Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ijarjnYacCagjbhulL1pB8dnDSc.roa
File: ijarjnYacCagjbhulL1pB8dnDSc.roa (raw, json)
Hash identifier: 1evOIzb7rchLd1dnBrN4up0n2rGqvZfnCSBQbSBpSow=
Subject key identifier: 8A:36:AB:8E:76:1A:70:26:A0:8D:B8:6E:94:BD:69:07:C7:67:0D:27
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193A27F1C5E8BA2E986777FE0C86EC8D9A6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ijarjnYacCagjbhulL1pB8dnDSc.roa
Signing time: Sat 07 Dec 2024 19:00:59 +0000
ROA not before: Sat 07 Dec 2024 19:00:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Dec 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a2:7f:1c:5e:8b:a2:e9:86:77:7f:e0:c8:6e:c8:d9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 7 19:00:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a36ab8e761a7026a08db86e94bd6907c7670d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:95:ee:aa:a7:3d:1b:6e:56:f2:bc:66:08:
4a:e7:b2:b0:67:a2:b7:02:7d:4d:7b:31:5b:b3:1b:
ea:fc:15:53:1c:2d:83:bc:49:ab:9b:8e:57:3c:eb:
69:5b:68:5d:f9:29:fd:13:aa:ba:8d:b5:26:0c:96:
5b:6c:22:7d:d2:8d:04:c4:84:83:17:eb:40:de:2a:
13:25:05:05:d9:4c:e6:b8:f2:ef:7b:e2:46:de:13:
69:28:4a:62:55:38:03:48:f1:ff:6d:18:99:21:51:
29:30:30:4f:c2:f0:9d:b2:ae:e1:77:6e:b5:07:c8:
7e:2f:ad:d3:f9:44:1e:c0:3a:61:c1:38:99:e7:e6:
aa:7b:d8:ac:c2:0e:2e:a6:2d:32:91:75:21:6b:27:
4c:4a:d2:40:a5:af:b9:ab:d1:9a:91:78:51:29:05:
13:d9:2c:24:6c:dd:9b:f7:e0:45:ac:34:8e:80:3e:
f0:bb:0a:45:39:8b:72:cd:13:4c:52:b0:8c:00:9f:
9c:73:78:c3:57:c4:eb:81:95:f8:35:cf:fc:30:c6:
14:e2:78:32:52:47:52:ca:c0:a0:a5:d6:3c:a6:64:
21:03:d4:19:bb:e5:b6:04:31:52:73:fe:96:20:3f:
76:af:e3:e6:e8:b3:e6:42:1a:4b:17:69:f5:62:34:
8d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:36:AB:8E:76:1A:70:26:A0:8D:B8:6E:94:BD:69:07:C7:67:0D:27
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ijarjnYacCagjbhulL1pB8dnDSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
77.90.7.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:9a:e3:0c:2d:02:d8:95:5f:a2:e9:ce:db:0f:20:7f:d7:b9:
5b:1d:95:b7:b4:8d:be:b8:a0:07:e2:e4:cd:48:27:37:30:05:
a5:e0:a1:cb:55:bc:4d:05:dd:e1:5a:a0:77:7c:35:22:ad:fa:
40:ed:6b:ac:4d:6f:c7:69:82:60:b6:80:fc:e7:cf:e8:f3:c4:
ff:3e:c1:dd:8e:9d:22:89:41:9f:82:43:c2:6e:e2:06:76:a4:
15:55:e5:43:6c:30:f8:e4:b4:6d:3f:b1:38:d4:8f:6b:5f:3b:
0c:31:76:b5:f3:93:cd:a8:e2:6c:12:a4:83:d6:9a:e8:2c:18:
37:88:72:af:cf:32:66:21:9f:c0:7f:b4:1b:88:54:fc:b9:8e:
67:e5:78:79:80:1c:81:9e:bb:35:f4:0a:2b:03:a9:eb:e4:21:
73:09:bf:64:80:26:7d:b0:a9:2e:bc:f1:69:d9:ad:ad:b2:d3:
c8:bb:99:83:15:c2:b7:d8:3a:84:c2:4f:21:a9:1d:f8:f6:24:
32:f8:69:34:b9:83:0e:c6:a2:d9:f0:e2:74:fa:be:95:c3:25:
5e:07:55:ca:d2:8c:b9:5d:f5:e4:65:56:7d:fa:0a:75:c9:85:
a3:a0:23:68:45:75:58:5f:7c:6d:c3:80:53:90:7e:bc:db:1d:
23:1b:a3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 18 04:28:31 2024 by rpki-client on console-ams.rpki-client.org