Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zbOCUDnAp-PJ4pCexq7hjwAMEoU.roa
File: zbOCUDnAp-PJ4pCexq7hjwAMEoU.roa (raw, json)
Hash identifier: WiyeaocQH6QiS+4vj75vAnW11l4tRTueD5BoiH1VfR4=
Subject key identifier: CD:B3:82:50:39:C0:A7:E3:C9:E2:90:9E:C6:AE:E1:8F:00:0C:12:85
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0191935ABCDE08ECBE3497672EC32C5951A8
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zbOCUDnAp-PJ4pCexq7hjwAMEoU.roa
Signing time: Tue 27 Aug 2024 10:21:22 +0000
ROA not before: Tue 27 Aug 2024 10:21:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34892
IP address blocks: 5.158.232.0/21 maxlen: 21
5.158.232.0/24 maxlen: 24
5.158.233.0/24 maxlen: 24
5.158.234.0/23 maxlen: 23
5.158.236.0/23 maxlen: 23
5.158.238.0/23 maxlen: 23
85.234.0.0/19 maxlen: 19
85.234.0.0/22 maxlen: 22
85.234.4.0/22 maxlen: 22
85.234.8.0/22 maxlen: 22
85.234.12.0/22 maxlen: 22
85.234.16.0/22 maxlen: 22
85.234.20.0/24 maxlen: 24
85.234.21.0/24 maxlen: 24
85.234.24.0/22 maxlen: 22
85.234.28.0/22 maxlen: 22
185.24.44.0/23 maxlen: 23
185.24.44.0/24 maxlen: 24
185.24.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:93:5a:bc:de:08:ec:be:34:97:67:2e:c3:2c:59:51:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 27 10:21:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdb3825039c0a7e3c9e2909ec6aee18f000c1285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:f4:09:85:d4:74:37:6f:61:e1:66:e8:b2:
5f:1a:f4:9b:dc:7d:e0:d3:42:fc:a9:c5:0f:0d:dd:
00:5b:bd:b8:24:da:35:52:6b:b7:81:6c:f5:1a:3f:
4b:46:0b:2c:ee:63:66:9c:da:4a:f4:9a:73:9d:c0:
51:77:46:1d:c6:85:eb:bd:61:9e:8b:60:a6:38:8a:
0e:44:8b:f7:ac:7c:26:38:06:2e:7a:8b:aa:26:66:
77:e3:95:ce:3d:e6:02:27:1e:4d:63:51:5a:fa:07:
f5:c4:a4:7d:29:ea:5e:ef:21:bc:e3:56:28:5b:ff:
98:32:bc:8c:c3:b3:43:91:1a:d2:30:e3:35:c8:d8:
ea:f4:cb:11:5c:a1:6e:e8:2e:15:ce:e9:b3:83:50:
b9:9b:91:6f:37:f6:11:ed:b9:00:21:4d:51:0d:81:
26:97:9d:e4:ec:57:11:97:03:9a:4d:3c:77:09:fb:
84:e0:21:21:39:85:96:16:5d:f8:50:18:17:5b:07:
7a:7a:c6:98:1b:d8:31:a3:5c:93:92:9f:e8:7d:34:
19:25:76:ea:1e:12:4c:21:4d:63:3b:2e:b7:fe:1c:
f9:e1:0e:76:9c:d9:df:3b:83:90:9e:93:95:cf:96:
66:ec:15:b8:50:59:d6:50:12:30:09:26:5d:ff:4c:
ad:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B3:82:50:39:C0:A7:E3:C9:E2:90:9E:C6:AE:E1:8F:00:0C:12:85
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zbOCUDnAp-PJ4pCexq7hjwAMEoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.232.0/21
85.234.0.0/19
185.24.44.0/23
Signature Algorithm: sha256WithRSAEncryption
89:12:2c:9b:37:4e:e8:3f:74:52:5c:7e:d0:c0:bd:1a:c0:af:
79:83:e4:63:d8:e2:d5:6c:76:49:0f:4b:20:4f:0a:88:cc:fc:
2d:bd:d8:40:cd:75:71:a9:d1:20:01:f8:66:b9:ec:a8:b6:b1:
e8:2c:c9:02:50:7d:4c:07:cc:31:5e:4c:7a:ac:9a:f2:27:d2:
47:48:8a:55:13:19:95:92:6f:cf:15:7e:00:06:d8:e6:05:3d:
17:ba:e1:73:04:41:1a:be:ec:71:5d:16:5c:8a:93:3b:4b:2e:
4d:cd:9f:89:5a:5b:04:86:0a:ee:a3:48:be:70:80:9d:2e:53:
f7:f6:5f:19:46:79:db:52:00:b6:87:69:44:71:a2:64:d0:c5:
1d:23:ce:d2:41:65:c7:de:00:1f:86:48:2e:f5:e0:98:f0:1a:
bc:cc:9a:2c:4c:b5:76:9f:f0:71:02:0e:d5:39:50:5b:15:78:
8c:a6:17:42:bb:72:f3:0a:44:03:5d:e6:6d:28:ee:a4:59:40:
be:10:d0:a9:62:54:73:6e:2c:17:cc:96:59:92:dd:da:f2:42:
82:05:dd:cf:e7:65:60:51:30:5b:4f:32:2a:af:4f:10:1d:ea:
d4:18:ab:31:36:4e:ff:0f:d0:4e:ec:1f:bb:f0:51:97:8e:cd:
7e:66:2f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:27:57 2024 by rpki-client on console-ams.rpki-client.org