Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Y6gXpTNdvs4MY5iXRjdVUp6YLMI.roa
File: Y6gXpTNdvs4MY5iXRjdVUp6YLMI.roa (raw, json)
Hash identifier: NplYxC9twmpoL+DrUi68JqAOSi5fuKNjXe+P85pDXCY=
Subject key identifier: 63:A8:17:A5:33:5D:BE:CE:0C:63:98:97:46:37:55:52:9E:98:2C:C2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01930E655367F11EAA8FD72EE8CEACDFF9D4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Y6gXpTNdvs4MY5iXRjdVUp6YLMI.roa
Signing time: Sat 09 Nov 2024 00:49:01 +0000
ROA not before: Sat 09 Nov 2024 00:49:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214902
IP address blocks: 5.83.147.0/24 maxlen: 24
5.231.28.0/24 maxlen: 24
77.90.6.0/24 maxlen: 24
77.90.19.0/24 maxlen: 24
77.90.43.0/24 maxlen: 24
77.90.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0e:65:53:67:f1:1e:aa:8f:d7:2e:e8:ce:ac:df:f9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 9 00:49:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63a817a5335dbece0c639897463755529e982cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:65:a7:f3:f9:10:5a:27:ee:f6:a8:c5:79:
35:18:9c:3b:0f:ed:f9:64:e9:2a:7d:7d:66:3c:c2:
6e:fa:85:78:6e:6e:fc:49:46:20:bd:3b:05:a9:3b:
ce:33:f4:6e:7d:94:1d:1a:a5:4a:4c:c9:cb:cf:16:
80:e7:05:d3:bb:24:0d:1a:be:22:8e:d3:1c:c8:e3:
d0:13:06:15:60:cf:6f:d2:e6:cc:cd:4a:5a:23:d6:
43:a3:52:50:54:dd:37:9c:25:3c:aa:42:a7:9c:db:
f3:a4:6a:ee:6a:51:35:23:96:fe:1c:77:41:e8:2d:
62:fc:29:80:af:dc:59:f5:ec:92:12:9a:22:bb:ef:
02:96:ba:bd:fa:45:64:51:8f:28:df:29:e9:e0:9e:
c2:15:f7:82:6f:9b:98:50:2f:b4:8a:90:76:32:37:
78:57:66:0e:61:35:26:04:2d:f8:0d:d7:e7:4a:7c:
fa:ea:12:08:7c:3e:ce:99:96:d7:3d:f7:49:c0:fa:
76:b7:c4:a4:42:16:b5:41:1d:52:48:8b:76:e6:e7:
ea:1e:a0:81:1b:50:56:20:78:ad:65:9f:23:41:35:
df:9a:b8:87:5d:4f:43:9b:f9:61:94:ef:5f:f0:ed:
3d:d7:74:05:a7:31:e1:f0:8c:38:2c:5c:d1:1d:0e:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A8:17:A5:33:5D:BE:CE:0C:63:98:97:46:37:55:52:9E:98:2C:C2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Y6gXpTNdvs4MY5iXRjdVUp6YLMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.147.0/24
5.231.28.0/24
77.90.6.0/24
77.90.19.0/24
77.90.43.0/24
77.90.45.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c2:1a:b5:c5:71:a2:3e:b3:91:52:be:14:d1:d5:6a:f3:db:
da:13:c7:f6:f0:af:f4:b5:a3:4f:a7:c7:69:51:79:41:fd:5b:
7d:4d:e2:f8:cb:7e:b5:c2:de:a4:9d:f0:b3:9f:aa:0f:2f:d7:
89:3a:23:d0:22:51:2a:ed:9f:1b:91:e3:d2:56:e6:f4:a8:09:
ab:a9:00:e1:ff:0c:44:d3:0b:1e:43:7c:9e:ca:1a:dd:f4:fe:
98:d9:39:0b:4a:3a:20:53:a3:f9:0f:5e:13:f2:e0:9d:37:73:
3a:54:10:75:28:fc:85:39:e0:2f:b5:bf:c8:8b:6d:95:af:83:
96:db:0c:f3:b2:fc:90:12:21:1f:87:8a:2c:6e:9d:1a:da:5f:
d6:e1:23:27:68:15:4b:0a:cc:a5:a4:44:1e:dd:b9:ae:0a:8d:
b1:fd:91:fb:7d:ee:f1:09:ee:06:68:77:92:65:59:4d:70:7e:
15:61:2b:db:51:9b:81:c3:eb:ff:7f:70:cd:2a:04:3c:06:de:
48:4b:a9:85:9e:37:fe:9c:c9:6f:de:b5:57:28:f3:21:ec:3f:
a7:e9:49:29:f4:e9:ab:71:2b:2f:4d:1e:b9:15:e2:76:63:cc:
a7:d6:48:ae:96:74:c9:a3:57:bf:4b:83:87:ad:1a:ad:4a:e8:
bb:a5:75:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:16 2024 by rpki-client on console-fra.rpki-client.org