Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/r33RrE0YiAUtxoETtCqrlDgT-EQ.roa
File: r33RrE0YiAUtxoETtCqrlDgT-EQ.roa (raw, json)
Hash identifier: 6Qg4UE9K2r4N0AoeVnwYwj5Cv5m7/nkjkE811M4CkpU=
Subject key identifier: AF:7D:D1:AC:4D:18:88:05:2D:C6:81:13:B4:2A:AB:94:38:13:F8:44
Certificate issuer: /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Certificate serial: 01903649F30CDCEC4F982BC3E12CA42D3F29
Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/r33RrE0YiAUtxoETtCqrlDgT-EQ.roa
Signing time: Thu 20 Jun 2024 15:35:34 +0000
ROA not before: Thu 20 Jun 2024 15:35:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57793
IP address blocks: 91.227.26.0/24 maxlen: 24
95.131.81.0/24 maxlen: 24
95.131.82.0/23 maxlen: 24
95.131.84.0/22 maxlen: 24
134.0.16.0/21 maxlen: 21
185.27.32.0/22 maxlen: 22
185.42.196.0/22 maxlen: 22
185.53.92.0/22 maxlen: 22
185.164.44.0/22 maxlen: 22
188.114.112.0/21 maxlen: 21
2a02:ef8::/32 maxlen: 32
2a03:b980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:36:49:f3:0c:dc:ec:4f:98:2b:c3:e1:2c:a4:2d:3f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Validity
Not Before: Jun 20 15:35:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af7dd1ac4d1888052dc68113b42aab943813f844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:12:47:45:8d:01:20:b7:1a:41:b6:1e:9e:
a6:df:e8:4c:22:cf:e9:94:9a:80:7e:81:0a:20:31:
09:4d:56:98:da:70:bf:5d:ad:89:5f:87:81:7b:65:
da:f5:29:a1:82:a8:c5:1e:49:67:95:38:32:61:2e:
ee:1d:28:f7:5f:e8:4d:fd:ca:97:53:bb:e4:7b:5e:
e2:c4:78:bc:c9:f9:c6:cc:2b:b6:bd:f8:79:bc:0f:
44:4e:79:6b:31:7e:ad:aa:6c:14:7d:d5:f5:79:21:
39:72:38:9a:12:07:ef:d8:e5:09:fc:91:c8:d0:23:
41:d3:89:29:a3:d6:d9:59:35:b8:a0:d8:4c:ea:31:
76:00:f4:49:ff:23:93:0a:57:67:4c:4a:25:e0:62:
29:9e:2d:a5:c0:b3:cd:c1:52:3e:5d:64:22:a9:8c:
6a:c3:3d:b9:7a:80:82:ce:10:4a:5e:5e:a8:1d:34:
28:09:f8:34:86:cc:30:cb:13:ce:43:ba:b8:44:4c:
31:d5:90:15:c7:72:99:6b:cd:11:6e:dd:71:78:12:
a6:20:0b:c3:cc:f5:92:a2:14:3d:b8:90:19:57:45:
63:e0:2e:08:e4:55:8e:e3:31:60:19:47:5d:b0:fb:
6f:68:6b:8a:b7:15:94:08:ba:6c:f9:99:bb:46:ff:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7D:D1:AC:4D:18:88:05:2D:C6:81:13:B4:2A:AB:94:38:13:F8:44
X509v3 Authority Key Identifier:
keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/r33RrE0YiAUtxoETtCqrlDgT-EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.26.0/24
95.131.81.0-95.131.87.255
134.0.16.0/21
185.27.32.0/22
185.42.196.0/22
185.53.92.0/22
185.164.44.0/22
188.114.112.0/21
IPv6:
2a02:ef8::/32
2a03:b980::/32
Signature Algorithm: sha256WithRSAEncryption
9d:fc:14:96:f5:f9:d0:03:b8:6c:da:62:75:73:85:b2:e1:b2:
51:3b:e8:b7:32:f2:0d:b0:4c:d3:e7:aa:55:78:9a:fc:cb:ea:
36:e8:97:bc:28:17:12:58:42:98:b5:44:a1:c7:6f:06:61:f8:
43:53:17:6b:3e:f4:75:12:cc:8f:5d:95:70:6a:7f:ac:10:6f:
06:bc:e4:78:bb:6f:56:5c:4e:d1:9b:ef:1a:a6:df:db:fb:a0:
5c:70:6c:7d:0a:2d:f5:2e:41:28:08:07:f6:b1:64:43:ac:12:
32:d8:fc:39:38:8c:0f:c3:e0:4d:87:f4:64:05:56:a6:8f:76:
a3:eb:1e:3b:3d:37:2b:5a:ed:8c:2b:d7:11:d7:d9:46:9d:10:
a1:05:9a:2e:f0:27:4b:be:e6:a5:12:20:b8:d8:3d:fa:6d:bc:
72:28:66:f5:4d:d8:57:e9:f6:81:ef:58:ae:4e:18:b7:e0:71:
12:bb:bc:63:d8:bb:74:5e:08:20:29:c0:c0:e6:79:13:f3:e5:
fd:94:ed:f8:13:68:d7:9e:ce:bb:47:7e:40:a2:5c:3d:06:85:
53:f5:ed:da:17:39:d1:51:bf:1e:be:58:95:a1:81:66:bf:16:
dc:17:fd:0c:67:aa:90:02:eb:20:a1:b0:9c:0f:91:27:6c:11:
ec:a3:d1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:47:26 2024 by rpki-client on console-fra.rpki-client.org