Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Ezs0X7HwdQys5qBizQXhYPJDnw4.roa
File: Ezs0X7HwdQys5qBizQXhYPJDnw4.roa (raw, json)
Hash identifier: kBAjRE7syodCVPmgbXfCqN8jP/KPNlEGOl2xVNv4K2w=
Subject key identifier: 13:3B:34:5F:B1:F0:75:0C:AC:E6:A0:62:CD:05:E1:60:F2:43:9F:0E
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649E2BFC53FB80D17198F662E7D4E61
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Ezs0X7HwdQys5qBizQXhYPJDnw4.roa
Signing time: Mon 01 Jan 2024 18:29:40 +0000
ROA not before: Mon 01 Jan 2024 18:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60966
IP address blocks: 95.111.92.0/24 maxlen: 24
78.83.156.0/23 maxlen: 23
78.90.198.0/23 maxlen: 23
78.83.158.0/24 maxlen: 24
78.90.200.0/24 maxlen: 24
95.111.39.0/24 maxlen: 24
95.111.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:e2:bf:c5:3f:b8:0d:17:19:8f:66:2e:7d:4e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=133b345fb1f0750cace6a062cd05e160f2439f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:b8:2f:bc:39:e5:85:1d:37:0d:30:69:06:
db:62:da:f3:e5:bd:0b:77:5b:b2:1c:48:f3:46:19:
ab:56:35:ec:08:db:4b:6d:75:4e:be:1d:31:b2:19:
82:a6:65:e7:36:1b:a8:d2:4c:ac:4c:6c:33:6e:38:
53:d1:e0:2e:3b:07:ca:49:57:ee:c2:b6:c3:18:1d:
8b:ca:71:41:81:e8:54:da:48:fa:7f:c2:7c:b5:1f:
37:fe:c2:0f:7f:ad:97:03:fe:ad:ae:49:a9:ed:be:
c6:79:35:3d:4e:fd:56:5d:56:92:27:a1:e5:80:fc:
0c:76:9b:b3:87:31:27:74:db:cb:f5:ff:19:a1:72:
4b:bf:39:09:cf:0d:b3:6e:42:45:1f:b3:cb:3e:3a:
ab:f7:6b:9d:ed:32:33:06:07:d0:81:ca:49:e2:b9:
21:4a:be:81:5c:b5:8a:ff:64:7a:3a:b8:67:df:58:
a1:51:83:84:e5:c1:18:13:91:94:c2:45:4b:09:cb:
97:db:95:34:65:03:43:a3:7d:30:d3:5d:74:3e:ea:
97:fe:00:eb:3f:45:36:33:bb:49:1e:31:a6:9f:58:
e9:58:05:32:03:a1:10:44:c9:69:51:49:8f:3c:fa:
aa:7c:5a:5e:86:71:33:a8:e5:8f:a7:1b:4f:41:ab:
fd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3B:34:5F:B1:F0:75:0C:AC:E6:A0:62:CD:05:E1:60:F2:43:9F:0E
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Ezs0X7HwdQys5qBizQXhYPJDnw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.156.0-78.83.158.255
78.90.198.0-78.90.200.255
95.111.39.0-95.111.40.255
95.111.92.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:18:05:05:f1:43:59:5f:e7:9c:6c:84:18:08:31:58:01:d7:
10:2f:ec:d0:08:b3:e9:ef:4e:d1:17:86:b4:31:de:15:14:a4:
f4:b0:33:e4:d3:81:df:b5:a1:3e:93:c7:5d:43:e3:66:1b:56:
6b:81:ff:5b:2a:72:33:f6:88:f3:18:12:35:79:4e:f5:95:a6:
d2:9b:79:df:b7:23:6b:95:26:d6:12:5c:1f:92:93:fd:92:40:
27:90:06:3f:45:8f:25:42:2d:21:88:e1:a7:ef:01:79:b8:e7:
0a:0d:e6:a9:0f:09:d2:77:e1:99:ee:f7:a2:66:d7:a8:17:c1:
97:a6:f6:c1:0b:05:87:92:c1:9a:af:58:08:1f:85:df:10:c8:
bb:86:86:e2:e0:7b:b3:c0:4c:26:3f:6b:e3:b4:40:2c:3d:50:
03:ae:d2:c8:df:ed:36:23:d8:2d:93:5e:db:63:df:f9:e7:6b:
b8:cc:9d:41:57:4c:41:67:b3:d2:92:8e:15:36:59:62:96:b0:
0f:25:f0:a2:22:c0:09:e5:95:cb:32:03:f7:5e:72:4f:76:20:
62:8f:b6:5b:1c:b1:7d:bf:ef:4c:78:92:14:0a:16:d2:ea:ac:
3f:dc:05:90:4f:7f:f4:34:7b:66:95:bb:1d:e2:de:93:4b:c8:
67:5e:7c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:42:14 2024 by rpki-client on console-fra.rpki-client.org