Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iXAMMepPQr5HeTTGexCVnihi4uk.roa
File: iXAMMepPQr5HeTTGexCVnihi4uk.roa (raw, json)
Hash identifier: ZY/v8l5udLdOppnm8WWWXRuJO6Hz6T1QtL0uAUXloPc=
Subject key identifier: 89:70:0C:31:EA:4F:42:BE:47:79:34:C6:7B:10:95:9E:28:62:E2:E9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193BC01EC9BA2D3050754199607136B38E8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iXAMMepPQr5HeTTGexCVnihi4uk.roa
Signing time: Thu 12 Dec 2024 17:54:22 +0000
ROA not before: Thu 12 Dec 2024 17:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44103
IP address blocks: 5.83.149.0/24 maxlen: 24
77.90.23.0/24 maxlen: 24
178.18.152.0/22 maxlen: 32
178.18.152.0/24 maxlen: 32
178.18.153.0/24 maxlen: 32
178.18.154.0/24 maxlen: 32
178.18.155.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Dec 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bc:01:ec:9b:a2:d3:05:07:54:19:96:07:13:6b:38:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 12 17:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89700c31ea4f42be477934c67b10959e2862e2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:20:01:f4:70:26:1b:10:12:24:19:df:72:c8:
12:17:0c:dc:9d:b7:5e:a7:8b:44:34:7f:cd:c0:9e:
48:c7:3e:80:3e:0c:37:be:b3:ef:5c:dc:fd:89:d9:
42:56:14:c0:49:bf:7d:b4:a8:fb:3c:ac:7f:f3:e7:
67:e9:42:9a:3e:29:a9:60:bc:7f:23:71:45:42:9d:
9a:ad:7f:42:17:1e:ce:8a:8c:96:2c:14:13:71:d4:
7f:96:78:a3:06:ed:3c:ae:4f:41:56:ca:5e:bb:de:
60:1c:c2:c2:03:57:7f:ed:00:ca:6a:0f:6f:bb:fb:
61:8c:ea:64:3b:ea:00:0a:ee:33:4d:98:62:cd:f9:
1c:8d:e7:04:cc:5b:87:2f:a6:fc:d2:0b:9a:fd:9c:
2c:09:b0:72:d2:ad:a9:34:29:bb:cd:f7:d4:12:e7:
39:50:9e:66:85:11:23:67:91:84:c7:33:9d:7d:65:
19:da:56:c6:e3:8a:73:03:c4:ee:b4:1e:0e:76:90:
e5:fb:7b:d4:63:14:77:15:8f:5a:51:e6:7c:fe:8b:
a9:0c:53:24:7f:11:6a:49:85:e6:a6:d4:37:ac:63:
d8:1a:18:2d:cb:be:df:ac:5c:d5:3b:ec:3d:fe:87:
4e:1f:d6:8e:ed:6a:b1:37:af:6d:73:a6:32:f4:de:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:70:0C:31:EA:4F:42:BE:47:79:34:C6:7B:10:95:9E:28:62:E2:E9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iXAMMepPQr5HeTTGexCVnihi4uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.149.0/24
77.90.23.0/24
178.18.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:30:f8:25:8f:28:8a:19:4e:e5:35:9e:4c:dc:c6:73:f9:5c:
e6:20:85:53:40:ad:36:1c:9e:b6:a7:23:eb:e6:7f:9c:62:48:
82:b8:d5:02:0d:7c:d3:47:9e:01:ef:9f:66:33:a0:f0:46:e5:
a9:0b:54:2d:a6:13:53:8d:17:d1:2b:1e:5d:50:9a:26:f6:7c:
7e:14:4e:33:b0:f9:6a:c0:65:1b:7f:01:f7:3d:bc:78:1d:6c:
33:56:e9:d5:43:79:89:09:96:b9:30:94:8d:41:bf:39:78:97:
58:be:32:b6:72:68:3e:e6:c9:64:3b:5c:a1:5f:43:85:f4:16:
7a:16:53:d4:25:5f:7d:60:25:fe:c6:19:06:94:47:03:88:52:
f6:a4:e1:7c:7a:29:b3:5f:fc:53:34:12:09:53:a4:a9:7f:2e:
28:07:d4:82:a3:3f:37:44:29:18:1d:f4:ca:d2:24:08:d0:a8:
a1:f9:7b:64:55:7b:b0:77:d2:37:99:0c:01:ee:77:a0:d6:14:
47:99:54:17:6d:d5:e3:fa:35:74:70:49:42:5f:d0:c5:c4:3f:
75:b3:6f:b7:4b:2e:1d:1f:1c:9d:8e:c2:f7:97:4a:e2:d4:3a:
0c:84:84:44:e6:a1:4d:4b:c0:cc:7d:03:83:67:b6:26:ae:f0:
89:cc:41:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 18 03:20:41 2024 by rpki-client on console-fra.rpki-client.org