Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/uZSfFpKW_j66eSIVVYtJK11RfzM.roa
File: uZSfFpKW_j66eSIVVYtJK11RfzM.roa (raw, json)
Hash identifier: ZnA/ROCJ5gEINLv1UcdxevU4sVxu5jmcWR6ndvoJGm8=
Subject key identifier: B9:94:9F:16:92:96:FE:3E:BA:79:22:15:55:8B:49:2B:5D:51:7F:33
Certificate issuer: /CN=ad52c28ef9a5b2291aba671ac9a65d8faadc5518
Certificate serial: 018DF4C81108C1797E40A6D76995893620AA
Authority key identifier: AD:52:C2:8E:F9:A5:B2:29:1A:BA:67:1A:C9:A6:5D:8F:AA:DC:55:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVLCjvmlsikaumcayaZdj6rcVRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/uZSfFpKW_j66eSIVVYtJK11RfzM.roa
Signing time: Thu 29 Feb 2024 12:12:48 +0000
ROA not before: Thu 29 Feb 2024 12:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35819
IP address blocks: 78.138.192.0/18 maxlen: 18
78.138.240.0/24 maxlen: 24
89.237.139.0/24 maxlen: 24
89.237.162.0/24 maxlen: 24
89.237.167.0/24 maxlen: 24
89.237.173.0/24 maxlen: 24
212.24.226.0/24 maxlen: 24
212.24.227.0/24 maxlen: 24
212.24.228.0/24 maxlen: 24
212.24.230.0/24 maxlen: 24
212.24.232.0/23 maxlen: 23
212.24.236.0/24 maxlen: 24
212.24.237.0/24 maxlen: 24
2a00:f580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/rVLCjvmlsikaumcayaZdj6rcVRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/rVLCjvmlsikaumcayaZdj6rcVRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rVLCjvmlsikaumcayaZdj6rcVRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:c8:11:08:c1:79:7e:40:a6:d7:69:95:89:36:20:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad52c28ef9a5b2291aba671ac9a65d8faadc5518
Validity
Not Before: Feb 29 12:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9949f169296fe3eba792215558b492b5d517f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:15:2f:be:3b:d7:c5:65:84:b4:e0:e7:23:
90:42:24:77:5c:db:48:88:a8:fc:80:4c:03:69:5b:
61:93:bd:52:a8:9b:f8:08:1b:d9:fd:85:18:7d:e9:
6f:1b:a8:c1:ec:87:96:33:69:32:73:ab:ce:c9:ff:
be:f8:75:99:5d:ba:73:b5:59:99:f0:83:5b:f4:0d:
0f:c6:ac:e2:b6:0e:84:8f:9b:84:5f:5c:35:61:9b:
59:44:7f:1d:4f:af:e8:50:15:44:89:10:2b:60:46:
5c:37:8f:03:2a:c6:41:16:7b:04:a3:a8:e2:d5:ed:
8e:e9:b4:a4:69:8b:7b:5b:de:6c:63:f1:d2:06:d0:
e6:b5:c0:63:4d:4c:46:b3:90:98:13:63:6c:fb:2b:
4e:7e:10:30:6f:28:93:58:a7:b3:5c:3e:7e:04:9b:
75:fa:89:8d:1d:17:a5:85:74:c2:7a:1e:0f:63:92:
45:ac:10:08:46:02:44:17:4b:90:40:6b:2d:fd:97:
c6:b3:a0:b1:a4:b4:02:e8:61:5f:53:7b:56:83:d9:
b0:53:64:9d:c8:a4:52:70:8c:dd:7f:06:88:c9:a1:
a0:a2:6a:52:ae:fe:ad:92:2b:be:04:90:c9:74:82:
99:bb:34:58:aa:d6:d3:87:34:f1:d6:05:7d:07:a5:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:94:9F:16:92:96:FE:3E:BA:79:22:15:55:8B:49:2B:5D:51:7F:33
X509v3 Authority Key Identifier:
keyid:AD:52:C2:8E:F9:A5:B2:29:1A:BA:67:1A:C9:A6:5D:8F:AA:DC:55:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVLCjvmlsikaumcayaZdj6rcVRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/uZSfFpKW_j66eSIVVYtJK11RfzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/rVLCjvmlsikaumcayaZdj6rcVRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.138.192.0/18
89.237.139.0/24
89.237.162.0/24
89.237.167.0/24
89.237.173.0/24
212.24.226.0-212.24.228.255
212.24.230.0/24
212.24.232.0/23
212.24.236.0/23
IPv6:
2a00:f580::/32
Signature Algorithm: sha256WithRSAEncryption
37:26:64:3c:d2:d0:05:8f:1f:f3:19:d7:9e:8a:b8:f0:3b:a6:
fc:71:c9:3e:83:11:28:64:01:f3:e3:8e:57:0f:ec:55:0a:bc:
c9:3a:ca:0a:45:46:df:46:85:16:55:38:f6:17:08:74:60:56:
13:2d:ac:d2:a3:75:ff:47:cb:46:89:07:9e:c6:da:f9:13:5c:
d4:3a:01:ec:17:2f:71:83:78:88:91:ee:f9:be:84:27:59:ce:
ef:f9:d5:b5:de:bf:43:be:05:8a:20:e8:23:19:a8:41:27:09:
d9:6e:3c:e8:6c:2c:bb:c9:6c:7d:a8:4a:0a:5c:5f:4b:13:d3:
9f:23:95:c1:99:17:0a:be:f1:15:69:21:2d:e8:60:a0:7d:f6:
ff:6f:26:db:c3:01:4a:65:51:51:8f:2b:a3:e9:b3:e9:0b:2e:
70:42:7f:e4:b5:07:be:e7:cb:fe:50:cd:92:78:b8:6c:6f:8e:
30:01:54:c8:fa:40:88:c6:1e:8c:f6:6c:7a:ef:2e:4d:21:45:
d9:70:76:87:3b:59:de:26:cc:42:60:2a:44:77:25:df:b0:92:
2b:1d:96:fb:b2:d3:ef:69:2e:cb:0c:fc:21:c5:4e:b7:6f:cb:
9f:28:7a:b2:05:d0:74:f9:29:ea:0d:7e:1c:7e:a9:b9:69:4d:
e3:8c:7f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:29:44 2024 by rpki-client on console-ams.rpki-client.org