Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_5jUdDvJZYJ66hdgclxTeD4bmjY.roa
File: _5jUdDvJZYJ66hdgclxTeD4bmjY.roa (raw, json)
Hash identifier: 2dLTFH0oE5ca20rJNid1rv1VHZz70uYrnNDSjLPcajA=
Subject key identifier: FF:98:D4:74:3B:C9:65:82:7A:EA:17:60:72:5C:53:78:3E:1B:9A:36
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0190D47162AF7D17253283D922A2D2072C91
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_5jUdDvJZYJ66hdgclxTeD4bmjY.roa
Signing time: Sun 21 Jul 2024 08:38:38 +0000
ROA not before: Sun 21 Jul 2024 08:38:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 81.21.0.0/24 maxlen: 24
176.57.48.0/24 maxlen: 24
176.57.54.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
176.57.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d4:71:62:af:7d:17:25:32:83:d9:22:a2:d2:07:2c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jul 21 08:38:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff98d4743bc965827aea1760725c53783e1b9a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:74:71:f9:77:a3:0d:c4:fc:b9:c9:a7:4f:ce:
ad:0a:bb:8a:bc:86:ba:f2:66:64:16:ba:75:58:c5:
72:62:0c:a4:0a:2d:0f:db:d9:2f:4c:b3:59:fb:63:
7c:ad:59:dc:0b:17:f0:e7:6b:02:b7:83:45:b6:a9:
17:fe:c4:d1:dc:1a:5b:58:b0:02:e5:7d:0f:38:fd:
01:11:dc:5f:cb:a3:17:ce:86:46:4a:ab:e1:43:67:
d4:4c:40:45:88:2e:ef:50:eb:0f:33:9d:d0:b1:3a:
fc:ce:97:b9:ff:66:b9:42:f3:bb:d7:eb:a9:db:f4:
0c:3e:c3:4b:1e:19:f6:7a:c4:ae:4e:0a:f3:68:93:
c9:b5:49:7c:bb:92:95:ae:e3:dd:33:9d:de:6a:c1:
7b:b4:a5:cc:af:2f:da:8a:0f:a9:01:c3:0d:2e:c1:
6d:43:be:9c:ce:fc:cf:e6:cc:18:e7:70:9f:88:5a:
c8:00:cb:32:67:50:33:7b:ce:2d:0c:e7:1e:90:95:
be:03:7a:39:36:bd:97:ad:a1:ab:f0:97:1c:1e:1a:
12:4b:2a:11:7e:ce:24:1d:4f:fd:33:0a:25:ac:3f:
81:69:ce:41:0c:59:58:17:62:b4:91:3e:19:2e:2c:
9e:6f:db:08:63:0a:50:02:1a:57:18:63:30:9f:bf:
ba:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:98:D4:74:3B:C9:65:82:7A:EA:17:60:72:5C:53:78:3E:1B:9A:36
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_5jUdDvJZYJ66hdgclxTeD4bmjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.0.0/24
176.57.48.0/24
176.57.54.0/24
176.57.56.0/24
176.57.60.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:ce:d5:1f:8b:f1:02:a8:22:0b:72:93:c3:b4:50:e7:8d:90:
84:f9:6b:9b:84:ec:5a:01:af:27:e4:a5:82:30:fe:72:46:e1:
be:1b:3b:f8:4d:88:18:01:c4:b4:02:f2:de:b0:82:82:8c:00:
3f:f5:b1:dc:ae:a3:88:92:bb:8d:a9:a9:52:a3:5b:0a:0c:a2:
96:1d:a0:a5:97:5a:8e:28:8f:d2:87:29:5f:9a:93:f2:7e:68:
fd:30:ac:fc:32:c8:a2:fa:c0:4e:a5:26:00:e6:b8:1d:d4:bf:
fb:06:ef:70:b7:49:26:57:d9:6d:2e:8e:f2:1e:eb:e3:53:ad:
82:b9:3a:64:40:f8:81:8b:01:97:20:a0:ec:af:3d:94:df:2a:
02:6b:ac:9b:89:04:25:b4:cf:bc:48:72:80:0b:03:ba:51:4a:
5f:d2:b2:e6:47:92:b3:65:f9:f4:5b:e4:b3:50:e7:30:93:72:
8a:30:5c:6e:31:23:5a:42:15:58:1e:db:df:16:62:c0:27:a2:
ed:52:d0:05:78:23:79:63:b8:c6:30:cb:76:da:a4:82:4c:15:
0c:87:5a:b0:1a:78:86:ef:06:4e:b2:cc:8e:f9:b0:0b:c3:77:
e8:26:80:4d:33:7e:03:f5:01:e9:85:4c:94:e5:d6:57:33:b3:
d8:aa:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:18:53 2024 by rpki-client on console-ams.rpki-client.org