Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/P3kcPgt7tPJ_aTh0ayaNnhoj5WU.roa
File: P3kcPgt7tPJ_aTh0ayaNnhoj5WU.roa (raw, json)
Hash identifier: W/VO1jixKgEbYg7FvQpeH/Ak3LELjnfoos5r93a5/Ak=
Subject key identifier: 3F:79:1C:3E:0B:7B:B4:F2:7F:69:38:74:6B:26:8D:9E:1A:23:E5:65
Certificate issuer: /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial: 018CC42542F511388FA19FEFCF32AFBEAE2C
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/P3kcPgt7tPJ_aTh0ayaNnhoj5WU.roa
Signing time: Mon 01 Jan 2024 08:30:25 +0000
ROA not before: Mon 01 Jan 2024 08:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6775
IP address blocks: 79.134.240.0/20 maxlen: 24
79.134.251.0/24 maxlen: 24
79.134.250.0/24 maxlen: 24
79.134.252.0/24 maxlen: 24
79.134.247.0/24 maxlen: 24
185.22.52.0/24 maxlen: 24
185.22.52.0/22 maxlen: 22
79.134.225.0/24 maxlen: 24
79.134.224.0/19 maxlen: 24
79.134.227.0/24 maxlen: 24
79.134.228.0/24 maxlen: 24
79.134.230.0/24 maxlen: 24
79.134.229.0/24 maxlen: 24
79.134.232.0/24 maxlen: 24
79.134.231.0/24 maxlen: 24
79.134.233.0/24 maxlen: 24
79.134.235.0/24 maxlen: 24
79.134.237.0/24 maxlen: 24
79.134.236.0/23 maxlen: 23
79.134.236.0/24 maxlen: 24
79.134.238.0/23 maxlen: 23
79.134.234.0/24 maxlen: 24
2a04:1d40::/29 maxlen: 29
2001:4b28::/32 maxlen: 32
2a04:1d40::/32 maxlen: 32
2a01:528::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:42:f5:11:38:8f:a1:9f:ef:cf:32:af:be:ae:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Validity
Not Before: Jan 1 08:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f791c3e0b7bb4f27f6938746b268d9e1a23e565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:60:a2:41:aa:0a:d5:b3:11:af:99:f7:e9:
47:e6:f4:96:22:ad:85:14:03:0f:c9:ae:c4:07:a1:
78:16:5c:35:67:f6:52:7e:01:fc:78:77:48:ad:1e:
a3:32:cc:80:05:89:ce:da:07:be:ae:9d:08:b7:d5:
7c:fb:42:ab:95:57:85:f0:40:06:4d:91:53:11:0c:
38:0a:1d:f8:11:ff:a8:cb:db:90:b9:35:d5:7d:65:
f9:68:c6:e8:13:13:de:f6:4e:90:17:72:d6:81:86:
03:a2:d5:a6:9d:1c:d3:aa:5e:8d:6c:61:46:a5:7a:
1b:f8:ca:a5:a8:3d:c7:2f:f4:49:08:11:1c:77:ce:
73:23:a6:22:2b:e5:7a:90:6c:50:0a:ee:72:d8:b8:
03:23:d0:a2:1c:10:5d:10:f8:6b:2b:0c:05:2c:e3:
17:4f:b8:cc:2b:68:84:fd:33:13:d3:cc:6d:18:ea:
95:0e:64:45:1c:18:98:63:a3:43:67:ca:55:b1:12:
fa:e9:9d:56:2c:62:97:03:ad:c7:42:30:9e:ff:f7:
88:59:20:26:3e:6b:aa:c2:2a:30:3e:4a:9f:42:11:
76:82:7b:ed:b1:e0:fb:5f:62:1f:dc:32:92:8e:18:
56:36:78:d5:ee:f5:0a:6d:dc:d5:ac:c0:64:31:94:
37:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:79:1C:3E:0B:7B:B4:F2:7F:69:38:74:6B:26:8D:9E:1A:23:E5:65
X509v3 Authority Key Identifier:
keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/P3kcPgt7tPJ_aTh0ayaNnhoj5WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.134.224.0/19
185.22.52.0/22
IPv6:
2001:4b28::/32
2a01:528::/32
2a04:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
07:5b:fd:78:2d:f8:a4:14:41:cb:ad:3a:7b:75:17:11:39:a3:
95:8c:d9:c1:50:f5:84:51:ab:4f:08:15:71:41:65:82:ad:f0:
5a:24:cb:ca:30:b0:e7:e6:9d:d9:fe:3d:90:a7:5e:62:81:01:
3e:8f:a2:c1:dc:47:e7:06:81:c8:db:9d:31:18:ef:12:92:40:
40:4a:38:9d:d0:77:af:ab:84:e8:18:73:4f:e2:b4:34:2b:dc:
b3:06:eb:a2:19:be:31:fe:25:85:87:3f:3e:94:7a:b5:bc:6f:
c3:10:d2:59:c7:dc:73:a8:06:7f:24:a9:99:bb:22:7d:d9:68:
b2:d8:b0:db:e6:60:b5:29:f5:5e:7c:30:a2:9a:b3:79:79:a9:
47:b0:83:a7:23:0e:24:84:5c:7b:5a:2f:ff:2c:ab:d7:e5:d9:
52:d6:fa:cc:a0:8d:25:41:b5:5f:f0:f6:46:e6:29:db:f4:b3:
5c:bc:87:36:b2:d0:c3:88:63:d9:0f:66:02:24:5f:d8:bf:86:
39:4b:05:4e:de:3a:91:89:ea:62:5c:d9:d7:4c:05:38:5b:55:
eb:f9:80:cb:d3:4f:a7:66:f6:48:cb:46:56:23:af:e9:59:17:
4a:65:ed:f5:25:ed:14:99:d1:dc:62:4b:13:45:b9:43:a2:32:
f0:ec:7b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:15:08 2024 by rpki-client on console-ams.rpki-client.org