Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/um2FsH3h8i5SSutFmP7X5UG0eNg.roa
File: um2FsH3h8i5SSutFmP7X5UG0eNg.roa (raw, json)
Hash identifier: bPfbv9twVEoU5tYPqkoW1Vw7KbY91kpesBfCGRJjD+c=
Subject key identifier: BA:6D:85:B0:7D:E1:F2:2E:52:4A:EB:45:98:FE:D7:E5:41:B4:78:D8
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 018CC56E1EBFD2C797A794CB6E73DAB42E03
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/um2FsH3h8i5SSutFmP7X5UG0eNg.roa
Signing time: Mon 01 Jan 2024 14:29:37 +0000
ROA not before: Mon 01 Jan 2024 14:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49000
IP address blocks: 213.181.77.0/24 maxlen: 24
213.181.72.0/23 maxlen: 23
89.29.190.0/23 maxlen: 23
213.181.89.0/24 maxlen: 24
213.181.90.0/23 maxlen: 23
213.181.92.0/23 maxlen: 23
213.181.94.0/24 maxlen: 24
89.29.206.0/23 maxlen: 23
89.29.225.0/24 maxlen: 24
176.57.96.0/24 maxlen: 24
89.29.253.0/24 maxlen: 24
89.29.247.0/24 maxlen: 24
89.29.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1e:bf:d2:c7:97:a7:94:cb:6e:73:da:b4:2e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Jan 1 14:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba6d85b07de1f22e524aeb4598fed7e541b478d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c1:86:f9:7a:90:b8:3d:13:63:e6:81:bf:50:
fd:48:54:6a:c5:24:42:1c:6d:51:13:ee:c2:0b:5f:
d8:71:04:38:31:d4:9d:ea:42:29:6a:05:39:ef:18:
31:63:c8:91:1d:b6:60:78:3a:61:4c:4a:ed:29:d3:
a4:7e:f7:66:10:18:b4:76:be:5c:0e:b7:87:bc:8c:
c2:fa:61:b0:46:01:14:62:0c:8b:34:79:ab:cb:3e:
cc:cc:47:4d:00:d7:75:a9:f3:2c:c2:ac:b6:c4:81:
b0:7a:0b:a3:9a:68:ec:58:60:57:71:5b:1f:b3:cd:
50:dc:76:4e:26:fe:bf:43:e0:13:e6:d8:07:b9:38:
fb:92:13:81:c3:6c:6b:6d:f6:4d:a3:46:2c:48:57:
34:3c:64:48:4b:dd:3f:df:ed:83:89:0b:0b:ff:d1:
fc:9f:a0:3a:23:83:d6:84:81:ea:73:50:a0:6b:f5:
65:93:7b:13:75:05:b2:e5:42:d1:0f:56:c1:55:d3:
82:8d:6a:c2:90:5e:69:30:f8:ab:3f:f1:70:75:d5:
fa:17:74:8c:14:64:58:f7:e9:a0:64:95:f8:ed:ca:
12:77:66:26:66:cb:2f:e4:d6:01:29:2a:23:57:4c:
de:de:ef:8b:8d:27:77:65:d9:41:34:e5:2c:ca:33:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6D:85:B0:7D:E1:F2:2E:52:4A:EB:45:98:FE:D7:E5:41:B4:78:D8
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/um2FsH3h8i5SSutFmP7X5UG0eNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.190.0/23
89.29.206.0/23
89.29.225.0/24
89.29.247.0/24
89.29.253.0/24
89.29.255.0/24
176.57.96.0/24
213.181.72.0/23
213.181.77.0/24
213.181.89.0-213.181.94.255
Signature Algorithm: sha256WithRSAEncryption
6e:ba:57:31:91:8c:2a:67:ae:d4:bd:31:c9:e5:75:65:90:ee:
1a:83:ab:f5:7f:d2:8f:9e:ef:ec:f9:f3:58:e0:bb:89:62:51:
ee:30:cf:d9:6e:1a:26:25:8b:e5:e4:19:c7:85:00:c2:9e:ff:
8c:0f:f7:04:8e:61:d7:59:97:36:7b:77:52:6d:a8:1b:6d:3c:
6d:2c:43:e4:67:e5:d3:be:61:1b:cf:ac:dd:0a:db:aa:ad:a1:
d7:90:c3:fe:6a:9f:a0:99:86:7a:ec:bf:e6:f8:c5:4e:05:1e:
f6:ad:94:52:27:9f:e5:73:90:7e:8a:e1:b8:0e:7a:49:63:21:
6a:59:7c:83:62:20:48:21:9a:b0:d7:f8:79:19:fb:1d:5d:c3:
9e:5c:4a:3e:d6:e9:45:91:a3:10:d9:a0:6b:14:dc:fd:38:21:
b2:33:30:c5:cc:bb:da:73:8e:ee:a4:ae:64:bb:8a:7b:7b:a0:
9f:98:56:e6:ad:7e:f7:99:8c:20:bc:5d:4c:ff:a9:38:4c:85:
ee:e2:48:e4:7c:09:ec:82:33:fc:e0:73:e8:e0:5b:84:85:09:
4d:3a:47:e5:12:24:96:16:74:b9:91:ed:bc:f1:44:6e:de:af:
16:78:05:4b:81:06:be:e5:4e:a8:e5:f9:02:98:4c:7d:b0:2e:
8e:62:51:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 18 15:42:02 2024 by rpki-client on console-fra.rpki-client.org