Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/TDJGIu5IJsBzwPORP3bWEKQt0xg.roa
File: TDJGIu5IJsBzwPORP3bWEKQt0xg.roa (raw, json)
Hash identifier: FFgbKX5mMXH/8E5HLXzK3kaVMNhBYqdgDvPbVm350G4=
Subject key identifier: 4C:32:46:22:EE:48:26:C0:73:C0:F3:91:3F:76:D6:10:A4:2D:D3:18
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 018CC5DCB63F0D41543DD97E7DADBB070F04
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/TDJGIu5IJsBzwPORP3bWEKQt0xg.roa
Signing time: Mon 01 Jan 2024 16:30:25 +0000
ROA not before: Mon 01 Jan 2024 16:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206487
IP address blocks: 89.140.16.0/23 maxlen: 24
5.40.106.0/24 maxlen: 24
62.82.158.0/24 maxlen: 24
5.40.136.0/24 maxlen: 24
5.40.138.0/24 maxlen: 24
5.40.149.0/24 maxlen: 24
5.40.156.0/24 maxlen: 24
5.40.80.0/23 maxlen: 24
5.40.85.0/24 maxlen: 24
62.174.66.0/24 maxlen: 24
62.175.252.0/24 maxlen: 24
62.175.253.0/24 maxlen: 24
95.39.61.0/24 maxlen: 24
5.40.18.0/24 maxlen: 24
62.82.50.0/24 maxlen: 24
5.40.244.0/24 maxlen: 24
5.40.253.0/24 maxlen: 24
5.40.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:b6:3f:0d:41:54:3d:d9:7e:7d:ad:bb:07:0f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 1 16:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c324622ee4826c073c0f3913f76d610a42dd318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f1:9e:40:96:8c:bb:b5:e6:93:c3:7d:69:3e:
6f:ab:3e:be:cd:f1:d8:42:a6:da:48:3b:4e:13:87:
ce:c6:33:56:cb:67:64:aa:13:9b:5e:45:bc:a0:aa:
d1:f6:58:ec:b4:11:0e:49:74:1a:5e:37:ed:83:66:
ea:71:57:8c:b9:fe:bc:39:24:52:09:1f:d6:21:6f:
fc:63:9c:ea:b5:24:16:6f:cd:fa:f2:93:08:97:f3:
27:18:53:04:15:ac:fa:82:ee:9f:95:1a:b3:c6:02:
1e:7d:c1:70:37:e6:47:73:c8:3d:63:96:4d:7a:43:
1d:03:3e:be:6c:39:a1:c0:66:7d:66:b8:78:10:91:
8a:e3:8b:46:4b:94:26:3a:f1:74:a0:f3:0f:fb:8d:
5b:15:0a:0a:31:a5:e8:81:d9:88:6b:f9:ba:b5:0b:
cb:d2:2f:6f:ba:42:f5:0a:19:af:66:9a:6c:0a:cb:
37:bb:29:10:00:dd:11:06:a8:a3:c6:4c:a0:9b:ed:
94:35:a7:44:58:67:57:f7:d2:40:cb:77:e1:59:c9:
9c:78:1d:59:46:eb:da:9e:7a:6e:94:1d:e5:5f:86:
2f:3e:2e:62:7d:1b:8f:e8:74:66:6e:ab:48:12:fb:
fa:02:a0:b9:6e:73:34:03:71:32:9c:c0:0b:ca:89:
fd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:32:46:22:EE:48:26:C0:73:C0:F3:91:3F:76:D6:10:A4:2D:D3:18
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/TDJGIu5IJsBzwPORP3bWEKQt0xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.40.18.0/24
5.40.41.0/24
5.40.80.0/23
5.40.85.0/24
5.40.106.0/24
5.40.136.0/24
5.40.138.0/24
5.40.149.0/24
5.40.156.0/24
5.40.244.0/24
5.40.253.0/24
62.82.50.0/24
62.82.158.0/24
62.174.66.0/24
62.175.252.0/23
89.140.16.0/23
95.39.61.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f3:91:79:19:91:64:ee:96:cb:2a:df:e4:08:e4:a6:14:26:
51:d3:55:62:3c:9d:a8:30:ba:8b:e1:8f:c3:23:db:83:e9:52:
4a:3a:a8:40:9d:5f:6e:34:7e:20:b4:89:a9:77:b2:c4:f5:ee:
1b:7d:d7:5e:5a:ca:d3:40:08:bb:a9:08:36:cd:f5:e2:16:2a:
6a:d4:02:1b:f6:b8:ed:5e:cc:13:14:a6:78:70:d2:6d:66:e0:
e3:17:24:54:46:d4:ce:f9:88:a6:92:e6:d7:4c:22:e1:f5:7e:
67:03:61:0e:c5:ed:2b:b1:68:8f:23:59:66:bb:b4:d5:63:98:
cc:e2:49:22:2f:2f:b0:8e:36:d8:4d:4a:ca:b3:22:3e:4c:2d:
e3:ee:e6:bb:04:16:82:d5:7b:15:61:ae:eb:d0:e1:97:3f:89:
ab:0c:08:bf:b2:24:b3:4e:65:3d:a9:58:b2:03:7d:75:e0:d9:
f0:0a:0d:c3:60:99:51:aa:33:9e:42:42:bb:19:10:aa:c3:f6:
b1:2a:9a:e8:0c:fd:91:ae:be:7d:4a:03:05:14:36:2d:e0:76:
ee:fa:44:fc:1a:02:77:06:80:27:6d:dd:fe:32:81:cb:08:42:
32:14:0f:51:56:4c:7f:d3:1b:17:ec:a4:73:57:c0:42:36:a9:
55:a6:fe:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 07:24:45 2024 by rpki-client on console-ams.rpki-client.org