Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bwgSkOBng8oKlFda4xEaayEMKVI.roa
File: bwgSkOBng8oKlFda4xEaayEMKVI.roa (raw, json)
Hash identifier: nqnSr7grfqJ7bheFEXFnnxl51oX+zZptQjyRzyEX5KU=
Subject key identifier: 6F:08:12:90:E0:67:83:CA:0A:94:57:5A:E3:11:1A:6B:21:0C:29:52
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01936AB99FEDA7A1B1495EE1F8F975BC358E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bwgSkOBng8oKlFda4xEaayEMKVI.roa
Signing time: Tue 26 Nov 2024 23:06:10 +0000
ROA not before: Tue 26 Nov 2024 23:06:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207252
IP address blocks: 5.83.152.0/24 maxlen: 24
5.231.29.0/24 maxlen: 24
77.90.12.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Dec 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b9:9f:ed:a7:a1:b1:49:5e:e1:f8:f9:75:bc:35:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 26 23:06:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f081290e06783ca0a94575ae3111a6b210c2952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:89:5f:ae:62:cd:29:dd:43:ef:9e:6c:47:
b4:b1:b1:72:39:94:8f:54:b6:b8:3e:2f:2a:80:e5:
51:7d:19:e2:81:d5:13:e1:45:0b:6e:33:a0:83:33:
7e:af:00:7e:e7:07:39:a0:32:ef:4b:1c:09:76:40:
76:b4:70:a3:34:91:27:4f:c3:90:fc:fc:12:1b:91:
e8:55:2c:5d:da:b6:f3:70:03:42:62:23:05:f0:d2:
50:8c:7a:78:4b:eb:f5:46:26:10:09:61:8b:d9:00:
d2:e1:6d:09:5a:b1:7f:af:cb:46:63:fc:6e:98:69:
1f:5d:24:7b:7d:7c:fa:08:3c:c4:76:7b:90:bb:30:
34:45:ab:f3:9f:cb:fe:b1:bb:d9:f3:0a:25:22:11:
4f:4d:6d:dc:63:a7:bf:ec:3a:76:18:d2:f5:60:d5:
97:2e:80:28:db:fe:7a:60:c2:eb:d3:68:cd:98:60:
7a:7e:30:8e:b8:c5:96:6f:17:30:30:f7:dd:27:98:
72:23:a6:f4:8b:7d:6d:15:81:4a:1a:ee:fb:bf:6f:
c7:17:a5:5f:f6:5e:dd:c4:d7:8b:d6:3a:ed:74:ca:
64:57:f8:79:64:9c:d4:c5:e5:4a:80:01:0e:23:77:
59:84:b9:06:ed:82:a9:35:18:a3:96:95:fc:3c:88:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:08:12:90:E0:67:83:CA:0A:94:57:5A:E3:11:1A:6B:21:0C:29:52
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bwgSkOBng8oKlFda4xEaayEMKVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.152.0/24
5.231.29.0/24
77.90.12.0/24
77.90.22.0/24
77.90.42.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5d:e3:3c:68:65:9c:2b:64:0b:fe:ed:3f:27:57:26:96:e2:
f6:87:9b:2e:b9:13:47:c7:03:75:76:f1:f5:ed:b3:3e:a6:8c:
03:25:61:61:03:6e:3b:80:ca:64:0f:95:28:98:0a:29:cc:b6:
ca:d7:fc:7f:31:1a:db:89:9e:89:4a:7d:33:be:89:d3:10:15:
78:97:e9:a8:ba:22:b2:1f:44:a2:4e:54:ac:0d:c0:aa:eb:6f:
74:40:ec:39:f0:dd:85:2f:be:ec:d3:40:95:d4:85:ec:73:4b:
eb:37:ae:63:3c:ca:cc:97:c2:e1:57:b1:50:5d:50:3a:d1:0f:
b2:5e:31:32:1f:02:61:9a:a4:45:04:38:38:e8:16:91:19:1e:
b7:d5:0e:41:4a:72:2a:18:21:e4:88:e4:17:76:f7:d3:04:4d:
d4:cd:a8:d6:2c:ac:ab:51:9a:cf:24:64:94:d1:7b:0f:a7:a8:
8c:2b:4a:a4:80:5e:da:77:03:f0:bd:13:e8:37:8e:51:bb:99:
48:2b:a2:87:38:c8:c5:37:68:da:e8:87:a5:d1:52:43:3f:bd:
b8:a3:42:5a:1f:6f:c5:8d:a5:ce:63:80:58:92:68:7b:25:7d:
d4:bb:a5:1c:65:17:41:88:f1:60:ec:03:b2:75:5d:9d:25:42:
0c:9a:3b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 18 02:10:51 2024 by rpki-client on console-ams.rpki-client.org