Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/AUdz2lz_2Xkft2Dnx5H18qPgyDc.roa
File: AUdz2lz_2Xkft2Dnx5H18qPgyDc.roa (raw, json)
Hash identifier: 2PahhlVLswCAIILt1Ra5zSdVuFNxfT2Zy0aM20t+zxg=
Subject key identifier: 01:47:73:DA:5C:FF:D9:79:1F:B7:60:E7:C7:91:F5:F2:A3:E0:C8:37
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018CC94D38301847CF9438D8F50FEBEDD260
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/AUdz2lz_2Xkft2Dnx5H18qPgyDc.roa
Signing time: Tue 02 Jan 2024 08:32:10 +0000
ROA not before: Tue 02 Jan 2024 08:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 996
IP address blocks: 212.111.211.0/24 maxlen: 24
212.111.218.0/23 maxlen: 23
195.178.128.0/22 maxlen: 24
77.47.252.0/22 maxlen: 24
77.47.248.0/22 maxlen: 24
77.47.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:38:30:18:47:cf:94:38:d8:f5:0f:eb:ed:d2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 08:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=014773da5cffd9791fb760e7c791f5f2a3e0c837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ab:24:62:ed:f8:3b:4e:be:ab:de:ee:7f:b4:
26:a4:1e:97:30:6e:5d:95:2a:85:07:9f:4f:ac:0c:
20:8c:8a:29:52:55:a7:7d:47:72:ac:a5:01:d0:67:
9f:29:1f:64:a6:b8:42:b5:a1:70:86:1c:3a:e7:dd:
b6:0c:74:39:44:a2:a1:5f:1b:58:c0:34:45:c2:89:
96:46:31:4f:46:44:73:1d:fa:c5:da:1c:02:8e:ac:
66:61:73:2f:7b:7c:9e:a1:15:a2:c7:fc:ff:9e:f7:
cf:c2:3f:ca:79:0d:c7:10:73:0e:4c:43:f7:a1:25:
45:79:68:8c:4e:1a:79:b3:5d:88:60:42:d0:76:05:
5d:b0:94:19:4d:69:fe:f5:80:e1:40:4c:a3:94:82:
42:51:53:4d:41:3d:32:e6:8f:bc:9e:83:42:e7:f0:
5b:03:59:ec:ba:c6:91:c7:9d:4c:0e:61:20:3f:62:
3f:81:b4:71:c1:ad:ad:7a:1d:91:5f:2d:73:11:1a:
f8:89:5d:5b:0f:95:10:08:00:09:af:7b:38:54:a0:
b5:6b:82:2d:58:ea:f8:d6:e2:4e:2e:17:e8:70:9f:
1d:54:0c:7c:80:9a:0d:bd:b7:b2:5a:c1:75:65:f7:
24:f5:48:ea:90:6a:fb:04:e7:8f:ae:39:28:f6:86:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:47:73:DA:5C:FF:D9:79:1F:B7:60:E7:C7:91:F5:F2:A3:E0:C8:37
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/AUdz2lz_2Xkft2Dnx5H18qPgyDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.180.0/22
77.47.248.0/21
195.178.128.0/22
212.111.211.0/24
212.111.218.0/23
Signature Algorithm: sha256WithRSAEncryption
88:cd:31:21:0a:50:25:19:25:df:b0:7f:50:f6:80:45:65:12:
35:7a:bb:8c:2f:04:6c:0a:6b:7e:08:9f:5a:b2:e2:03:5f:32:
de:98:d4:bc:e2:58:a2:d5:89:a1:28:83:4d:8a:b2:06:4b:0c:
63:4f:48:7e:b5:41:fc:d1:51:76:37:28:33:7b:08:5f:28:58:
e5:76:de:7e:74:88:d0:4f:01:a0:30:67:94:d9:5e:65:27:94:
74:05:47:98:8e:9e:f5:11:20:3b:42:ad:ee:f6:c6:35:bc:7b:
68:6c:bb:3a:25:d4:40:11:d1:f0:ec:59:b0:85:07:f3:30:fb:
7f:01:89:b3:76:ff:42:dd:8b:25:2a:d6:d4:01:4d:b3:c2:1b:
26:75:79:95:9e:ae:71:dc:f2:4c:69:f4:fa:ae:ba:39:98:2e:
a4:c2:c7:42:fc:1f:ae:de:ec:88:71:92:0b:81:eb:20:6c:a0:
84:47:92:53:d5:f1:15:f0:9b:0c:b0:bd:90:ad:15:91:c4:40:
80:58:b0:b1:1b:d8:63:53:81:9a:ec:e0:8c:51:98:11:50:2a:
45:d3:6a:5a:b6:3d:e7:f1:a4:75:c0:49:24:cc:53:d4:ed:e7:
fe:c7:58:cf:d3:65:32:e5:e3:d2:91:06:f1:44:76:a3:a5:9b:
c3:ee:6c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:03:04 2024 by rpki-client on console-ams.rpki-client.org