Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/djOS6aD_Hon8Tz6arGkXIW4CFrY.roa
File: djOS6aD_Hon8Tz6arGkXIW4CFrY.roa (raw, json)
Hash identifier: gZhEEso+31/n7KLhMqjL+Q8ouFLrRyEN55W0OTi5Db0=
Subject key identifier: 76:33:92:E9:A0:FF:1E:89:FC:4F:3E:9A:AC:69:17:21:6E:02:16:B6
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018CC94E2E7C8F9D3300EFAD98F9A74D3891
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/djOS6aD_Hon8Tz6arGkXIW4CFrY.roa
Signing time: Tue 02 Jan 2024 08:33:13 +0000
ROA not before: Tue 02 Jan 2024 08:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12849
IP address blocks: 89.237.64.0/18 maxlen: 24
77.137.128.0/18 maxlen: 24
77.138.0.0/15 maxlen: 24
77.137.192.0/22 maxlen: 24
194.242.160.0/20 maxlen: 24
77.137.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:2e:7c:8f:9d:33:00:ef:ad:98:f9:a7:4d:38:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 08:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=763392e9a0ff1e89fc4f3e9aac6917216e0216b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:d3:8c:0d:5d:55:8c:cd:79:98:15:9f:60:
28:c0:de:e3:28:45:5a:1d:6b:07:d4:fe:84:2d:85:
b6:f6:3c:a6:d2:01:68:36:fc:da:44:15:ce:66:30:
c9:01:02:36:6b:13:2a:eb:87:c1:ee:d9:48:2d:ea:
64:40:f9:94:08:1e:2e:72:31:bf:10:25:d5:9f:12:
e8:d1:83:8b:da:27:a5:f9:ed:3e:53:0e:b1:09:ff:
9e:c7:14:38:fb:a0:f9:b7:14:09:db:a2:c7:63:03:
cc:49:ec:d6:b6:da:92:79:99:e5:be:1d:cf:0c:b0:
0e:e9:73:cf:ad:6e:8b:0f:6e:d2:8b:60:db:7e:45:
0c:df:2d:c2:30:50:1a:08:f5:ab:c2:50:93:cf:9c:
65:4e:61:37:ff:f4:ca:91:4d:1a:b1:3f:97:9d:30:
bf:36:22:be:84:77:e6:a5:2c:98:2a:e2:ce:7b:a3:
49:83:9c:24:81:7a:ce:83:71:a6:38:0d:e3:99:d3:
c9:14:df:79:b7:5e:49:2d:26:ff:55:11:10:a3:66:
0f:03:d1:fe:eb:6a:38:ce:e1:a3:a7:4b:46:27:36:
d6:90:a7:bf:7a:12:a7:2e:c6:27:e4:05:6f:62:13:
68:74:da:07:8b:82:3c:9e:d4:8c:f3:d6:d0:f1:c0:
e7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:33:92:E9:A0:FF:1E:89:FC:4F:3E:9A:AC:69:17:21:6E:02:16:B6
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/djOS6aD_Hon8Tz6arGkXIW4CFrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.137.0.0-77.137.195.255
77.138.0.0/15
89.237.64.0/18
194.242.160.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:0c:67:95:8d:e8:e5:dc:9e:8a:21:d3:a3:fc:54:a5:53:8e:
0e:3d:0a:ff:f3:a4:9c:74:af:dc:5e:5b:40:a4:77:eb:09:8e:
e6:8c:8f:62:8d:6f:eb:04:55:9c:a4:9c:f1:07:c8:f3:10:58:
4f:0c:4d:30:9f:80:d1:a2:e4:24:5d:79:b0:c1:2d:f5:7a:05:
bb:30:4c:7f:91:18:2f:92:14:5d:2c:ce:61:c4:4c:c5:08:75:
90:6f:15:f5:45:e1:b0:4d:fe:be:7a:34:ef:5c:03:bb:ac:d3:
32:0a:da:2f:ae:7d:9a:92:a0:42:df:a0:98:e8:5a:49:be:fc:
bb:94:75:e8:df:08:58:e2:65:e3:16:17:65:25:0a:30:51:3c:
80:76:21:e0:12:cb:83:7d:7f:ce:b9:78:ca:c8:c1:59:61:52:
d0:fd:ce:cc:1a:f0:1f:80:72:55:4f:f0:63:f9:0d:9d:86:9e:
40:8c:cb:86:a6:bf:14:2b:0b:01:8a:20:a8:92:09:6d:13:9a:
53:8a:22:0e:64:f1:9f:d5:96:00:a8:20:ff:9b:71:b5:c4:f2:
2f:02:65:bd:23:b9:78:11:7e:ba:6f:f5:3e:53:4c:f2:c3:28:
be:ce:b9:e8:04:74:79:13:3e:8c:a2:8d:41:8b:c9:45:3e:1e:
61:e7:4b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:11:55 2024 by rpki-client on console-fra.rpki-client.org