Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/5rfqMZf39jeAZQS6tRXkx7SYT-g.roa
File: 5rfqMZf39jeAZQS6tRXkx7SYT-g.roa (raw, json)
Hash identifier: yubNgPJT4ciFVdHQnqMQ8MZ/v3cSOA88NwoINerNlbY=
Subject key identifier: E6:B7:EA:31:97:F7:F6:37:80:65:04:BA:B5:15:E4:C7:B4:98:4F:E8
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018CCA29D5D038923D422A0B5B8A7543B0EE
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/5rfqMZf39jeAZQS6tRXkx7SYT-g.roa
Signing time: Tue 02 Jan 2024 12:33:08 +0000
ROA not before: Tue 02 Jan 2024 12:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202723
IP address blocks: 185.79.138.0/24 maxlen: 24
185.75.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:d5:d0:38:92:3d:42:2a:0b:5b:8a:75:43:b0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 2 12:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6b7ea3197f7f637806504bab515e4c7b4984fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:ff:41:e5:2c:49:81:9c:82:75:b2:f5:df:
63:87:54:bc:72:33:3b:b4:55:46:d7:66:50:2e:e0:
d9:fc:0f:6e:8f:a8:b5:b9:c5:fb:85:0e:74:4c:4d:
92:78:11:57:eb:f9:ef:e6:7c:7f:85:8b:97:d3:ec:
bb:aa:6e:ad:d3:7a:37:ec:c4:fc:99:4a:80:35:2b:
2a:0e:9e:7a:ce:f9:2b:0e:5d:3f:75:36:d4:09:68:
96:66:1e:ae:2d:70:b5:ba:f0:26:a2:e8:99:8c:58:
a8:3f:32:72:3b:f7:af:5a:ab:eb:15:69:5a:95:41:
b0:cc:82:86:8a:5d:d9:67:6a:f8:47:18:b1:c9:c1:
21:8e:bf:da:fe:96:a3:b0:e5:d2:4e:0d:bf:e6:2f:
56:52:98:26:9b:7e:70:63:c3:20:3b:3c:81:9e:41:
d1:3b:9a:e8:61:3f:3c:90:50:7f:23:00:43:b2:8d:
d8:5e:dd:eb:3a:cb:93:9b:2e:8e:70:49:72:43:0c:
23:58:bf:91:ae:3f:f2:2a:2b:5a:ab:d0:d3:d8:63:
b2:bb:54:f3:d7:43:65:0c:a8:c8:ff:0b:10:0a:e0:
ec:12:e9:8f:1e:b7:b8:12:e8:90:28:61:c9:53:ca:
fb:b7:7e:91:96:df:4a:47:33:4e:95:49:cf:69:87:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B7:EA:31:97:F7:F6:37:80:65:04:BA:B5:15:E4:C7:B4:98:4F:E8
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/5rfqMZf39jeAZQS6tRXkx7SYT-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.134.0/24
185.79.138.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d7:77:2f:cf:62:99:ec:6e:22:81:da:9c:a9:a0:e0:ba:52:
62:1c:45:32:7c:d9:9b:f3:e9:2e:cc:ce:7a:41:8a:7e:04:31:
57:3a:45:a8:39:cc:a8:f1:47:f3:1d:4c:0a:61:a6:94:69:60:
89:83:e6:93:98:b0:c7:a6:68:40:28:6f:da:26:8c:b2:9e:59:
5c:ee:6c:e8:19:83:3d:5f:54:41:63:11:be:34:3e:97:f8:17:
fc:0a:32:1a:30:35:e4:7c:76:95:34:cf:31:4a:97:62:e3:1e:
65:54:ce:82:83:5d:5d:52:1f:b2:3a:b2:82:a4:e2:51:e2:2a:
35:1a:c3:42:7b:00:e3:26:35:f8:68:c7:5f:95:13:68:88:c7:
bc:13:b5:9a:dd:6c:d5:91:e0:60:37:f4:99:c7:3f:e4:95:a3:
3b:43:09:34:e9:b5:f2:22:b5:d8:aa:d6:31:81:a6:6c:c3:dd:
45:09:98:d7:41:8c:0c:92:2b:38:51:18:0d:aa:66:45:f6:08:
3a:96:63:f5:81:ab:a1:07:71:c4:2c:a1:06:f0:d2:28:12:6c:
9e:b8:73:af:b6:40:b4:9d:6b:bc:41:70:ba:b0:3a:32:9a:f8:
33:47:07:e0:ab:0b:19:ee:32:3e:a4:bc:b4:c6:f1:5b:f3:65:
9c:ff:e8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:10:08 2024 by rpki-client on console-fra.rpki-client.org