Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/afOy_R7tUZFHkIodVpoc3G0CK_M.roa
File: afOy_R7tUZFHkIodVpoc3G0CK_M.roa (raw, json)
Hash identifier: t4sdfzizu7gq7GHJgtHG3+HBMnG+okm+KpxkdMxEUkc=
Subject key identifier: 69:F3:B2:FD:1E:ED:51:91:47:90:8A:1D:56:9A:1C:DC:6D:02:2B:F3
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 018CC6B8AFA2D17D22990839902CE0C6B5DB
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/afOy_R7tUZFHkIodVpoc3G0CK_M.roa
Signing time: Mon 01 Jan 2024 20:30:41 +0000
ROA not before: Mon 01 Jan 2024 20:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5547
IP address blocks: 77.243.122.0/24 maxlen: 24
77.243.121.0/24 maxlen: 24
77.243.125.0/24 maxlen: 24
77.243.120.0/24 maxlen: 32
77.243.123.0/24 maxlen: 24
77.243.124.0/23 maxlen: 23
77.243.124.0/24 maxlen: 24
77.243.127.0/24 maxlen: 24
46.254.241.0/24 maxlen: 24
46.254.245.0/24 maxlen: 24
46.254.244.0/24 maxlen: 24
46.254.244.0/23 maxlen: 23
46.254.242.0/24 maxlen: 24
46.254.243.0/24 maxlen: 24
185.14.71.0/24 maxlen: 24
46.254.240.0/22 maxlen: 22
46.254.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:af:a2:d1:7d:22:99:08:39:90:2c:e0:c6:b5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Jan 1 20:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69f3b2fd1eed519147908a1d569a1cdc6d022bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:25:74:05:40:97:3a:bc:69:5f:e1:0a:6b:4f:
d8:6d:cb:98:d2:03:c3:0b:68:95:41:5e:f3:7b:dd:
e1:88:6d:85:90:9a:ec:81:60:81:4e:75:5e:91:0c:
51:7b:74:0b:6b:aa:93:89:3e:2d:c0:72:b8:86:eb:
29:c5:7d:dd:11:3d:6d:b2:54:51:74:ed:73:ff:74:
37:e7:84:92:7e:5b:2f:f0:9b:e8:a3:e0:73:8f:af:
2a:d0:76:d9:28:d1:54:54:16:74:b8:65:98:e2:5a:
bb:f3:58:fd:53:14:2e:da:2b:f9:ad:ce:27:28:8f:
5f:5e:ab:07:7f:4f:43:b3:5e:5e:8c:6c:8c:fd:ed:
fc:e9:e9:82:2f:c5:4b:98:98:9b:6c:11:5b:49:8f:
6a:f0:a1:31:e2:fe:9e:69:a1:47:0d:be:32:59:f5:
ff:ca:63:4e:11:c9:66:1f:f0:87:28:cc:ba:b0:19:
59:40:df:b9:98:d1:dd:20:1c:bf:c8:40:0c:81:21:
d3:bd:bd:9c:52:33:a1:ad:54:09:2d:08:2e:20:1d:
a3:d3:61:3a:98:0d:3f:16:ac:e3:0b:26:d3:a3:88:
ab:0c:b9:3b:ae:20:c7:61:b6:a0:bb:77:6f:ed:0d:
23:13:4e:e8:6a:5d:ca:0f:2d:51:63:b0:f6:b7:4b:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F3:B2:FD:1E:ED:51:91:47:90:8A:1D:56:9A:1C:DC:6D:02:2B:F3
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/afOy_R7tUZFHkIodVpoc3G0CK_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.240.0-46.254.245.255
77.243.120.0-77.243.125.255
77.243.127.0/24
185.14.71.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b9:12:30:6b:6b:53:84:5c:c1:fc:21:46:b5:2a:d5:a9:73:
c4:f7:e4:01:3d:d9:ff:5f:aa:d3:ae:30:66:79:99:4f:22:6d:
d9:7e:22:dc:f7:b2:c8:cf:83:d7:91:87:19:19:76:74:b4:bd:
1c:ec:51:e2:58:f5:6a:e5:64:fc:c1:05:ec:d7:b2:af:f9:07:
01:d0:e5:e5:db:30:5d:70:14:12:73:e3:6f:58:2a:e1:a0:78:
91:06:fc:dd:b0:5b:42:da:99:09:fe:c2:9e:06:9a:fd:bc:09:
8f:a9:a6:14:1f:2b:7c:bc:f3:f6:f6:5d:ae:74:d2:c4:2c:24:
1c:82:12:b2:ec:bd:6c:a3:0a:78:c2:f4:01:a9:88:3a:39:0c:
99:20:da:60:6e:8f:d4:c4:5c:1a:45:f7:50:74:d4:e5:69:10:
85:8d:a9:e0:c7:e1:0a:cd:f4:3e:2a:c5:98:8c:4e:aa:cf:c3:
10:17:6b:c4:65:fb:05:b2:26:f0:cb:af:69:6b:fe:cf:42:77:
18:2b:cc:4b:47:4c:31:be:b4:55:13:cf:3f:d0:d6:47:bd:d8:
61:6f:24:c0:a8:8b:ab:7a:19:e4:bb:1e:cf:36:80:53:09:0f:
70:4b:67:5c:03:1a:d1:8a:4b:d6:6f:96:91:36:88:20:1e:62:
ef:6f:fe:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:01:21 2024 by rpki-client on console-ams.rpki-client.org