Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/fY9e3UDs5Q6_dRWS05zGANbbhTQ.roa
File: fY9e3UDs5Q6_dRWS05zGANbbhTQ.roa (raw, json)
Hash identifier: mopDPxXBUHLqCiKPbw1elk/+05at19UTWasX49Qo8to=
Subject key identifier: 7D:8F:5E:DD:40:EC:E5:0E:BF:75:15:92:D3:9C:C6:00:D6:DB:85:34
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018CC94DAEE294C7AB54AEEFC6C9E8B86B0F
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/fY9e3UDs5Q6_dRWS05zGANbbhTQ.roa
Signing time: Tue 02 Jan 2024 08:32:40 +0000
ROA not before: Tue 02 Jan 2024 08:32:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60711
IP address blocks: 84.236.248.0/24 maxlen: 24
84.236.249.0/24 maxlen: 24
5.154.39.0/24 maxlen: 24
84.236.182.0/24 maxlen: 24
84.236.181.0/24 maxlen: 24
88.148.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:ae:e2:94:c7:ab:54:ae:ef:c6:c9:e8:b8:6b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 08:32:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d8f5edd40ece50ebf751592d39cc600d6db8534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6e:1e:f9:14:35:b5:03:f9:1b:ab:74:ac:39:
a3:96:55:a2:d3:a5:21:97:6e:0e:2c:e8:66:69:f3:
3d:fd:ff:79:68:87:77:ff:a5:f6:ba:b8:ea:68:f4:
3c:d7:bb:95:88:61:24:04:5f:c8:92:63:4b:c9:75:
86:90:42:de:c1:8e:bd:16:b0:04:99:6c:f6:57:86:
41:9d:23:df:c2:42:be:0f:ab:2c:ec:fa:74:ee:ef:
c9:ff:ab:e9:15:18:0e:8a:86:55:7d:1c:9d:2e:3b:
66:82:f3:07:d0:c8:a7:b4:68:07:db:10:3c:68:11:
a8:a2:cd:30:03:16:ad:6d:39:d5:59:e6:bf:48:b2:
a2:f2:93:8d:49:2f:23:50:39:5c:e8:b0:cb:16:b0:
23:df:48:41:6c:5f:8f:15:87:ae:c6:4a:de:09:f1:
be:3a:3c:fb:89:fc:1e:5d:81:5c:c6:2d:2f:e1:76:
50:1b:6b:38:5c:5b:de:13:2a:cb:45:b8:d9:33:50:
6a:c3:3f:e7:d7:35:30:d9:ba:e6:7d:30:f4:32:a8:
3d:9d:46:39:37:91:71:cc:af:79:b7:83:17:ea:89:
e3:88:29:71:2f:5e:17:94:b8:78:12:7c:da:2b:e4:
d6:42:56:d0:0d:c6:34:28:a8:5f:b3:e2:94:5c:c8:
a4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8F:5E:DD:40:EC:E5:0E:BF:75:15:92:D3:9C:C6:00:D6:DB:85:34
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/fY9e3UDs5Q6_dRWS05zGANbbhTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.39.0/24
84.236.181.0-84.236.182.255
84.236.248.0/23
88.148.98.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:09:99:51:fb:5f:eb:2e:b8:85:42:d0:d6:75:ab:1b:3f:88:
fd:a1:0e:84:3e:3c:54:fa:21:db:a6:dd:71:2b:7c:00:18:4f:
c9:21:bc:85:a1:36:ff:10:48:e3:a9:d7:f5:8e:c6:a0:96:e3:
06:7b:80:09:dc:68:9b:a6:cc:c6:e0:29:49:24:a4:b1:89:01:
ab:fb:f8:94:e2:e9:0c:89:3c:5d:0f:2f:1b:f9:1d:b5:77:1a:
ce:b8:3d:9d:e8:42:50:60:6d:52:94:c2:4f:68:ab:82:18:91:
61:d5:d5:c0:21:6c:cc:e3:38:57:ee:08:7b:5f:d9:bc:fc:aa:
d0:59:d6:a6:2d:03:32:4c:e4:5d:d9:3c:66:00:87:23:0e:43:
2c:0d:0f:47:7f:8e:6b:62:02:44:79:b2:f6:55:0a:a8:3b:a0:
52:e5:61:98:c5:30:8d:a5:e6:e0:0f:78:e0:21:db:67:19:a2:
37:0a:15:e5:e5:5d:c4:26:1b:a2:a7:c0:83:c4:2f:f2:47:8b:
cf:0d:c7:38:25:ae:3f:95:37:d8:0e:b2:bd:af:e1:85:68:9b:
f3:3a:3a:86:46:05:b3:1c:8c:33:e9:6b:14:c5:e9:dc:66:0b:
0c:a1:dc:1c:84:09:15:0d:98:b5:51:d9:ec:a6:63:fc:da:d2:
33:2f:dc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:34:13 2024 by rpki-client on console-fra.rpki-client.org