Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/4cK89waayyyjB86xZVmLCvIWRtY.roa
File: 4cK89waayyyjB86xZVmLCvIWRtY.roa (raw, json)
Hash identifier: aQ/c6oeA7lFjokJJT8Dm9CilI8xbrnCE+feLOTpYnxo=
Subject key identifier: E1:C2:BC:F7:06:9A:CB:2C:A3:07:CE:B1:65:59:8B:0A:F2:16:46:D6
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 01904FF3C8D27784F5CEB1144AD4E1878EA5
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/4cK89waayyyjB86xZVmLCvIWRtY.roa
Signing time: Tue 25 Jun 2024 15:11:35 +0000
ROA not before: Tue 25 Jun 2024 15:11:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41046
IP address blocks: 77.242.80.0/20 maxlen: 20
81.200.48.0/20 maxlen: 20
81.200.48.0/21 maxlen: 21
81.200.56.0/21 maxlen: 21
82.114.192.0/19 maxlen: 19
178.72.192.0/18 maxlen: 18
178.72.192.0/19 maxlen: 19
178.72.224.0/19 maxlen: 19
2a07:b5c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:f3:c8:d2:77:84:f5:ce:b1:14:4a:d4:e1:87:8e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jun 25 15:11:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1c2bcf7069acb2ca307ceb165598b0af21646d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:8d:1e:3b:45:23:31:b7:11:e3:ef:8c:07:
cd:5e:80:60:e5:33:2f:de:71:d5:1a:51:c0:70:e4:
f3:5c:90:71:bc:fb:5c:1d:ca:e1:9d:88:20:4d:ec:
7e:f8:1d:d4:7c:dd:22:8d:0d:0d:52:a7:fc:c8:6b:
ca:21:84:75:d1:2d:1a:a8:00:c1:20:36:72:38:ba:
e8:ab:ce:12:99:3b:10:29:f8:c6:a8:65:9b:5b:b4:
6b:ef:d5:2e:33:d3:0a:5f:c4:37:6b:e4:ef:5e:63:
4e:ac:39:3c:97:bc:a2:97:90:69:d3:14:28:5a:f9:
90:2c:ee:4c:42:a1:c9:1c:34:48:2a:75:13:43:4f:
89:15:b6:14:11:51:fa:e8:ce:b5:64:8f:71:2d:03:
d0:9d:79:1b:fc:5c:0d:cd:3a:1c:35:9e:36:60:de:
52:e0:bb:1d:5d:5d:ed:08:4a:37:64:e8:54:a9:1b:
47:c9:db:3e:cf:50:ee:99:6b:13:2f:1d:1a:86:f6:
36:c4:29:46:64:ef:58:aa:0a:78:f0:89:64:93:3f:
e6:e8:f5:0c:38:04:56:a5:b9:cf:1f:d2:f2:78:b4:
9d:a2:0e:ef:2b:5b:e8:bb:b6:9a:1f:44:3f:8a:5b:
a5:e5:55:1f:0b:7a:fb:ef:05:89:86:e6:ca:2f:0e:
5f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C2:BC:F7:06:9A:CB:2C:A3:07:CE:B1:65:59:8B:0A:F2:16:46:D6
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/4cK89waayyyjB86xZVmLCvIWRtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.80.0/20
81.200.48.0/20
82.114.192.0/19
178.72.192.0/18
IPv6:
2a07:b5c0::/29
Signature Algorithm: sha256WithRSAEncryption
83:d0:7e:01:0f:1b:6b:1d:f2:2a:37:74:ab:4f:25:5f:ab:59:
b5:32:20:11:8e:1d:ae:b8:b7:a0:2f:21:bc:ad:71:eb:94:98:
d5:04:1a:ad:0e:15:64:d5:94:38:c7:30:ed:9a:5d:14:48:af:
1e:ef:8d:59:2a:3a:f0:b9:ac:59:15:21:75:22:1b:ac:13:ef:
ef:b8:02:65:b8:eb:9e:2b:44:cc:78:3d:6a:23:6b:30:7a:19:
90:20:fa:60:a0:66:79:f6:b1:38:6b:29:58:5f:09:dc:b3:e5:
ac:ef:fc:fa:87:3a:87:34:dd:90:12:10:8a:9f:f7:e6:14:eb:
73:48:c5:0f:6b:4d:ed:35:7b:58:55:b1:f4:0e:99:78:5b:07:
48:bc:24:9a:50:e1:0e:9f:e5:34:f2:e7:a2:b1:ae:ab:03:79:
1e:23:b0:0e:d2:e1:dd:cd:86:5f:13:1a:1a:03:a4:98:88:4e:
44:a6:bc:41:30:5d:a7:cd:43:82:b3:da:f6:c0:9e:4c:35:11:
06:7d:01:c4:f9:eb:40:6b:ad:29:0a:3f:bf:c0:3b:78:84:29:
a5:61:fc:42:ae:83:e7:99:d7:b7:eb:cc:23:57:c3:ab:ff:87:
8a:3b:e2:f3:60:bc:fb:61:e4:89:41:51:55:5c:de:b9:91:df:
ea:61:53:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:14:25 2024 by rpki-client on console-ams.rpki-client.org