Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2yFjBkiJCmYATz5D1gIBy5o0fHY.roa
File: 2yFjBkiJCmYATz5D1gIBy5o0fHY.roa (raw, json)
Hash identifier: hsSpbFp9FbKiBZCie1ft1qp3WbgZl9e6lMoA0JA7y48=
Subject key identifier: DB:21:63:06:48:89:0A:66:00:4F:3E:43:D6:02:01:CB:9A:34:7C:76
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019344D94518B26557CA8F9F27911239432A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2yFjBkiJCmYATz5D1gIBy5o0fHY.roa
Signing time: Tue 19 Nov 2024 14:35:09 +0000
ROA not before: Tue 19 Nov 2024 14:35:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:d9:45:18:b2:65:57:ca:8f:9f:27:91:12:39:43:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 19 14:35:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db21630648890a66004f3e43d60201cb9a347c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:ed:e0:10:e3:f6:9e:0f:3e:39:d7:d9:c5:
06:18:9b:a3:25:fb:a2:a7:5e:9f:39:91:71:55:7c:
b5:8d:20:fa:27:2c:71:87:2d:5b:58:f7:d2:68:8b:
a7:cb:87:5a:6d:81:91:3b:0c:c2:f5:4a:0e:71:2f:
1b:2a:28:a3:47:cb:bc:30:67:a6:2e:e8:1e:cc:cf:
2e:af:0f:55:c2:f7:dc:79:cc:53:b5:1d:fc:d6:31:
7d:5e:d9:ef:43:79:64:59:f9:f3:52:2f:d3:49:6d:
75:a7:5b:c9:b1:43:73:69:b9:50:17:76:d9:c7:a1:
96:03:f8:63:33:07:44:d2:b9:32:ce:95:9e:cc:80:
77:05:28:47:b3:71:d1:24:ac:49:05:5b:7b:4d:15:
59:2b:ea:1c:04:46:3b:3c:43:8e:ce:cc:78:2f:09:
be:f8:94:83:8e:a0:07:71:f6:77:69:a2:81:44:1f:
e4:32:ec:52:a9:36:82:ce:73:65:78:d3:f4:71:ae:
4d:7f:11:48:d1:80:fe:5c:48:57:64:4b:a1:8f:8d:
63:99:da:45:3f:43:33:e9:fb:61:ba:9b:36:34:73:
dd:e7:f1:d1:27:e3:83:bc:02:bc:a2:a4:bc:94:7e:
ac:44:8a:5c:d7:ea:76:98:31:f2:ce:18:2b:58:cd:
0e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:21:63:06:48:89:0A:66:00:4F:3E:43:D6:02:01:CB:9A:34:7C:76
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2yFjBkiJCmYATz5D1gIBy5o0fHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
77.90.7.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
Signature Algorithm: sha256WithRSAEncryption
55:46:10:07:c6:1b:a9:cd:4b:d8:6e:fd:5c:e4:b7:3c:c2:75:
5a:19:00:3c:1c:b8:a9:fd:13:85:96:4e:0b:17:e2:3a:f2:60:
1b:cb:a6:fd:b6:47:50:92:ce:18:9e:7f:81:01:2c:d1:0f:1b:
3c:fd:99:a9:1d:21:eb:dd:48:20:70:02:1a:f4:2f:b1:dc:ce:
35:c0:fd:6b:cd:bf:a1:62:51:48:a1:63:03:b8:ea:ff:00:08:
c7:03:19:14:dd:bb:4b:ea:11:d5:28:16:74:69:be:d7:a6:ce:
2a:3b:e5:f8:85:f8:87:d0:55:01:2f:21:42:7b:61:f0:18:63:
8b:ad:d8:d7:69:49:ca:bf:07:57:f3:e1:46:20:94:cf:29:ee:
fb:33:4f:fe:c9:bd:66:9a:f3:78:20:8c:fa:d2:d2:a7:63:bc:
e0:85:ab:6b:11:da:a2:b2:82:74:dd:01:7f:de:de:d5:b8:bd:
73:47:81:e5:d0:fd:9f:bc:ee:71:26:57:d4:d2:f7:45:1f:32:
f4:71:1d:40:61:4e:6e:53:fe:ef:6a:f6:26:93:3b:d2:9f:36:
8e:69:ef:bc:0f:5c:8d:b6:d0:83:4b:c6:75:06:e6:28:47:62:
c6:ef:ee:57:6f:bb:fb:54:22:65:c9:ff:bb:b3:2c:18:00:63:
09:6a:32:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:16 2024 by rpki-client on console-fra.rpki-client.org