Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ghml5XydjzVm8v3RgOu6Q3yH6bc.roa
File: ghml5XydjzVm8v3RgOu6Q3yH6bc.roa (raw, json)
Hash identifier: B4lr9gT+eWg5DJtE7+7lHSeXS3H6HC6rSnCObLex4GA=
Subject key identifier: 82:19:A5:E5:7C:9D:8F:35:66:F2:FD:D1:80:EB:BA:43:7C:87:E9:B7
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018F0A8E4C4DCA0F54427A46B2253E822A90
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ghml5XydjzVm8v3RgOu6Q3yH6bc.roa
Signing time: Tue 23 Apr 2024 10:44:08 +0000
ROA not before: Tue 23 Apr 2024 10:44:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12958
IP address blocks: 46.237.40.0/22 maxlen: 22
109.161.56.0/24 maxlen: 24
217.15.137.0/24 maxlen: 24
217.15.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0a:8e:4c:4d:ca:0f:54:42:7a:46:b2:25:3e:82:2a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 23 10:44:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8219a5e57c9d8f3566f2fdd180ebba437c87e9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:da:11:5a:0a:5f:8a:b6:65:b8:54:37:3a:07:
48:f0:5f:18:97:60:73:32:4e:fb:ad:f9:fc:32:4f:
11:83:c4:eb:b0:51:24:fd:5e:96:b8:91:a1:92:7b:
d7:76:a4:5a:08:f0:90:59:d3:37:a4:ee:64:32:65:
9a:8c:d8:b4:aa:50:1a:8f:2e:68:88:3b:e2:6c:86:
dc:d5:32:f7:0b:a2:6c:4a:40:3e:c6:78:82:45:62:
84:18:1c:15:98:9d:1d:9c:1c:22:2c:2a:25:b3:a4:
bf:26:4b:4c:5a:f1:65:5e:18:c7:f1:09:da:f2:00:
4f:6b:43:e2:40:d1:e2:b0:c3:dd:e6:35:c7:97:ea:
02:73:80:ff:a4:30:21:a5:d5:26:29:a9:1c:7d:bf:
b8:f0:85:79:59:0a:66:71:bf:3e:f1:55:44:7c:f2:
be:9b:65:cf:ae:11:4e:db:6b:78:0d:79:ac:17:5e:
b8:59:8b:a6:aa:be:86:c2:fc:ce:2f:a5:ca:42:8d:
cf:c2:b4:df:e4:9f:09:3f:b9:1a:1a:39:90:d5:92:
6f:80:81:66:25:9a:f7:1d:66:0b:9e:a9:7c:4d:27:
6d:a7:a4:d5:25:24:b2:9a:66:38:1a:33:1d:7e:f5:
f0:53:5c:ec:a2:12:f3:8a:cb:1b:44:d8:eb:91:32:
3e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:19:A5:E5:7C:9D:8F:35:66:F2:FD:D1:80:EB:BA:43:7C:87:E9:B7
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ghml5XydjzVm8v3RgOu6Q3yH6bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.237.40.0/22
109.161.56.0/24
217.15.137.0/24
217.15.156.0/24
Signature Algorithm: sha256WithRSAEncryption
99:39:e1:0d:83:53:d6:61:13:03:74:89:dc:5a:13:b9:e3:7b:
a0:44:dd:35:1d:d8:50:70:f6:4a:e9:2d:77:17:d8:ef:05:12:
8c:65:fe:96:06:3d:a5:c6:83:cc:31:5c:80:93:d8:57:4a:e1:
aa:50:ff:14:7a:b7:64:85:f5:14:93:e3:ee:e1:cc:2b:b8:64:
5f:c9:cf:3d:4d:50:81:b3:22:03:51:ec:a2:4e:89:7d:2b:01:
0a:48:47:08:52:92:b2:ed:d3:9c:9c:ca:2d:a5:34:5e:47:13:
14:59:bf:b1:62:be:86:65:87:d9:6c:91:13:f8:21:75:3e:14:
0d:8a:38:16:bf:9a:d8:e4:05:82:f5:65:79:fe:31:33:c3:f3:
35:c0:47:de:cd:53:52:5e:98:8b:71:90:b1:37:a5:86:c4:bd:
20:cc:17:11:d8:5a:e6:f0:87:b5:7d:88:b3:40:a3:ff:3a:17:
be:a7:64:7a:e3:82:33:74:64:34:58:a7:2c:9c:c3:2e:32:0e:
6d:71:8e:ec:d9:7b:46:48:d5:26:8d:f5:dd:57:4e:c4:1c:18:
bb:44:5a:43:26:96:39:38:46:99:9a:5e:09:ff:87:a2:ad:6b:
ed:7c:4a:f3:ac:b5:c7:72:2f:c1:cb:f9:c1:13:87:b1:96:8e:
53:23:ff:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:52:17 2024 by rpki-client on console-ams.rpki-client.org