Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/AyjZyEuuUriy-LFDo0rGNIWkOQo.roa
File: AyjZyEuuUriy-LFDo0rGNIWkOQo.roa (raw, json)
Hash identifier: AgEcZnhSoTVyfuScIMgLbMLLav2Klhip4uRVap+ahw0=
Subject key identifier: 03:28:D9:C8:4B:AE:52:B8:B2:F8:B1:43:A3:4A:C6:34:85:A4:39:0A
Certificate issuer: /CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Certificate serial: 0192426A3307A27A506DD6DD87EEE06E5372
Authority key identifier: 1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/AyjZyEuuUriy-LFDo0rGNIWkOQo.roa
Signing time: Mon 30 Sep 2024 10:11:48 +0000
ROA not before: Mon 30 Sep 2024 10:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209551
IP address blocks: 5.154.160.0/21 maxlen: 32
185.74.216.0/22 maxlen: 32
185.146.204.0/22 maxlen: 32
185.192.28.0/22 maxlen: 32
195.181.252.0/23 maxlen: 32
2a11:8040::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:42:6a:33:07:a2:7a:50:6d:d6:dd:87:ee:e0:6e:53:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Validity
Not Before: Sep 30 10:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0328d9c84bae52b8b2f8b143a34ac63485a4390a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:14:6b:70:d6:1c:99:af:7f:6e:fd:68:c5:
7a:ed:83:64:d9:52:13:d3:ef:13:af:bb:a5:99:b9:
1b:2e:20:8a:a1:49:f2:b1:de:92:52:8b:f9:ea:df:
16:f4:3c:1d:6b:5a:36:b7:93:6b:cf:01:a9:9a:14:
4c:96:e9:7f:2c:bd:ae:5d:52:80:da:0f:e6:1f:c2:
3a:48:5e:2b:0f:98:1b:30:e0:7e:1b:11:5b:6d:ee:
72:b1:3a:74:84:0a:1e:af:4f:8a:09:1e:f5:3c:92:
61:30:49:06:26:ca:44:61:1f:b1:cf:0a:cf:69:a3:
95:40:ba:5c:28:d4:13:a9:82:13:79:2d:db:f4:b6:
ab:6c:f8:0c:0f:68:45:a6:bf:09:1f:65:b8:a5:46:
1e:ac:8c:4c:af:e8:d5:89:74:bf:5e:b4:57:2c:4a:
30:bd:00:41:84:08:d5:37:ed:b7:3e:83:46:41:53:
e7:3a:fb:4a:88:dd:00:58:7d:17:c3:61:bf:6a:a6:
f6:da:9f:17:d8:4d:ce:82:2f:be:e4:62:4f:0a:c3:
83:1c:b7:3b:41:4a:33:1f:57:33:b6:d9:c1:2f:a0:
65:fe:fd:ff:65:8c:14:e7:0e:20:90:8b:83:b0:7f:
9e:17:cf:e9:7a:03:bd:68:4b:ae:00:59:b0:e1:76:
71:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:28:D9:C8:4B:AE:52:B8:B2:F8:B1:43:A3:4A:C6:34:85:A4:39:0A
X509v3 Authority Key Identifier:
keyid:1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/AyjZyEuuUriy-LFDo0rGNIWkOQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.160.0/21
185.74.216.0/22
185.146.204.0/22
185.192.28.0/22
195.181.252.0/23
IPv6:
2a11:8040::/29
Signature Algorithm: sha256WithRSAEncryption
7a:a1:a0:d2:57:7b:45:79:13:bf:bc:b7:dc:53:8b:ae:47:58:
26:c4:1a:1c:9f:26:24:ec:39:b6:b2:c1:ce:07:24:d8:ea:04:
01:88:94:eb:af:cc:03:ed:73:7f:56:00:7c:8b:e0:9f:91:3c:
bc:da:16:57:90:7a:42:99:8d:d2:80:81:9a:f0:fb:97:6d:1e:
1d:05:9e:ef:fc:39:83:eb:78:e7:b1:0d:4d:eb:aa:f9:61:5b:
3a:2c:7f:7c:87:1e:e6:e6:b3:0c:f0:6b:c6:d5:cc:14:45:21:
04:72:a0:00:70:2f:3f:76:1c:a6:63:3f:0d:65:ec:b4:12:ac:
ba:96:b9:02:24:a3:ca:48:4e:d6:62:5c:9e:0d:d8:00:e6:4e:
c8:1f:f5:c5:89:9d:26:e5:f4:90:06:96:d4:26:3f:83:e3:53:
3e:78:c7:6e:ab:37:93:b7:87:05:81:2a:ad:a9:98:e2:dc:fd:
68:86:58:cb:f0:6f:7e:8b:03:eb:bb:3e:6a:e4:6e:f6:6a:e4:
36:00:bc:cc:d8:21:00:6a:64:e6:91:ef:fe:22:7e:7b:a8:6a:
65:cb:57:c9:ee:eb:ca:0c:4b:0d:ab:62:4a:a5:89:d9:1c:dc:
40:a7:70:4b:dc:05:99:fd:dd:4e:8e:71:1e:68:02:a3:8f:97:
ac:db:26:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 03:01:38 2024 by rpki-client on console-ams.rpki-client.org