E:C4:AE:41:D7:47:57:86:F1:20:D0:11:AD:C1:0D:03:4A:43
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/koOOxK5B10dXhvEg0BGtwQ0DSkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.250.0/24
45.15.42.0/24
62.106.82.0/24
91.224.141.0/24
91.242.246.0/24
109.107.143.0/24
109.205.59.0/24
146.19.159.0/24
176.126.108.0/24
178.23.191.0/24
185.99.23.0/24
185.145.233.0/24
185.197.151.0/24
185.218.186.0/24
185.249.54.0/24
185.252.209.0/24
193.56.147.0/24
193.163.6.0/24
193.228.127.0/24
194.56.149.0/24
194.126.176.0/24
195.69.149.0/24
195.234.29.0/24
212.6.63.0/24
212.18.97.0/24
213.109.195.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:33:f2:75:95:06:e5:86:e1:c5:f6:11:01:b8:a7:e2:da:4c:
98:d4:d8:28:a4:90:be:8b:61:00:1c:ab:f6:97:82:9a:07:e8:
1b:ac:59:ae:63:82:9c:43:cf:f4:eb:db:a5:4f:db:d5:2b:20:
0c:61:d4:12:fb:1b:01:7a:8f:f0:96:14:98:0b:3c:45:59:0b:
fd:41:a9:8d:20:03:1c:20:cd:be:d8:0b:23:f7:75:d0:15:a5:
b5:fa:7c:17:56:59:73:bb:43:b0:18:a5:8e:86:70:a4:bb:5f:
8e:7f:f1:d0:87:39:c6:d0:b8:2c:dd:d3:8c:de:28:8f:16:fa:
30:b7:c4:57:4f:d9:6d:a3:85:28:f0:66:8d:b3:e9:ab:a8:02:
45:fc:d8:58:d6:6b:c9:a6:c4:74:be:24:11:83:69:6f:50:c5:
a8:eb:da:f7:ca:e7:6a:bf:4f:f9:96:e8:2b:68:67:f9:a5:23:
60:0a:53:ed:88:ca:36:a9:80:69:f4:39:03:5b:d7:4f:c5:51:
6b:b9:90:53:43:06:a3:8c:ee:55:51:a7:c3:12:41:5d:d7:ab:
c6:e5:40:0f:4c:3e:e0:06:7a:f6:5e:e4:47:ca:4d:22:11:d2:
df:34:98:69:0f:1e:17:02:9f:31:11:6f:0e:0d:74:59:e4:f6:
7c:92:9a:66
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAY1bq3TBgRdMGulmiwKGtw8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1
OGM4MjAwHhcNMjQwMTMwMTgzOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjgzOGVjNGFlNDFkNzQ3NTc4NmYxMjBkMDExYWRjMTBkMDM0YTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZM8BIFAwfmr9dNoOog4oPmlUU17
qnXbzwhcCh+26zNKumB5SFfjGOCRQQ/16m7AVwtSaMP59buJJPRIvbxMHMCRmH5Z
0aIW8RAwpxxPgb5JQ0d7wOhUbY8OS+HdJAT997OdKRGZsQQFuJgOhB586UX+YUck
hcLBqaBLugEwwjMy8LRVykAAvQDoBbXcELGfaaC6/ah+m8jBgt2LiA5HWwfFFsS5
bdtYZRCaqUPgZE1cZhivxeG3uS3pW9UQ7DsFs1EAblxahMKCxkTGHZh732RJC9v3
UTvaHSnzCbXch82Dq6/wkk1AGuYcALS4o14vmfnVz+BQ9VmKLzMzf5bTWQIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFJKDjsSuQddHV4bxINARrcENA0pDMB8GA1UdIwQY
MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt
NThjZjg5ODg4ZTJhLzEva29PT3hLNUIxMGRYaHZFZzBCR3R3UTBEU2tNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgtNThjZjg5ODg4ZTJh
LzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwDBAAF
LPoDBAAtDyoDBAA+alIDBABb4I0DBABb8vYDBABta48DBABtzTsDBACSE58DBACw
fmwDBACyF78DBAC5YxcDBAC5kekDBAC5xZcDBAC52roDBAC5+TYDBAC5/NEDBADB
OJMDBADBowYDBADB5H8DBADCOJUDBADCfrADBADDRZUDBADD6h0DBADUBj8DBADU
EmEDBADVbcMwDQYJKoZIhvcNAQELBQADggEBAC0z8nWVBuWG4cX2EQG4p+LaTJjU
2CikkL6LYQAcq/aXgpoH6BusWa5jgpxDz/Tr26VP29UrIAxh1BL7GwF6j/CWFJgL
PEVZC/1BqY0gAxwgzb7YCyP3ddAVpbX6fBdWWXO7Q7AYpY6GcKS7X45/8dCHOcbQ
uCzd04zeKI8W+jC3xFdP2W2jhSjwZo2z6auoAkX82FjWa8mmxHS+JBGDaW9Qxajr
2vfK52q/T/mW6CtoZ/mlI2AKU+2IyjapgGn0OQNb10/FUWu5kFNDBqOM7lVRp8MS
QV3Xq8blQA9MPuAGevZe5EfKTSIR0t80mGkPHhcCnzERbw4NdFnk9nySmmY=
-----END CERTIFICATE-----
Generated at Sat Jun 1 09:54:03 2024 by rpki-client on console-ams.rpki-client.org