Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/WY5h4iHOHUhPAqPJ_fPM1vDYM50.roa
File: WY5h4iHOHUhPAqPJ_fPM1vDYM50.roa (raw, json)
Hash identifier: n/Ua/sCWGl9Tau1Tnw1xex89g2hKxSwzo6rcHv0NMY0=
Subject key identifier: 59:8E:61:E2:21:CE:1D:48:4F:02:A3:C9:FD:F3:CC:D6:F0:D8:33:9D
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 018CC9BC15512A4AF41C375063ABB0FAAB4D
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/WY5h4iHOHUhPAqPJ_fPM1vDYM50.roa
Signing time: Tue 02 Jan 2024 10:33:15 +0000
ROA not before: Tue 02 Jan 2024 10:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1213
IP address blocks: 77.87.24.0/21 maxlen: 24
87.32.0.0/12 maxlen: 24
45.144.8.0/22 maxlen: 24
91.193.188.0/22 maxlen: 24
91.123.224.0/20 maxlen: 24
193.1.0.0/16 maxlen: 24
2001:770::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:15:51:2a:4a:f4:1c:37:50:63:ab:b0:fa:ab:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: Jan 2 10:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=598e61e221ce1d484f02a3c9fdf3ccd6f0d8339d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ff:0b:c4:b6:18:2e:8c:5e:6d:fd:87:f9:b4:
15:13:f6:ee:2c:69:b0:d9:ee:e9:b5:ee:ea:93:f7:
39:63:d1:04:f2:d7:29:22:27:71:11:5b:a8:de:57:
59:67:ee:21:56:8a:19:5d:b9:d9:b5:6f:66:99:da:
7a:c3:27:00:0e:a1:4b:4f:5d:b1:2c:2d:56:f9:b5:
2b:aa:11:0a:37:e4:8c:f8:ec:ce:d6:28:f2:36:7c:
e8:56:20:81:dd:e1:87:d1:b1:1d:bb:c9:58:9c:c4:
73:fe:f6:6b:9d:ca:42:1b:0d:89:4e:c9:53:33:be:
35:7e:7c:7f:7f:36:be:6c:16:67:41:e5:88:0e:b4:
44:05:42:ee:b5:2d:18:a3:59:78:e9:03:40:da:e6:
3f:f4:52:f5:7b:65:f4:f9:fa:b9:b3:71:78:01:ce:
9d:ea:96:0e:bc:b8:76:52:19:5f:c7:00:ad:72:0f:
0c:1a:4d:a2:82:ab:c2:78:62:e4:4b:65:20:d6:78:
72:0a:fd:2b:e6:c3:11:7c:9b:d4:68:29:3b:c0:31:
82:26:c5:a8:39:24:2a:de:0d:16:81:24:38:d6:63:
0c:f6:12:70:e2:b8:e0:c0:56:cc:01:80:84:86:d9:
10:0c:03:46:90:be:95:6f:86:bf:83:4e:bb:32:b2:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8E:61:E2:21:CE:1D:48:4F:02:A3:C9:FD:F3:CC:D6:F0:D8:33:9D
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/WY5h4iHOHUhPAqPJ_fPM1vDYM50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.8.0/22
77.87.24.0/21
87.32.0.0/12
91.123.224.0/20
91.193.188.0/22
193.1.0.0/16
IPv6:
2001:770::/32
Signature Algorithm: sha256WithRSAEncryption
6f:82:6a:1f:00:cb:ee:da:c2:ec:b3:00:5e:e4:78:e2:7a:5b:
1e:d5:a3:e4:f5:83:01:f8:00:97:c8:ff:4f:cf:7f:82:ac:de:
3c:73:0d:66:ce:b2:11:4b:03:7c:8f:0a:3d:e8:e3:26:fa:0c:
c1:bf:c9:f8:0e:bc:22:1e:31:c4:91:94:ad:54:58:72:4b:a8:
db:18:a2:9b:db:09:72:32:7a:2f:b0:19:3f:82:2e:d4:84:5c:
b1:f5:87:99:4a:80:16:70:d4:07:71:37:83:9a:7c:65:3c:15:
00:54:6f:10:96:96:c6:08:31:92:29:bd:8f:87:4b:a1:8a:ab:
3e:d2:b1:ba:b6:a6:d9:0e:f2:b1:e9:93:56:34:c4:3c:15:db:
e3:81:b6:82:97:6b:c3:ad:d9:37:ab:a9:df:aa:89:b8:c4:3a:
3a:6d:19:8a:13:97:4d:62:b8:24:c6:86:e3:7f:3b:da:e5:fb:
dd:a1:4f:7a:f8:ea:34:87:67:7d:bf:8a:ae:ef:0f:86:54:71:
0e:80:57:48:04:5e:0b:e9:6d:48:ec:2c:5d:81:f9:7c:4b:9e:
5c:f6:5b:52:cd:6c:7b:52:b9:b4:05:88:66:0b:92:54:6c:5b:
11:36:1e:85:ac:2a:10:99:8a:39:fb:43:09:43:cf:14:01:8f:
6b:05:28:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:45:27 2024 by rpki-client on console-fra.rpki-client.org