Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/bSZWY8m708MqGpo5JegizWTr0eA.roa
File: bSZWY8m708MqGpo5JegizWTr0eA.roa (raw, json)
Hash identifier: jFSh8hsCDE3CdJJk2yiiJWx+9fxFs4Nay9bXOCARI4c=
Subject key identifier: 6D:26:56:63:C9:BB:D3:C3:2A:1A:9A:39:25:E8:22:CD:64:EB:D1:E0
Certificate issuer: /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Certificate serial: 018D87819EBE2923ECB1A0C184179129B2D5
Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/bSZWY8m708MqGpo5JegizWTr0eA.roa
Signing time: Thu 08 Feb 2024 06:57:15 +0000
ROA not before: Thu 08 Feb 2024 06:57:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206262
IP address blocks: 5.206.232.0/21 maxlen: 21
5.206.232.0/24 maxlen: 24
5.206.233.0/24 maxlen: 24
5.206.234.0/24 maxlen: 24
5.206.235.0/24 maxlen: 24
5.206.236.0/24 maxlen: 24
5.206.237.0/24 maxlen: 24
5.206.238.0/24 maxlen: 24
5.206.239.0/24 maxlen: 24
37.26.64.0/21 maxlen: 21
37.26.64.0/24 maxlen: 24
37.26.65.0/24 maxlen: 24
37.26.66.0/24 maxlen: 24
37.26.67.0/24 maxlen: 24
37.26.68.0/24 maxlen: 24
37.26.69.0/24 maxlen: 24
37.26.70.0/24 maxlen: 24
37.26.71.0/24 maxlen: 24
87.238.208.0/21 maxlen: 21
87.238.208.0/24 maxlen: 24
87.238.209.0/24 maxlen: 24
87.238.210.0/24 maxlen: 24
87.238.211.0/24 maxlen: 24
87.238.212.0/24 maxlen: 24
87.238.213.0/24 maxlen: 24
87.238.214.0/24 maxlen: 24
87.238.215.0/24 maxlen: 24
95.86.40.0/22 maxlen: 22
95.86.40.0/24 maxlen: 24
95.86.41.0/24 maxlen: 24
95.86.42.0/24 maxlen: 24
95.86.43.0/24 maxlen: 24
95.86.56.0/22 maxlen: 24
95.86.56.0/24 maxlen: 24
95.86.57.0/24 maxlen: 24
95.86.58.0/24 maxlen: 24
95.86.59.0/24 maxlen: 24
147.78.160.0/22 maxlen: 22
147.78.160.0/24 maxlen: 24
147.78.161.0/24 maxlen: 24
147.78.162.0/24 maxlen: 24
147.78.163.0/24 maxlen: 24
185.171.60.0/22 maxlen: 22
185.171.60.0/24 maxlen: 24
185.171.61.0/24 maxlen: 24
185.171.62.0/24 maxlen: 24
185.171.63.0/24 maxlen: 24
185.174.208.0/22 maxlen: 22
185.174.208.0/24 maxlen: 24
185.174.209.0/24 maxlen: 24
185.174.210.0/24 maxlen: 24
185.174.211.0/24 maxlen: 24
185.179.28.0/22 maxlen: 22
185.179.28.0/24 maxlen: 24
185.179.29.0/24 maxlen: 24
185.179.30.0/24 maxlen: 24
185.179.31.0/24 maxlen: 24
185.186.80.0/22 maxlen: 22
185.186.80.0/24 maxlen: 24
185.186.81.0/24 maxlen: 24
185.186.82.0/24 maxlen: 24
185.186.83.0/24 maxlen: 24
185.191.164.0/22 maxlen: 22
185.191.164.0/24 maxlen: 24
185.191.165.0/24 maxlen: 24
185.191.166.0/24 maxlen: 24
185.191.167.0/24 maxlen: 24
2a0c:b340::/29 maxlen: 29
2a0c:b340::/32 maxlen: 32
2a0c:b340::/48 maxlen: 48
2a0c:b340:1::/48 maxlen: 48
2a0c:b341::/32 maxlen: 32
2a0c:b342::/32 maxlen: 32
2a0c:b343::/32 maxlen: 32
2a0c:b344::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 16:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:81:9e:be:29:23:ec:b1:a0:c1:84:17:91:29:b2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Validity
Not Before: Feb 8 06:57:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d265663c9bbd3c32a1a9a3925e822cd64ebd1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6a:d6:5a:78:ac:73:84:5a:e9:14:0d:d5:42:
a5:71:90:ea:d8:0d:d2:3e:5b:3e:3e:80:28:a8:e9:
67:ce:d7:e8:66:f6:ec:8a:38:84:94:e1:13:a7:c1:
22:4b:76:0f:cf:a8:e5:2d:48:7e:80:7f:db:bb:0e:
44:98:c6:51:53:d3:7c:f7:aa:90:91:7d:f4:49:33:
b9:52:12:62:72:5b:d5:e7:08:b1:93:4e:f5:f7:c2:
71:52:f6:44:1d:2c:f3:d7:ad:f8:3a:1d:e6:80:83:
94:1b:29:37:fc:34:ab:0a:14:f5:da:5d:96:22:bb:
d2:21:ac:b3:d9:88:9b:3e:c6:78:82:dc:da:a0:28:
34:65:6e:62:30:a5:b5:16:0d:0d:c2:e9:ee:8a:8b:
c4:c5:0a:2d:ba:76:ea:14:f7:52:ab:b6:10:0d:c0:
b5:8a:45:93:a8:69:e0:d0:0e:3a:52:c5:49:89:d4:
ef:12:38:a7:e7:11:44:63:c6:aa:42:ba:25:41:e1:
7f:3d:46:58:74:04:03:23:62:b7:f0:19:ba:a2:38:
ee:d6:e1:3e:a5:29:30:9b:c1:85:a5:01:f1:6e:8a:
1c:46:3d:9d:b1:92:00:3e:36:24:16:f6:48:48:20:
3e:e7:60:ce:cf:86:cd:ee:19:c8:ee:c4:94:b7:cf:
1a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:26:56:63:C9:BB:D3:C3:2A:1A:9A:39:25:E8:22:CD:64:EB:D1:E0
X509v3 Authority Key Identifier:
keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/bSZWY8m708MqGpo5JegizWTr0eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.206.232.0/21
37.26.64.0/21
87.238.208.0/21
95.86.40.0/22
95.86.56.0/22
147.78.160.0/22
185.171.60.0/22
185.174.208.0/22
185.179.28.0/22
185.186.80.0/22
185.191.164.0/22
IPv6:
2a0c:b340::/29
Signature Algorithm: sha256WithRSAEncryption
60:c4:38:43:64:ef:c2:ba:55:fe:e9:c1:44:af:7e:e9:d1:ef:
d3:69:51:0b:51:5f:a0:38:1d:dc:a4:1c:a5:a7:d3:85:fe:60:
79:b3:9e:40:c5:4e:f0:d7:bd:8f:f3:76:0b:a5:bd:cd:df:09:
58:33:06:35:8e:18:b9:42:45:74:89:95:33:44:16:a5:75:25:
ba:53:89:93:15:01:56:0a:0c:21:ef:4d:cd:9c:5d:bd:bd:ed:
e0:a6:4f:20:8f:a0:f2:e5:b9:ca:20:b6:b4:eb:b2:1d:6e:5a:
7a:59:e2:c2:6d:5e:01:18:1d:fc:38:2b:ea:3f:da:fc:48:cd:
f5:35:e3:e2:58:75:85:da:d0:2e:f7:52:96:ea:9f:e5:f1:0a:
23:e1:ae:44:8b:64:1e:47:fb:2c:d4:65:2b:b1:6a:80:17:b5:
f6:11:2d:13:6c:a3:a4:1b:2c:37:b7:19:78:03:5a:d8:6d:1e:
a7:3f:f4:ed:a0:ca:87:5b:37:3c:f6:1b:57:3a:fa:1f:71:3c:
ad:7e:4e:ea:f8:cb:0d:0b:ba:81:e6:1c:d1:bd:1f:34:35:0b:
de:68:7b:13:75:0f:24:f5:71:cc:fb:91:46:54:cf:57:c4:9b:
ef:87:55:42:6e:25:2e:98:8f:05:b1:78:2f:d9:bc:73:c3:94:
fd:3c:4b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 19:50:00 2024 by rpki-client on console-fra.rpki-client.org