Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/eLKjsnleQo62R_zd2EXEceVqEsc.roa
File: eLKjsnleQo62R_zd2EXEceVqEsc.roa (raw, json)
Hash identifier: DCUDg8152w0dJ3WORrg8ogeYtu09Yt5ITCIsWyAPeRA=
Subject key identifier: 78:B2:A3:B2:79:5E:42:8E:B6:47:FC:DD:D8:45:C4:71:E5:6A:12:C7
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 018CC492347E53E260DB7B9982521CD85D1B
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/eLKjsnleQo62R_zd2EXEceVqEsc.roa
Signing time: Mon 01 Jan 2024 10:29:25 +0000
ROA not before: Mon 01 Jan 2024 10:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31029
IP address blocks: 109.107.72.0/21 maxlen: 21
109.107.88.0/21 maxlen: 21
94.139.208.0/21 maxlen: 21
77.76.184.0/21 maxlen: 21
77.76.128.0/21 maxlen: 21
77.76.138.0/24 maxlen: 24
77.76.137.0/24 maxlen: 24
77.76.139.0/24 maxlen: 24
77.76.140.0/24 maxlen: 24
77.76.141.0/24 maxlen: 24
77.76.143.0/24 maxlen: 24
77.76.142.0/24 maxlen: 24
77.76.152.0/21 maxlen: 21
77.76.152.0/24 maxlen: 24
77.76.154.0/24 maxlen: 24
77.76.153.0/24 maxlen: 24
77.76.155.0/24 maxlen: 24
77.76.157.0/24 maxlen: 24
77.76.156.0/24 maxlen: 24
77.76.159.0/24 maxlen: 24
77.76.158.0/24 maxlen: 24
2a03:2c0:e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:34:7e:53:e2:60:db:7b:99:82:52:1c:d8:5d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Jan 1 10:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78b2a3b2795e428eb647fcddd845c471e56a12c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:14:bf:d3:cb:42:ef:d4:b1:6c:6b:f5:08:c9:
d3:aa:4e:5c:73:02:05:c3:54:18:44:a8:f6:14:09:
aa:00:20:25:07:fa:8d:18:15:fe:7d:3c:c4:b6:6d:
36:82:cf:82:b0:17:02:88:ec:50:0e:70:9a:2c:ce:
4a:32:84:a2:7b:55:63:0f:c8:77:2d:9c:81:06:c3:
0d:f8:54:7a:83:67:b3:a1:3f:87:19:51:57:3d:94:
5c:1e:5d:89:3c:dc:01:d8:68:3b:f5:a3:ee:0a:ab:
9f:7c:2a:48:80:c9:a8:d7:73:02:3a:52:ed:21:c4:
b1:54:8d:7d:52:f0:54:59:b6:d8:8e:c3:a0:77:e7:
1e:5a:86:74:01:77:a7:b9:fc:74:95:c2:5a:13:6a:
11:2f:9e:f7:54:c8:56:b2:ac:5f:c2:15:80:3e:2a:
ff:9e:27:74:9e:93:3b:cc:e1:62:6e:37:1b:59:fa:
c0:b5:cb:da:7c:38:8d:f6:63:b1:13:27:94:c5:e2:
4e:93:06:90:46:50:62:f8:7e:6f:6c:05:fb:0e:ca:
70:3a:af:44:c0:af:0b:1e:9e:f5:e6:c1:9d:d3:82:
c0:55:b9:6c:58:ee:9c:c7:1f:ff:6f:fe:92:89:4d:
47:aa:96:55:8a:42:44:4e:c7:c2:7e:5a:b9:8c:50:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B2:A3:B2:79:5E:42:8E:B6:47:FC:DD:D8:45:C4:71:E5:6A:12:C7
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/eLKjsnleQo62R_zd2EXEceVqEsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.128.0/21
77.76.137.0-77.76.143.255
77.76.152.0/21
77.76.184.0/21
94.139.208.0/21
109.107.72.0/21
109.107.88.0/21
IPv6:
2a03:2c0:e::/48
Signature Algorithm: sha256WithRSAEncryption
63:29:14:90:c3:27:11:0b:e8:35:3b:41:1a:87:d6:75:1b:a9:
cc:fb:b9:e0:bd:de:92:7f:f0:be:47:a8:cc:c9:20:4e:98:34:
68:07:83:7d:1a:5e:21:29:26:2f:ed:db:53:ec:2d:45:26:1b:
f4:12:11:63:34:80:18:19:d5:ce:3f:be:60:34:41:fc:0c:d5:
0c:e5:d8:4a:cf:bc:5a:01:47:6e:2b:f0:3b:11:2c:9b:e5:5e:
11:bc:dc:60:d2:d9:3e:af:0c:af:80:6c:6f:e2:9c:fa:88:f2:
9e:6b:34:58:2d:d3:5f:00:8c:a0:7e:e8:cb:0f:9f:04:42:c8:
30:7a:0a:d2:8d:0c:c2:6d:0f:00:5e:2b:b2:90:62:0e:9b:b1:
ae:50:b5:3d:ec:6b:1c:f2:2f:95:ad:16:62:6c:6e:58:92:1a:
ea:8e:d3:f7:51:04:f3:c4:69:ae:86:3f:0c:93:f3:a1:df:38:
ab:fb:a8:25:06:e6:bb:2e:a1:f2:8b:fb:36:97:e8:7a:b8:fe:
95:18:ac:0a:f0:19:b5:76:d9:51:3e:5b:6b:5b:c0:e7:10:49:
b9:2a:06:b9:d1:dd:9d:a2:1b:21:2e:1a:bb:d8:aa:3f:59:c6:
60:2f:4c:9b:81:3b:71:43:1a:db:72:3f:62:33:d1:43:0e:d6:
e3:d9:45:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 8 05:19:14 2024 by rpki-client on console-fra.rpki-client.org