Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/yWuLZqs9R109sDRPYWF3LIvSxfk.roa
File: yWuLZqs9R109sDRPYWF3LIvSxfk.roa (raw, json)
Hash identifier: Urhve25a7NkR3wTzLxBAud+U/nR02t+w3qgpMGEvOe8=
Subject key identifier: C9:6B:8B:66:AB:3D:47:5D:3D:B0:34:4F:61:61:77:2C:8B:D2:C5:F9
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0192DA5465E698E9C192BF70F2EBF6C5C135
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/yWuLZqs9R109sDRPYWF3LIvSxfk.roa
Signing time: Tue 29 Oct 2024 22:10:17 +0000
ROA not before: Tue 29 Oct 2024 22:10:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50801
IP address blocks: 5.252.232.0/22 maxlen: 24
80.78.132.0/22 maxlen: 24
194.120.126.0/24 maxlen: 24
2a07:6f40::/29 maxlen: 48
2a0d:2140::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:da:54:65:e6:98:e9:c1:92:bf:70:f2:eb:f6:c5:c1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Oct 29 22:10:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c96b8b66ab3d475d3db0344f6161772c8bd2c5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:4d:18:6d:16:09:cb:16:7d:c4:61:c9:0d:
a2:7b:92:05:00:57:80:dd:7e:06:bc:b0:cf:31:e0:
19:9b:d3:8a:3d:b0:6b:69:7f:30:18:5e:81:6a:69:
18:47:c3:0f:b0:43:d3:04:f6:38:97:93:5c:c7:12:
ab:38:fd:10:ea:82:a0:9d:5a:12:f0:e7:a3:e2:97:
d6:88:03:bf:60:48:39:07:b4:34:ef:10:26:71:52:
21:f1:74:16:33:a3:96:6e:f7:c3:da:9e:bc:20:9b:
71:8f:99:4d:b8:48:2c:4a:ea:7d:7e:24:42:99:a0:
9c:85:ff:64:ce:c8:de:ee:f6:19:79:b6:a9:67:63:
c9:6a:e0:bb:aa:d1:ff:84:e0:72:3e:64:08:88:01:
f3:c4:1a:76:60:50:8a:69:5c:b5:2a:77:c9:2a:c3:
71:f1:68:23:76:76:8e:04:2f:e3:5e:03:74:a5:b2:
4a:b7:eb:11:a5:d5:bd:e3:34:0d:6f:80:45:cd:c9:
88:70:fd:5a:af:88:8d:83:b0:53:a8:74:a8:72:26:
0a:e9:92:dc:81:6b:21:b4:41:91:0d:0f:a9:72:06:
ae:c9:04:b8:c9:6e:72:06:cd:89:d1:e6:c1:b3:a2:
6e:12:57:7e:d8:e4:3a:85:73:6e:32:e7:0b:f6:50:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6B:8B:66:AB:3D:47:5D:3D:B0:34:4F:61:61:77:2C:8B:D2:C5:F9
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/yWuLZqs9R109sDRPYWF3LIvSxfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.232.0/22
80.78.132.0/22
194.120.126.0/24
IPv6:
2a07:6f40::/29
2a0d:2140::/29
Signature Algorithm: sha256WithRSAEncryption
4f:46:e7:9b:b5:7e:ee:0a:77:01:ae:b9:a2:d4:e8:29:93:be:
8a:a4:d0:98:c7:48:01:fc:d8:aa:db:46:ee:95:ba:38:c6:af:
73:e0:44:31:f2:15:4f:81:0f:9b:93:34:2b:47:4e:ab:81:82:
76:f6:ae:e4:56:3c:7f:23:f0:67:6c:12:e0:4b:ef:ec:03:c5:
86:b8:c3:42:34:fc:12:b9:bb:66:7e:ef:ad:72:66:b2:0f:44:
5b:8a:b4:1e:61:59:f6:8e:28:76:db:c2:39:f7:12:0d:5f:1c:
96:10:03:ba:fd:68:09:f9:bd:9e:d0:63:0a:80:93:f8:58:7a:
3b:ec:61:07:d9:f7:36:bd:f9:b6:e9:03:9d:38:ea:72:87:6b:
11:b7:60:f0:2a:35:9d:c3:fb:19:c2:cb:3b:12:7b:b2:0b:41:
cb:7a:8c:1a:37:ac:59:c6:a0:ac:12:d9:6a:b0:9c:2c:69:63:
09:9e:d9:5b:6c:a6:72:39:cf:6e:4a:c6:68:3b:f3:7a:6b:25:
1b:b8:a9:27:ba:5d:56:39:90:14:ba:42:7e:b2:6a:af:9a:1e:
8e:b4:50:e7:80:a1:9f:26:1b:db:cd:a8:ec:11:c5:91:e7:ab:
ce:39:12:62:da:7c:f9:78:b7:6f:87:32:66:69:72:f1:a7:eb:
fc:36:ee:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:13:38 2024 by rpki-client on console-fra.rpki-client.org