Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/yQlBg7dz21eqJ2u0KuBSgd7Nu40.roa
File: yQlBg7dz21eqJ2u0KuBSgd7Nu40.roa (raw, json)
Hash identifier: k9g3ksd7S9frgZIJ7bYxAGdwZPRCgqHHPmdbtfBrc8Y=
Subject key identifier: C9:09:41:83:B7:73:DB:57:AA:27:6B:B4:2A:E0:52:81:DE:CD:BB:8D
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018D5E4B73D63E2CC917EDB6C30398F80946
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/yQlBg7dz21eqJ2u0KuBSgd7Nu40.roa
Signing time: Wed 31 Jan 2024 06:53:39 +0000
ROA not before: Wed 31 Jan 2024 06:53:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 79.98.244.0/24 maxlen: 24
79.98.245.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
185.221.24.0/24 maxlen: 24
185.225.168.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:4b:73:d6:3e:2c:c9:17:ed:b6:c3:03:98:f8:09:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 31 06:53:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9094183b773db57aa276bb42ae05281decdbb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f6:14:cb:9c:0d:c4:f3:f4:f7:9d:90:0a:eb:
32:7c:1c:25:aa:fe:99:38:e8:f7:9c:05:31:57:3f:
5d:ca:47:cc:a0:00:06:8f:d4:b7:c0:e7:33:d7:bf:
86:ee:2d:6f:b9:f8:92:21:84:c8:2a:86:c5:67:a3:
38:3b:55:4b:0b:c3:0c:b4:93:45:35:75:ae:50:f2:
e6:bc:31:9e:8c:d8:70:e3:f4:7c:81:74:e5:a7:b5:
54:70:b9:7d:d0:90:7f:90:c8:ea:e2:70:c2:a2:f2:
03:bd:dd:0c:98:43:d7:b5:89:32:00:09:ed:a8:1b:
82:8f:70:20:6c:88:d8:eb:1e:04:66:bf:29:fc:c3:
91:8c:2d:c7:0c:8f:f1:d0:ab:7d:f1:c4:42:44:b8:
69:52:4a:92:61:2d:e4:31:2a:37:5c:2b:21:0c:c3:
b6:bd:ff:02:e8:70:71:d8:8c:7b:78:39:5f:f1:20:
b4:fc:1f:ac:f2:98:5c:7b:bf:bd:7f:1b:03:d4:18:
d8:23:ae:2c:53:c7:9a:b0:66:57:21:18:f3:b6:e5:
90:06:65:f2:82:1a:aa:ce:22:e3:86:83:57:6e:31:
d0:c9:7d:0c:af:f8:fd:bc:53:53:0b:4b:f3:d3:be:
b5:40:d6:c9:96:0a:cc:b6:c2:49:be:b0:14:94:3b:
a2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:09:41:83:B7:73:DB:57:AA:27:6B:B4:2A:E0:52:81:DE:CD:BB:8D
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/yQlBg7dz21eqJ2u0KuBSgd7Nu40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.244.0/23
176.125.250.0/24
185.221.24.0/24
185.225.168.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:73:1a:a5:19:a2:34:fd:75:dd:15:87:9b:f7:68:d3:f6:45:
aa:46:49:b4:77:1c:64:31:d7:19:89:a1:d3:7a:b4:10:34:2d:
63:9e:50:df:ef:36:ac:d1:b5:6e:18:3f:42:ff:a1:ae:a9:05:
98:7d:ce:8e:10:1a:22:da:b7:ed:3c:d0:40:35:e7:42:39:c6:
6c:01:c8:2b:d2:00:91:cf:ff:40:2a:4e:c3:0f:26:0c:dd:c5:
64:79:be:94:5a:3a:36:7e:d0:2f:8a:b4:55:8a:86:54:fd:87:
c1:62:4f:39:8f:a3:cb:25:a5:7e:66:fd:51:f8:f4:b5:b5:62:
9b:e7:51:a4:1d:65:85:4a:51:ad:0b:4c:e0:49:6b:44:ed:cc:
e7:7b:15:1e:7a:91:2f:7f:c5:e7:72:1b:4d:68:60:5e:0a:56:
e2:d2:4f:33:2e:ab:2e:97:6c:1c:c7:37:4b:37:45:41:c0:91:
88:c3:a8:fb:35:ee:ac:c2:3b:fd:3c:f2:41:06:4f:82:79:a0:
de:c4:2f:88:f9:6e:d1:9d:37:06:4a:6a:2d:6f:4f:2d:60:5c:
cb:43:fa:6d:15:8b:b8:35:e0:df:1f:e3:a1:88:9a:fa:a9:b8:
72:93:d7:fb:31:9a:c8:7b:09:3b:05:40:20:93:37:9f:26:7f:
4d:c0:cc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:29:53 2024 by rpki-client on console-fra.rpki-client.org