Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/f58mkGnRVlnvxyZn3xS7e3VLJdM.roa
File: f58mkGnRVlnvxyZn3xS7e3VLJdM.roa (raw, json)
Hash identifier: x35/JQc2oj4EhIgbEQdSMnEI4MoPSRSO48kZkCGIAkI=
Subject key identifier: 7F:9F:26:90:69:D1:56:59:EF:C7:26:67:DF:14:BB:7B:75:4B:25:D3
Certificate issuer: /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial: 018CC6B8FE612C9A75396471D0571484F7AC
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/f58mkGnRVlnvxyZn3xS7e3VLJdM.roa
Signing time: Mon 01 Jan 2024 20:31:01 +0000
ROA not before: Mon 01 Jan 2024 20:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199702
IP address blocks: 88.80.127.0/24 maxlen: 24
77.77.49.0/24 maxlen: 24
213.149.154.0/24 maxlen: 24
213.149.156.0/24 maxlen: 24
213.149.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:fe:61:2c:9a:75:39:64:71:d0:57:14:84:f7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193743467b4da41c6295e9351153309586ba2399
Validity
Not Before: Jan 1 20:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f9f269069d15659efc72667df14bb7b754b25d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:b8:08:30:6c:8a:1d:ec:51:ce:61:71:8b:
13:5a:3d:39:a8:39:27:61:01:ac:6f:ca:a4:ae:3a:
10:c1:72:72:85:d8:44:dd:d3:84:1f:86:61:49:e6:
bf:ff:b6:e7:4a:2f:b2:24:4b:98:28:fc:07:f5:3a:
ce:8f:f1:e2:4b:76:2c:d1:ab:69:60:94:ba:ee:72:
64:0b:f3:46:7a:99:f4:6b:ba:f3:78:8e:60:fb:df:
7c:4a:8b:85:47:df:31:93:71:3c:1c:87:08:b1:bd:
10:07:b5:f1:39:f3:4d:44:f9:f7:d6:0b:52:3d:ac:
e2:ab:f3:2a:3d:c4:6c:99:5e:3f:d2:c7:7f:07:f0:
7a:4b:4a:1f:5f:38:a8:01:9b:f9:e4:86:de:64:fc:
dd:72:1e:4c:cb:73:cd:10:ef:ab:25:0b:8a:ad:6a:
cd:80:1f:39:f0:90:52:db:0a:aa:a3:52:52:20:2d:
89:a3:4b:81:af:b8:f3:02:30:12:24:3b:a1:21:90:
09:ca:2a:dc:b1:08:ad:01:b1:3f:63:31:5e:51:7c:
6b:dc:2e:cd:62:45:88:46:4e:2c:53:33:47:ff:e2:
09:9b:bd:22:07:17:6c:25:7c:fc:27:68:c9:ee:53:
6c:20:34:c7:a7:fe:2e:f3:10:ba:c2:67:6e:0c:95:
4f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9F:26:90:69:D1:56:59:EF:C7:26:67:DF:14:BB:7B:75:4B:25:D3
X509v3 Authority Key Identifier:
keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/f58mkGnRVlnvxyZn3xS7e3VLJdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.77.49.0/24
88.80.127.0/24
213.149.154.0/24
213.149.156.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:98:b4:77:86:c9:0e:92:8e:0f:51:2f:a2:d7:89:7e:2e:32:
fa:d4:05:b4:4a:06:31:3f:27:f9:9f:24:38:74:a3:58:de:34:
ea:2b:fc:f1:56:23:20:85:78:dc:87:6d:f8:b0:62:04:cf:15:
1d:86:33:2d:50:11:56:b9:91:56:16:a4:36:13:26:61:cc:c9:
71:80:de:35:2c:6a:4f:47:db:af:23:fd:c1:a3:a3:7b:9d:29:
d4:57:c2:06:93:f0:3b:67:9e:b8:4d:0f:fd:80:2a:47:22:c0:
bc:08:f6:e8:b6:a5:06:91:b0:96:2d:33:cb:82:d0:35:6d:c6:
7a:5a:55:59:fd:de:de:4a:6c:cb:20:6d:20:f9:78:8d:b2:c8:
65:ca:1a:2f:ca:89:0f:06:93:24:9f:ca:89:7e:61:19:61:03:
b3:26:50:6c:b3:b6:41:3c:57:74:a6:38:a9:92:9c:27:d9:74:
6e:7b:3c:f0:4d:bf:6c:b0:21:6b:71:0a:2e:90:40:7d:1c:39:
19:f5:4b:71:4e:bf:20:97:f4:9f:51:76:ee:3e:e8:1b:a7:c1:
78:1f:4e:76:8e:2b:89:6b:e4:59:1e:26:af:fe:1e:63:b5:c3:
7e:84:6f:b5:c2:4e:70:8b:8e:04:c5:c6:c0:72:5a:d0:4e:2e:
43:e6:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:16:22 2024 by rpki-client on console-fra.rpki-client.org