Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/0lrUKabjgHrF6r95__3hqy161dU.roa
File: 0lrUKabjgHrF6r95__3hqy161dU.roa (raw, json)
Hash identifier: JltB8FGl6NI5Di1GHnAExwhAMzq0AeTLZzXVVuEv/xs=
Subject key identifier: D2:5A:D4:29:A6:E3:80:7A:C5:EA:BF:79:FF:FD:E1:AB:2D:7A:D5:D5
Certificate issuer: /CN=ba970de126b3a0b548dad76f5efa88855c6f1ff2
Certificate serial: 01904EA1078D4E0BDB61F213A024A551F4AB
Authority key identifier: BA:97:0D:E1:26:B3:A0:B5:48:DA:D7:6F:5E:FA:88:85:5C:6F:1F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/0lrUKabjgHrF6r95__3hqy161dU.roa
Signing time: Tue 25 Jun 2024 09:01:34 +0000
ROA not before: Tue 25 Jun 2024 09:01:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57913
IP address blocks: 37.61.228.0/24 maxlen: 24
81.30.109.0/24 maxlen: 24
2a13:f600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:a1:07:8d:4e:0b:db:61:f2:13:a0:24:a5:51:f4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba970de126b3a0b548dad76f5efa88855c6f1ff2
Validity
Not Before: Jun 25 09:01:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d25ad429a6e3807ac5eabf79fffde1ab2d7ad5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:01:21:85:01:d5:4b:7c:77:8b:6f:5a:82:f5:
9d:83:30:9f:7c:64:b8:13:f6:65:59:51:ec:43:b5:
84:9b:53:c7:a6:06:09:d9:3b:26:37:ba:0e:93:df:
07:b6:cd:80:d2:ab:d3:2f:fb:04:d0:8e:87:9f:75:
87:ee:c8:e5:52:3f:e4:4b:e0:61:ab:eb:24:e3:5c:
28:c6:91:0c:ff:bf:dc:5e:16:22:96:38:af:25:00:
ee:ad:ba:05:c4:a3:df:3c:2d:9d:f6:2a:65:68:c1:
f3:54:30:67:32:a7:bf:dd:94:49:e9:07:f1:a8:6d:
83:af:50:3e:80:a5:1d:bc:3a:83:01:f0:28:e8:b5:
b5:d0:c2:1d:3d:b6:27:64:a4:12:c1:1e:45:92:80:
3d:48:50:fc:97:55:e2:01:86:fb:da:d0:50:71:6e:
67:e3:cd:d8:96:33:9b:8c:52:f7:1e:44:71:a4:3f:
26:e9:e8:b5:1b:da:01:e0:e8:45:00:3b:23:39:9b:
72:ef:de:93:25:d6:95:d3:4e:e4:01:95:f7:95:b6:
20:ee:8e:bd:38:43:45:41:69:e7:3e:87:07:de:b2:
00:29:00:09:43:8c:0c:19:8f:44:a6:97:28:1c:4d:
26:22:d3:3d:6a:c9:6b:4c:14:94:c0:6e:6d:15:25:
66:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5A:D4:29:A6:E3:80:7A:C5:EA:BF:79:FF:FD:E1:AB:2D:7A:D5:D5
X509v3 Authority Key Identifier:
keyid:BA:97:0D:E1:26:B3:A0:B5:48:DA:D7:6F:5E:FA:88:85:5C:6F:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/0lrUKabjgHrF6r95__3hqy161dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.228.0/24
81.30.109.0/24
IPv6:
2a13:f600::/29
Signature Algorithm: sha256WithRSAEncryption
55:37:31:e2:a7:2c:fc:80:dc:92:6b:13:1c:1f:98:c0:b3:91:
cc:25:7f:3a:0e:91:68:8c:37:a3:44:83:99:7b:1c:48:64:7b:
84:50:3e:9f:8a:3f:f9:f9:46:11:bf:bd:82:98:09:d1:8c:e5:
64:0f:b9:77:e1:7c:08:9c:52:0d:b1:fb:18:4c:11:e9:ec:7c:
6c:0c:51:5a:02:da:18:0d:a0:13:93:42:80:86:27:13:2b:50:
8b:b1:3e:7e:8b:60:b0:c7:39:a3:5a:29:25:e6:01:6e:fe:ed:
ed:27:aa:64:73:8f:26:96:7d:79:1c:fd:78:5f:de:11:ed:5c:
a2:b8:81:90:6c:a7:ae:9e:86:6f:bb:89:a2:00:4d:c9:0b:43:
33:e2:ef:37:7f:09:0f:f3:37:77:8b:6f:93:02:1a:8a:9b:cd:
8f:01:e1:89:f4:52:8d:4c:75:2b:1c:fa:bd:82:a7:02:fe:fb:
5d:f4:11:f5:e4:28:9a:09:e1:e6:b2:af:12:e9:98:f8:cc:f5:
98:37:d8:37:25:16:42:b1:ae:cd:16:d2:78:9d:d6:89:6c:73:
07:ef:ad:d8:7f:11:ab:54:f7:e9:74:f2:89:23:09:8e:67:37:
e8:68:cc:c2:f1:a0:63:8f:29:c8:1f:dc:39:20:4d:d1:b6:e1:
3a:0c:b2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:41 2024 by rpki-client on console-fra.rpki-client.org