Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/E58QBI8R_0cQCBnCwIz0vSTAk7s.roa
File: E58QBI8R_0cQCBnCwIz0vSTAk7s.roa (raw, json)
Hash identifier: FZ6IAJv9g0yW8ouO8snlc3HqwW+/JYDS5mkVvYakKDI=
Subject key identifier: 13:9F:10:04:8F:11:FF:47:10:08:19:C2:C0:8C:F4:BD:24:C0:93:BB
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01927CF2FE2B00852EEAF0EE0DF0DF21A0D6
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/E58QBI8R_0cQCBnCwIz0vSTAk7s.roa
Signing time: Fri 11 Oct 2024 18:59:12 +0000
ROA not before: Fri 11 Oct 2024 18:59:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 78.135.73.0/24 maxlen: 24
78.135.97.0/24 maxlen: 24
78.135.100.0/24 maxlen: 24
78.135.104.0/24 maxlen: 24
185.17.136.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.190.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.236.0/24 maxlen: 24
188.132.249.0/24 maxlen: 24
212.68.35.0/24 maxlen: 24
212.68.55.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7c:f2:fe:2b:00:85:2e:ea:f0:ee:0d:f0:df:21:a0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 11 18:59:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=139f10048f11ff47100819c2c08cf4bd24c093bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:44:06:f6:3c:aa:8c:26:bb:88:50:ec:7e:ef:
61:0a:df:37:f1:ee:9b:24:78:2e:44:cc:b8:1f:05:
b6:83:4a:6e:be:1e:6c:9f:66:89:6b:e5:e8:cb:05:
74:bb:b5:93:05:61:27:28:91:24:66:39:9f:93:d9:
98:a0:00:e0:68:65:f2:5e:00:92:02:ea:6b:4c:87:
80:1d:a6:cb:7e:0b:2b:10:7f:c9:b9:b4:61:c1:27:
62:9b:5f:b7:cc:4a:47:f5:85:c6:dc:d2:85:15:d3:
48:7d:44:f3:df:0f:48:a1:aa:3e:8c:a7:c9:a1:c1:
fe:3b:ef:6a:80:7f:2f:6d:c1:a3:c9:21:ca:5b:fb:
56:e8:b4:f3:7b:e6:0a:01:74:6d:a7:d0:1c:4e:0c:
b7:fb:63:c3:15:91:4e:9a:76:60:21:83:95:9f:9d:
27:6b:09:5a:6a:23:d1:16:8e:d1:8e:89:e1:04:cc:
20:da:b2:50:e6:dc:98:78:07:c1:9c:41:02:2a:19:
bf:05:fd:ee:92:42:9e:43:2a:8c:c0:9a:07:45:f3:
c9:93:b0:e3:8f:c0:21:89:28:67:c5:2d:d7:1a:2b:
5f:ea:31:3f:50:f0:70:d9:65:b8:79:0c:be:bd:79:
b3:db:8a:04:f6:15:52:e6:bb:6a:73:26:59:c2:2d:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9F:10:04:8F:11:FF:47:10:08:19:C2:C0:8C:F4:BD:24:C0:93:BB
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/E58QBI8R_0cQCBnCwIz0vSTAk7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.73.0/24
78.135.97.0/24
78.135.100.0/24
78.135.104.0/24
185.17.136.0/24
188.132.189.0-188.132.191.255
188.132.236.0/24
188.132.249.0/24
212.68.35.0/24
212.68.55.0/24
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
5a:fa:3f:f0:02:6d:aa:f5:63:31:0b:17:ec:1d:77:ae:87:c8:
50:4d:14:c1:c5:5f:ba:0f:4c:70:67:4a:46:09:a5:e7:c6:1c:
d2:86:28:66:34:f5:dc:7e:39:a3:94:57:6f:d7:40:98:63:c7:
33:eb:66:7d:3b:5f:eb:d9:32:3a:94:ec:8f:04:1e:01:70:cf:
9d:7f:9d:d1:dd:ef:bb:11:53:58:1c:00:bb:19:6f:0d:35:94:
c7:76:4e:2a:54:e5:af:71:72:7b:9c:2c:53:e5:d4:a2:a4:86:
7e:7e:0e:fa:37:76:a5:2d:91:94:53:bb:46:31:d3:cb:5c:81:
c0:ed:6c:77:ae:86:11:2e:ec:9c:5c:ef:0d:95:e5:cd:b7:cf:
47:0d:0c:30:23:4e:e2:2e:b0:01:c3:73:ed:9d:b3:a6:72:bd:
1c:f6:6c:86:1c:8c:bf:a4:1d:cd:ef:b3:39:da:8c:5e:a0:47:
55:37:70:a7:b0:dc:cb:36:b3:0d:e9:87:25:c1:da:c1:6c:6f:
da:f6:c8:1b:9d:bb:b8:8a:72:e6:42:cf:40:95:2f:34:6b:8e:
a6:32:89:5e:9e:04:0b:9f:35:4b:e9:98:29:d2:c3:31:6b:8c:
94:47:e8:bc:de:9f:43:95:24:fa:58:03:dd:15:ff:6c:72:82:
15:fe:a8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:51:57 2024 by rpki-client on console-fra.rpki-client.org