Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/64jRN7u8iycTyySu40HU3lAVFY8.roa
File: 64jRN7u8iycTyySu40HU3lAVFY8.roa (raw, json)
Hash identifier: 86YgjgGeQd/t+STeImIhUijO/zK93AZnFsQiTMJdZ5c=
Subject key identifier: EB:88:D1:37:BB:BC:8B:27:13:CB:24:AE:E3:41:D4:DE:50:15:15:8F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019092A6CBD642BCA243CC4438E5D88F07EE
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/64jRN7u8iycTyySu40HU3lAVFY8.roa
Signing time: Mon 08 Jul 2024 14:02:03 +0000
ROA not before: Mon 08 Jul 2024 14:02:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206654
IP address blocks: 37.77.144.0/24 maxlen: 24
45.88.124.0/22 maxlen: 22
185.212.11.0/24 maxlen: 24
195.211.48.0/24 maxlen: 24
2a0f:fa00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:92:a6:cb:d6:42:bc:a2:43:cc:44:38:e5:d8:8f:07:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 8 14:02:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb88d137bbbc8b2713cb24aee341d4de5015158f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:5d:0f:36:c4:b7:05:56:df:fd:81:7d:96:
1e:e9:c5:7b:e3:c4:15:77:0f:9b:11:75:81:87:61:
8d:aa:cc:69:84:72:a2:03:02:70:78:e2:03:c0:05:
b5:2e:34:84:e7:70:07:5b:3e:fd:c1:62:7f:bf:9e:
3a:d1:83:b6:db:34:08:cd:40:a6:32:78:2c:b9:7c:
76:31:3f:24:a5:90:76:b8:71:32:9f:14:97:d6:b7:
4a:2b:21:ba:99:31:9f:4e:7f:90:f0:cd:9b:87:8f:
1f:e5:f6:10:25:27:09:78:be:7f:25:8c:9c:e6:a3:
d2:62:29:51:0a:bb:1f:09:13:25:d6:5d:8e:7c:26:
6c:e6:44:32:0d:af:a6:61:b1:1c:87:b4:92:57:a3:
3a:11:8d:74:98:75:59:e5:3f:b4:07:45:67:3f:64:
35:34:b2:22:55:de:9b:c6:44:33:99:2b:45:73:84:
ef:c9:25:49:92:c3:61:bd:ce:db:09:ff:f8:32:cd:
be:a9:19:c6:81:0b:41:12:6a:a7:14:78:40:d1:cb:
3a:4d:ba:b4:5c:01:6e:05:ba:42:bc:09:4b:1d:3d:
43:eb:a4:54:18:ee:7c:9d:8c:e5:fa:ec:ad:31:a2:
bb:de:9b:dd:d5:57:de:74:1f:d2:3b:15:05:74:aa:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:88:D1:37:BB:BC:8B:27:13:CB:24:AE:E3:41:D4:DE:50:15:15:8F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/64jRN7u8iycTyySu40HU3lAVFY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.144.0/24
45.88.124.0/22
185.212.11.0/24
195.211.48.0/24
IPv6:
2a0f:fa00::/29
Signature Algorithm: sha256WithRSAEncryption
a2:a4:a4:fd:ce:d6:0c:56:e0:0a:0c:4b:1b:0c:a3:8d:a9:64:
46:9a:2c:4c:65:4e:3d:81:33:9e:d7:4d:7a:c2:50:df:7a:ee:
0d:bf:5e:ce:41:96:58:b5:8b:66:ab:bd:5d:94:09:43:33:19:
05:20:90:d8:c4:07:d8:f7:f7:fb:f9:53:31:42:1c:e5:c5:d7:
6a:42:b1:b6:2a:36:03:d1:c2:ac:44:4e:de:e3:8e:f8:5c:74:
d9:0e:5c:51:17:3c:d6:5c:1d:1e:0c:26:53:4f:b8:0b:6e:26:
41:06:20:32:de:67:f1:89:4a:53:8b:b4:f4:44:7b:9b:78:c4:
74:aa:01:10:03:00:00:1f:ed:0c:bc:85:b2:d1:fe:d3:83:b7:
a6:7b:77:90:bf:19:98:26:63:a5:e7:1a:8a:68:e3:a3:f3:63:
f6:e5:1f:5e:8b:02:1a:69:5a:87:66:d8:b5:64:bc:13:41:fa:
b3:2f:97:bc:e0:ef:df:56:e7:70:37:22:e9:c6:18:e3:99:86:
7a:65:1a:80:07:e6:95:c5:4d:b2:94:a6:60:17:03:9d:70:d2:
92:59:b0:4d:9d:dc:85:02:31:4e:73:48:55:b3:20:37:9a:5a:
31:80:15:80:23:12:54:7d:eb:ba:23:86:12:12:b4:1d:6e:07:
e7:5f:30:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:31 2024 by rpki-client on console-ams.rpki-client.org