Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/iRfyf2UHqkemzboHg8wnsZ7_Yb0.roa
File: iRfyf2UHqkemzboHg8wnsZ7_Yb0.roa (raw, json)
Hash identifier: gJXa9WfKuL/VFeXW7mEMIj+Ggu/e6iDrDsp/sU5NFqc=
Subject key identifier: 89:17:F2:7F:65:07:AA:47:A6:CD:BA:07:83:CC:27:B1:9E:FF:61:BD
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018E5FC319B2D751DC104ACFCEB1E5C375CE
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/iRfyf2UHqkemzboHg8wnsZ7_Yb0.roa
Signing time: Thu 21 Mar 2024 06:46:45 +0000
ROA not before: Thu 21 Mar 2024 06:46:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6863
IP address blocks: 37.157.16.0/21 maxlen: 21
46.226.96.0/21 maxlen: 21
82.149.192.0/19 maxlen: 19
86.111.0.0/19 maxlen: 19
94.143.32.0/21 maxlen: 21
195.90.128.0/18 maxlen: 18
195.90.160.0/19 maxlen: 19
195.90.182.96/27 maxlen: 27
195.96.160.0/19 maxlen: 19
212.5.160.0/19 maxlen: 19
213.145.40.0/24 maxlen: 24
217.14.240.0/21 maxlen: 21
217.171.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5f:c3:19:b2:d7:51:dc:10:4a:cf:ce:b1:e5:c3:75:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Mar 21 06:46:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8917f27f6507aa47a6cdba0783cc27b19eff61bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:d9:0a:fc:56:b6:3a:b1:16:72:a8:1c:cb:
aa:4a:2c:2f:69:42:35:6b:cf:b7:d9:9e:bf:64:6c:
9a:c0:f6:8d:51:72:20:d6:a8:61:da:1d:26:8b:66:
dd:4b:f2:13:ad:db:b3:d4:00:78:38:84:e3:34:ad:
c2:fb:01:60:fe:36:6f:7b:3f:c0:93:b8:65:c3:d2:
a8:ec:e8:c4:45:b4:5b:2c:c0:47:ce:24:27:2b:26:
47:5a:51:36:5c:75:01:08:1d:ee:96:7e:40:76:c4:
59:3d:ee:d3:37:19:7a:59:43:ca:bb:f2:83:d5:2f:
7b:5c:79:fa:17:ed:4d:bc:31:25:6b:f5:7c:d4:01:
52:d8:9a:15:1c:3b:28:62:02:ea:6c:70:cc:b9:16:
e5:98:c4:2a:4d:d0:2f:6a:d2:c5:b7:23:85:5f:c1:
0e:12:7e:53:c8:f1:cc:8c:67:24:37:6a:a0:93:75:
f9:69:80:a3:fb:1a:b8:12:10:6c:88:a6:88:31:1f:
64:49:e9:0c:40:7f:2c:91:3b:83:83:81:6f:69:6f:
44:11:75:64:7a:e2:e6:52:a8:af:8c:1e:2c:23:a0:
ce:48:7b:03:88:6b:8d:8b:19:2a:33:52:a1:35:88:
84:72:6c:d4:24:08:6f:3e:1e:c1:a6:85:2d:73:9e:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:17:F2:7F:65:07:AA:47:A6:CD:BA:07:83:CC:27:B1:9E:FF:61:BD
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/iRfyf2UHqkemzboHg8wnsZ7_Yb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.16.0/21
46.226.96.0/21
82.149.192.0/19
86.111.0.0/19
94.143.32.0/21
195.90.128.0/18
195.96.160.0/19
212.5.160.0/19
213.145.40.0/24
217.14.240.0/21
217.171.0.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:04:57:81:69:8b:38:af:43:28:dd:1e:19:1b:33:67:e2:46:
84:af:e3:6f:c7:55:56:4a:21:82:cb:3a:81:73:3b:31:5e:0a:
00:7f:f2:dc:ed:b7:38:79:5d:14:31:b6:d3:0e:7c:ed:83:36:
f4:e1:ee:7b:9f:15:3e:1a:31:e9:cb:30:b1:8c:f0:b6:15:73:
83:b7:a0:88:1e:bd:8b:42:ff:50:4e:de:9d:d0:03:33:0b:b9:
52:9c:40:7c:96:29:81:d1:93:44:6a:34:c7:11:94:80:4a:1e:
f5:cd:fb:23:13:ad:2f:29:2c:4d:cf:39:07:60:4e:f7:b9:64:
7a:49:34:36:d0:bf:5f:c7:7a:f5:cc:55:2a:25:65:dc:c8:23:
6d:ef:3b:14:62:5a:08:5c:2b:04:d0:95:fd:f1:84:b0:e0:ea:
38:c3:7b:e0:38:ea:2e:7a:eb:d8:89:c3:95:13:dd:e6:a1:3c:
3f:df:79:2f:35:ae:f9:ed:bb:a2:ba:ab:a5:62:11:21:0a:e8:
f0:e1:06:2a:bc:4e:8e:0c:3f:bc:11:70:5c:3b:42:7b:be:26:
cc:50:22:b9:4f:f0:b7:ae:3f:8f:4a:62:66:c3:19:aa:f9:ec:
e8:66:9c:c3:80:83:66:f4:ec:af:d4:1f:a5:e0:ec:8b:44:02:
37:8d:57:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:08:53 2024 by rpki-client on console-ams.rpki-client.org