Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/GZd5MOsxm8Xsh_IexnfMT7a5dHY.roa
File: GZd5MOsxm8Xsh_IexnfMT7a5dHY.roa (raw, json)
Hash identifier: QTe4aFST7xgvbz5PCRhUekVyasErhPC5SLy6+k6K5cA=
Subject key identifier: 19:97:79:30:EB:31:9B:C5:EC:87:F2:1E:C6:77:CC:4F:B6:B9:74:76
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EE603A223140AE1396BA02ED3F0B58692
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/GZd5MOsxm8Xsh_IexnfMT7a5dHY.roa
Signing time: Tue 16 Apr 2024 08:26:21 +0000
ROA not before: Tue 16 Apr 2024 08:26:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35154
IP address blocks: 31.192.160.0/19 maxlen: 19
87.224.128.0/17 maxlen: 17
90.157.0.0/17 maxlen: 17
92.54.64.0/18 maxlen: 18
94.31.128.0/17 maxlen: 17
188.73.128.0/18 maxlen: 18
213.142.32.0/19 maxlen: 19
2a00:8b00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:03:a2:23:14:0a:e1:39:6b:a0:2e:d3:f0:b5:86:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 16 08:26:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19977930eb319bc5ec87f21ec677cc4fb6b97476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:06:d4:48:6f:37:d2:ab:4b:2c:2b:e5:7a:
af:de:71:7e:17:99:5b:82:fb:ea:7c:80:d2:7d:f3:
d7:ec:c4:2a:9a:51:f9:af:3a:de:15:8a:8a:a7:2e:
41:4e:c2:21:cf:5c:7f:9d:72:e8:6b:fc:80:c3:5d:
a4:f7:33:3d:13:91:94:0f:ef:b9:04:25:7b:cc:ee:
74:28:67:4c:25:a1:3b:6f:53:b8:db:90:1b:b0:71:
3c:bf:0d:a9:59:ae:90:11:e7:77:6c:89:d1:08:37:
a3:33:c3:14:2a:e2:3e:c5:7d:cf:bd:90:8b:8c:0a:
e6:8e:b9:49:0c:48:54:c7:c2:cf:d9:1f:aa:bf:bb:
01:02:58:e4:1f:0f:ad:12:ff:50:6a:ba:10:1a:e7:
81:ed:3c:e5:ee:2d:d9:73:41:8a:8e:7f:9b:f3:10:
e4:bf:ff:54:97:9b:9e:1e:a0:16:a3:55:93:cf:1e:
81:d7:64:88:2e:87:be:26:83:1f:f9:4d:48:48:d9:
2c:bd:dd:cb:a4:33:de:a3:f2:36:54:8b:c4:a9:cc:
6a:0b:5c:0e:bf:57:aa:6a:ea:ec:17:e6:62:b6:a3:
a3:b4:5c:ea:9e:ce:9d:58:49:31:bb:cd:76:41:b5:
c8:01:5c:23:0b:57:42:d4:d3:3a:a8:0c:a7:0f:8b:
41:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:97:79:30:EB:31:9B:C5:EC:87:F2:1E:C6:77:CC:4F:B6:B9:74:76
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/GZd5MOsxm8Xsh_IexnfMT7a5dHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.160.0/19
87.224.128.0/17
90.157.0.0/17
92.54.64.0/18
94.31.128.0/17
188.73.128.0/18
213.142.32.0/19
IPv6:
2a00:8b00::/32
Signature Algorithm: sha256WithRSAEncryption
77:50:9d:9e:8f:60:08:28:84:f8:27:94:7b:fa:01:ef:d6:68:
97:c0:41:f0:83:d4:87:60:c3:a9:3d:ad:af:a2:48:f2:a2:8d:
bc:80:17:8a:89:70:c6:7c:f3:d5:aa:9a:9b:81:f6:81:11:d8:
5b:eb:1c:1a:9a:7c:76:01:44:65:1a:b8:4b:8a:74:c8:20:aa:
3f:99:f3:99:d4:46:82:64:8d:9f:6f:13:9c:5a:0b:68:ac:86:
22:22:d7:ff:22:39:da:fc:0d:6e:f2:13:89:9b:08:8f:a2:26:
9c:77:3e:e3:41:41:ad:3c:31:0e:d2:03:b3:ab:70:35:e4:d8:
a7:8e:03:c1:04:97:4d:68:72:39:0e:1a:fe:9f:37:c5:a0:be:
38:1e:fd:7c:a4:7b:fe:84:31:ed:23:d9:ff:74:dc:9f:52:1b:
fb:e2:10:14:27:cf:ec:1b:ca:9c:b9:78:54:99:02:b3:49:a7:
3b:68:e1:3c:0e:ba:0e:9a:23:a0:d9:a9:e9:40:c4:85:63:40:
91:99:43:6b:0d:8e:c1:5c:e8:65:d9:c1:ec:ea:49:64:8e:e4:
b7:de:f9:db:cc:38:a1:73:b7:d2:10:03:9f:af:01:fb:73:0b:
82:18:a9:df:a4:dd:4d:85:2e:9a:33:bd:e5:cc:38:c4:d7:94:
d5:fd:dc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:44:42 2024 by rpki-client on console-fra.rpki-client.org