Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/RAjQIXD5NfJwy1fw7UGZEfMpd-g.roa
File: RAjQIXD5NfJwy1fw7UGZEfMpd-g.roa (raw, json)
Hash identifier: mOpz4+gzcfSDFZF7WDt2pmWr8S21vEe8P/3yJbxuKI4=
Subject key identifier: 44:08:D0:21:70:F9:35:F2:70:CB:57:F0:ED:41:99:11:F3:29:77:E8
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 018CC6B93D835D4A063DA12E60754C8E3498
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/RAjQIXD5NfJwy1fw7UGZEfMpd-g.roa
Signing time: Mon 01 Jan 2024 20:31:17 +0000
ROA not before: Mon 01 Jan 2024 20:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47159
IP address blocks: 91.83.158.0/24 maxlen: 24
89.186.104.0/24 maxlen: 24
82.131.172.0/24 maxlen: 24
62.77.213.0/24 maxlen: 24
91.83.92.0/24 maxlen: 24
62.77.234.0/24 maxlen: 24
91.83.220.0/22 maxlen: 22
91.83.225.0/24 maxlen: 24
213.197.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3d:83:5d:4a:06:3d:a1:2e:60:75:4c:8e:34:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 20:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4408d02170f935f270cb57f0ed419911f32977e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:12:68:01:9e:bb:39:47:93:14:55:56:c1:c5:
7e:b1:22:a8:d2:fc:15:d1:71:09:91:09:19:1b:8f:
aa:b1:6e:34:81:d9:66:65:d3:07:d7:c8:cf:c7:4b:
ff:da:13:44:f7:4a:4e:d2:88:78:a4:ef:3f:d9:3d:
31:1e:c0:49:7d:85:b9:6e:33:f8:bf:05:2d:ec:e2:
29:3e:06:eb:a5:b3:5b:d3:5c:c3:b5:99:f8:53:47:
f5:73:e0:aa:65:63:2d:28:1b:8c:d3:70:f9:c5:db:
22:eb:91:79:cd:a4:57:95:df:6c:06:cb:37:80:4c:
e6:1c:fe:c0:8a:09:e3:89:93:1b:e8:c9:a6:27:fd:
08:3a:29:49:03:0b:67:8b:3c:42:56:e7:a2:6c:5d:
0b:f1:02:4e:c6:fd:c3:5d:de:e7:c5:77:8d:f9:d5:
14:66:11:2d:05:1f:61:eb:48:fa:5f:11:09:02:74:
8b:7e:3f:7d:8c:12:78:c3:15:13:ff:54:a7:66:ab:
2c:ba:7c:26:d7:ee:63:ee:ff:bf:38:6e:95:a7:3a:
2a:2d:88:9b:21:93:f6:d1:1a:13:95:1a:76:b3:61:
be:e7:0a:35:ec:35:94:f0:7a:a5:db:9e:b9:07:4c:
06:db:e9:f0:16:71:3e:7d:df:81:fe:f4:44:9b:b8:
d9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:08:D0:21:70:F9:35:F2:70:CB:57:F0:ED:41:99:11:F3:29:77:E8
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/RAjQIXD5NfJwy1fw7UGZEfMpd-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.77.213.0/24
62.77.234.0/24
82.131.172.0/24
89.186.104.0/24
91.83.92.0/24
91.83.158.0/24
91.83.220.0/22
91.83.225.0/24
213.197.64.0/22
Signature Algorithm: sha256WithRSAEncryption
67:f6:a2:64:bd:bc:4e:db:b3:e9:23:25:5b:21:29:05:ed:70:
50:48:b0:2e:44:ad:9e:a8:33:44:f7:10:9b:3f:1b:1f:01:91:
7a:18:2f:8d:dd:ae:18:85:9f:eb:e3:95:ad:e1:10:4c:2d:0e:
5f:81:90:ed:03:a8:c3:89:eb:a9:34:cf:92:16:6a:bb:0b:f4:
36:b3:87:df:9a:05:56:60:0f:37:6d:c8:ad:9f:72:66:d3:42:
f9:dc:59:c0:76:de:e1:f9:67:e7:32:19:51:db:c7:f3:01:ff:
7b:02:83:6c:31:28:55:cc:29:be:a0:80:f4:55:29:cf:b6:ad:
4d:f3:b4:c3:6b:a7:cd:34:21:15:94:b2:47:02:d3:95:0a:c2:
f1:40:9f:6b:ec:59:41:60:3f:c2:04:5e:aa:29:5f:9d:fe:f8:
76:0b:2c:a5:e9:c5:67:21:f2:e7:f1:7c:4b:ed:03:ab:19:b2:
85:0a:99:a2:45:70:22:79:2e:87:55:a2:bb:53:96:b1:21:65:
39:47:8e:55:f1:2f:86:f6:8f:ef:0a:ab:ba:9e:bb:3c:89:f3:
bf:93:bf:e3:9c:b4:d3:ba:69:70:df:e3:39:3e:7c:3b:d9:fb:
6f:5f:cb:85:fc:08:7d:7e:a3:16:75:d7:79:e8:cf:20:29:95:
e4:f4:97:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:28:23 2024 by rpki-client on console-ams.rpki-client.org