Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/B2VaYwWJXi-ObGRIx9j4VsAxT1Q.roa
File: B2VaYwWJXi-ObGRIx9j4VsAxT1Q.roa (raw, json)
Hash identifier: Xd/zcxSauW1SdbBac8pN04ub5XtXr6wuFoBt87GzofQ=
Subject key identifier: 07:65:5A:63:05:89:5E:2F:8E:6C:64:48:C7:D8:F8:56:C0:31:4F:54
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019346EFF20FFE08D04E502BA90EB9A5F384
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/B2VaYwWJXi-ObGRIx9j4VsAxT1Q.roa
Signing time: Wed 20 Nov 2024 00:19:10 +0000
ROA not before: Wed 20 Nov 2024 00:19:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
77.90.55.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:46:ef:f2:0f:fe:08:d0:4e:50:2b:a9:0e:b9:a5:f3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 20 00:19:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07655a6305895e2f8e6c6448c7d8f856c0314f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:98:b1:af:d3:fa:79:5d:1b:6f:a9:ae:80:b1:
3a:46:16:3d:0b:f1:a1:e8:49:ac:b1:66:82:8c:98:
ea:51:00:a6:11:b7:a8:f7:6e:dd:db:3b:88:96:f1:
8f:cd:76:be:f9:ee:2e:2d:10:ba:1c:3f:82:6b:4f:
5f:05:fe:d7:b8:4b:3d:8b:18:e1:b8:77:3c:20:f1:
f7:a2:eb:2d:97:15:3f:ad:bf:8e:23:7c:d4:20:c1:
e7:a1:94:a6:99:ce:30:02:88:61:82:40:1c:e0:33:
37:d7:0a:80:bf:33:de:49:ed:bf:1b:9a:b9:b5:27:
79:9d:66:0f:84:10:4b:ec:b0:6a:f6:d8:9e:27:4d:
86:66:c8:2f:a7:5d:08:fe:6c:79:86:f9:9b:b1:4c:
90:7c:79:46:0e:7b:c1:ef:f8:ea:f7:61:fe:49:f0:
27:82:cc:2f:e7:27:cf:e8:93:77:cb:01:6d:db:fd:
b5:70:1d:85:88:80:04:6b:34:d4:80:2d:fc:73:c8:
d4:7c:6e:48:72:60:ad:e0:e7:ae:cc:35:86:54:da:
66:52:83:bd:45:c9:a7:22:c0:2d:11:1b:c3:42:90:
13:7d:e1:5a:99:20:45:37:ec:ff:1b:c6:14:e8:7d:
be:b1:41:97:82:6a:60:60:c7:9a:5b:d2:e2:8c:e3:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:65:5A:63:05:89:5E:2F:8E:6C:64:48:C7:D8:F8:56:C0:31:4F:54
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/B2VaYwWJXi-ObGRIx9j4VsAxT1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/23
85.118.162.0/24
87.239.131.0/24
94.249.138.0/24
94.249.148.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f8:e1:6d:c6:11:f5:83:47:db:b3:70:93:4a:e0:24:4f:4d:
21:21:45:a8:64:8e:56:a4:b9:e2:e8:f4:93:ed:63:4a:09:c4:
74:01:b6:30:e7:31:b8:a2:a7:a9:e3:47:be:08:8a:56:4c:b0:
cf:c3:98:c0:6c:2b:be:49:c6:47:0c:b0:1b:f2:77:cf:c1:48:
44:91:7f:aa:4d:5c:64:0d:48:6a:c4:64:83:05:a0:0f:ec:2f:
25:0f:38:48:4c:9e:13:ac:e2:6c:b1:da:93:6f:c3:cc:69:da:
17:8e:b6:75:2c:18:a2:ba:76:3e:df:81:d4:9b:e9:67:93:0f:
15:0e:70:d6:91:4a:b1:44:6a:29:82:6b:10:a0:ee:87:95:7c:
46:f9:0b:b3:88:14:c2:65:57:6a:ee:6c:2a:39:b7:6a:2d:d5:
6c:04:00:e1:8e:ba:96:b3:b3:3e:5b:6e:7c:cb:52:56:98:d8:
ea:ee:bc:74:da:b9:2d:d8:0e:81:ed:54:cf:c5:83:36:a9:bc:
9d:c1:08:ec:00:65:52:b3:a2:97:7f:4a:1e:d5:80:6f:de:b4:
3b:f4:02:b2:1f:38:06:0c:01:d4:c1:b2:03:0a:00:76:49:01:
c7:88:fd:35:61:de:cc:a7:48:df:79:4c:fb:a0:92:0e:ca:70:
23:f5:c8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:16 2024 by rpki-client on console-fra.rpki-client.org