Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/uTCQcGgVbhvhrcsIGCj0T6DrTM0.roa
File: uTCQcGgVbhvhrcsIGCj0T6DrTM0.roa (raw, json)
Hash identifier: gA7mso4PSkY9jTYOALAn+Ba+qRDy8k//v4+9qmakXyA=
Subject key identifier: B9:30:90:70:68:15:6E:1B:E1:AD:CB:08:18:28:F4:4F:A0:EB:4C:CD
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 018CC492316035978C841ACD11C999388F04
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/uTCQcGgVbhvhrcsIGCj0T6DrTM0.roa
Signing time: Mon 01 Jan 2024 10:29:24 +0000
ROA not before: Mon 01 Jan 2024 10:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208006
IP address blocks: 37.152.177.0/24 maxlen: 24
37.152.179.0/24 maxlen: 24
37.152.178.0/24 maxlen: 24
37.152.176.0/24 maxlen: 24
37.152.186.0/24 maxlen: 24
37.152.185.0/24 maxlen: 24
37.152.181.0/24 maxlen: 24
37.152.180.0/24 maxlen: 24
37.152.183.0/24 maxlen: 24
37.152.182.0/24 maxlen: 24
37.152.191.0/24 maxlen: 24
37.152.190.0/24 maxlen: 24
37.152.188.0/24 maxlen: 24
37.152.187.0/24 maxlen: 24
37.152.189.0/24 maxlen: 24
193.176.240.0/24 maxlen: 24
193.176.243.0/24 maxlen: 24
193.176.242.0/24 maxlen: 24
193.176.241.0/24 maxlen: 24
185.143.232.0/24 maxlen: 24
185.143.232.0/22 maxlen: 24
185.143.235.0/24 maxlen: 24
185.97.116.0/22 maxlen: 22
2a0c:a7c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:31:60:35:97:8c:84:1a:cd:11:c9:99:38:8f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Jan 1 10:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b930907068156e1be1adcb081828f44fa0eb4ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:5a:c5:c6:a9:68:cd:b0:80:2f:67:10:54:
ed:9d:88:6b:5e:39:41:ff:47:cb:7b:b6:45:2a:7c:
90:75:d2:61:87:ab:b5:d6:3d:fa:9c:d5:67:9a:0a:
ec:08:25:f9:15:8d:7e:04:fb:aa:59:a1:1c:da:67:
27:52:e8:a3:3b:6e:77:1c:94:c8:b7:b0:ec:76:90:
fe:ad:be:34:50:82:bc:ad:31:34:7d:24:ec:77:51:
99:85:0e:c0:dc:39:8e:2f:e7:6c:6d:c1:46:de:6b:
80:8f:92:93:03:eb:4a:24:27:fd:d9:67:87:9a:1a:
49:34:5d:48:19:01:80:51:4c:7c:5e:31:22:b0:c8:
7d:66:6c:90:9f:8b:cc:e4:0f:f3:69:72:c9:f7:05:
37:f7:5e:b3:c0:4c:4e:a7:b6:ff:0a:41:71:c5:59:
2d:7d:e7:73:0d:08:1b:83:bc:09:35:6f:2b:7b:98:
61:b3:21:00:0c:e3:d2:81:33:db:6b:c5:54:62:ba:
11:a3:6f:6c:e4:02:43:5d:c9:03:e7:4f:5f:fe:9d:
7a:bf:36:d6:23:5b:7c:c4:41:6f:db:61:33:74:e9:
3b:d6:b0:db:1c:88:58:15:a5:0a:79:f9:9b:97:ff:
f7:46:65:2a:8b:d3:74:dc:94:88:93:21:85:a0:ff:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:30:90:70:68:15:6E:1B:E1:AD:CB:08:18:28:F4:4F:A0:EB:4C:CD
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/uTCQcGgVbhvhrcsIGCj0T6DrTM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.176.0/21
37.152.185.0-37.152.191.255
185.97.116.0/22
185.143.232.0/22
193.176.240.0/22
IPv6:
2a0c:a7c0::/29
Signature Algorithm: sha256WithRSAEncryption
8d:f7:98:e3:dc:a5:32:c9:36:52:4d:23:3b:de:8e:f6:49:07:
fd:87:75:49:94:96:14:43:91:70:25:ec:e8:20:68:d6:c8:68:
de:3c:77:2a:2b:13:3d:5a:46:24:c6:da:c2:8f:8d:de:a7:bc:
21:58:69:e2:3d:0d:f1:6a:0a:b5:9a:de:aa:ff:96:0c:10:ef:
33:50:a2:58:7f:74:f3:b0:6c:01:91:f7:5f:d3:4f:f9:12:a0:
ab:fd:04:30:cc:ab:43:b4:2e:8c:2c:fb:5b:c0:70:44:8d:a2:
78:3f:7a:83:c3:c3:8b:06:e5:04:0d:2b:f9:91:5a:fc:7f:3f:
0d:61:e9:7d:1a:9b:d0:d9:44:01:52:fe:48:f8:9b:88:80:3b:
23:0d:d0:96:48:3f:90:52:24:cf:b0:46:aa:e4:8d:c1:69:96:
49:fc:aa:fb:8e:8d:ad:c3:76:29:9e:1c:ba:43:53:df:09:41:
45:f3:1b:db:99:21:61:1c:e5:6e:e2:d6:5b:cc:51:20:2b:f5:
88:3f:cd:3b:16:cd:e9:6f:31:b5:21:b9:f4:f1:7f:fd:ec:ed:
79:b9:57:db:d5:f3:e2:90:9f:e8:00:1a:68:b2:f7:d4:89:96:
b3:19:79:0d:1a:3a:8f:ed:56:2a:87:0d:32:a7:3d:cd:83:35:
29:22:8c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:47:39 2024 by rpki-client on console-fra.rpki-client.org