Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/e9GshmbnpsPiaSD77v_YxzUq1gk.roa
File: e9GshmbnpsPiaSD77v_YxzUq1gk.roa (raw, json)
Hash identifier: GAty3Ve0sd5Ji13CCcPVVfen6UEnuhf1YmqLs0bavQM=
Subject key identifier: 7B:D1:AC:86:66:E7:A6:C3:E2:69:20:FB:EE:FF:D8:C7:35:2A:D6:09
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 018CC8DEF59198B18C09FC4F6678850C35A2
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/e9GshmbnpsPiaSD77v_YxzUq1gk.roa
Signing time: Tue 02 Jan 2024 06:31:44 +0000
ROA not before: Tue 02 Jan 2024 06:31:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24641
IP address blocks: 77.240.176.0/20 maxlen: 24
85.132.144.0/20 maxlen: 24
81.19.0.0/20 maxlen: 24
95.129.96.0/21 maxlen: 21
2a02:e98::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:f5:91:98:b1:8c:09:fc:4f:66:78:85:0c:35:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Jan 2 06:31:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bd1ac8666e7a6c3e26920fbeeffd8c7352ad609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:cf:09:a0:1a:34:ab:ae:ff:1c:90:ea:3b:
f0:3c:6d:65:7c:b4:e6:2a:98:ee:ff:80:f5:ab:f6:
9d:92:b9:ac:7b:8f:db:46:b1:fd:85:05:df:3c:9d:
8a:5c:27:5e:a2:0c:68:5b:3e:78:bf:59:f8:e2:c2:
a7:ed:b4:a2:81:c4:a3:84:0e:99:8b:24:22:44:92:
ce:0e:ac:a0:68:b7:22:50:cf:a7:3f:9c:0e:04:71:
b1:1b:d2:3f:bb:a6:57:aa:8a:5c:26:96:3b:e0:e0:
78:d7:7f:49:dc:ba:df:0c:6f:27:a5:28:e8:a3:71:
54:28:ee:af:03:f6:53:8c:db:39:f6:a0:83:8c:03:
e1:a9:cb:45:d7:45:75:ab:2f:ff:20:67:de:e8:ae:
02:a0:71:e0:78:2d:d3:69:48:86:9d:e0:10:ed:00:
0a:8a:aa:59:ce:87:43:74:d9:44:9c:09:64:7d:26:
70:0b:9f:10:20:01:1b:f2:7c:83:e4:d9:5e:e6:4d:
f1:40:96:02:05:62:2f:a2:a2:1d:54:62:68:14:40:
07:e4:87:32:7f:8f:e6:d9:15:e8:e8:ad:e6:ed:4f:
51:88:8b:d7:a7:ee:8f:27:e9:5e:7d:29:9b:7a:5e:
fa:b7:06:57:b4:b4:47:f5:4b:31:a3:13:f1:d5:46:
37:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D1:AC:86:66:E7:A6:C3:E2:69:20:FB:EE:FF:D8:C7:35:2A:D6:09
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/e9GshmbnpsPiaSD77v_YxzUq1gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.176.0/20
81.19.0.0/20
85.132.144.0/20
95.129.96.0/21
IPv6:
2a02:e98::/32
Signature Algorithm: sha256WithRSAEncryption
2c:f4:39:e1:d6:f5:d7:dd:e1:9f:db:03:18:eb:62:bf:c3:42:
39:f4:1c:aa:b0:43:e6:1c:0f:bf:70:69:70:8f:71:1d:6d:22:
06:ea:60:69:0b:62:09:c6:86:34:1f:6b:c2:39:fe:b1:22:35:
95:88:6a:04:2a:29:39:9e:50:65:5a:ff:ba:59:b6:9d:60:66:
2e:a8:0a:66:fa:b6:2e:20:ac:19:84:c8:f1:5c:fb:0a:3b:e0:
6c:b4:08:36:de:18:b5:7c:ed:77:75:12:61:bf:db:c7:8c:7d:
1a:e7:69:ae:fa:6e:bc:03:5b:ab:07:23:f4:72:46:e4:3e:d8:
c3:2d:22:52:4c:46:10:cb:26:f6:ef:aa:40:b9:2d:09:b7:f4:
48:b7:0d:9a:26:32:27:74:8d:36:93:15:8f:40:fa:0a:b3:4e:
8e:b4:17:a6:40:36:32:34:c7:87:d2:4c:fc:fa:6b:98:cc:97:
2d:02:e3:f8:17:82:93:fa:79:e7:e3:df:c5:71:cc:c3:c7:20:
92:f5:5a:af:62:a5:d4:2f:15:0f:33:e0:73:44:e3:cd:2d:13:
5b:17:b5:21:a1:e2:aa:ad:91:4d:37:f5:92:2c:15:88:94:eb:
fe:a7:3f:b5:63:a4:eb:60:34:fd:c5:12:7a:8b:fc:34:7d:7a:
50:ec:11:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 14:56:12 2024 by rpki-client on console-ams.rpki-client.org