Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/W86jxNqZbb08dN6cX-FSjqNs2mI.roa
File: W86jxNqZbb08dN6cX-FSjqNs2mI.roa (raw, json)
Hash identifier: LlcipwNv4JxCaHHzgxGu0StTmxi2SZ+XlZSUNG+bUW8=
Subject key identifier: 5B:CE:A3:C4:DA:99:6D:BD:3C:74:DE:9C:5F:E1:52:8E:A3:6C:DA:62
Certificate issuer: /CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Certificate serial: 01921DB279702385BFDC04D419EC0383781F
Authority key identifier: 02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/W86jxNqZbb08dN6cX-FSjqNs2mI.roa
Signing time: Mon 23 Sep 2024 07:04:48 +0000
ROA not before: Mon 23 Sep 2024 07:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17012
IP address blocks: 91.243.72.0/23 maxlen: 24
185.177.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1d:b2:79:70:23:85:bf:dc:04:d4:19:ec:03:83:78:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Validity
Not Before: Sep 23 07:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bcea3c4da996dbd3c74de9c5fe1528ea36cda62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:5a:0b:e5:1b:90:50:23:10:a7:76:fd:8d:
c3:aa:33:69:4d:f9:f3:9c:11:2a:2a:c3:b4:49:d8:
fe:88:4a:70:d9:ac:ad:5f:0c:97:1a:c7:b9:1a:52:
12:73:a4:37:f7:02:af:f2:57:6f:0e:2b:99:08:ba:
0a:24:73:d0:24:00:ec:91:0c:b3:a6:96:a4:ad:a2:
ec:70:bf:2b:36:b6:09:d6:4b:b4:9a:ba:ed:5b:4d:
84:ba:2d:e1:53:f4:4f:18:45:57:89:99:93:fb:02:
11:b8:71:c8:50:fe:86:20:05:f9:6d:e6:5e:9e:d9:
4d:fa:7b:5e:dc:d2:ba:b6:74:99:0a:a8:c3:b2:f0:
bd:af:de:6a:40:ee:c3:52:e8:8c:db:8c:8b:eb:f5:
c3:15:1f:58:86:6b:b9:ef:2c:0d:4f:18:0f:8f:00:
5d:b0:e6:1a:ed:83:3f:b4:14:ce:f9:2f:5d:f4:e3:
aa:a9:34:73:a6:64:40:65:e9:4c:76:b6:5d:ba:4b:
60:a5:eb:d8:e3:ae:4d:7c:f5:ac:a4:e4:9a:42:f1:
f0:75:f4:c4:a8:8a:dd:0b:de:7f:3d:79:df:94:3d:
7d:69:4f:a8:7e:72:4a:9b:da:e4:88:25:ee:9d:5b:
6e:b5:a6:da:b9:5e:38:c4:5c:52:1f:04:07:c0:b9:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CE:A3:C4:DA:99:6D:BD:3C:74:DE:9C:5F:E1:52:8E:A3:6C:DA:62
X509v3 Authority Key Identifier:
keyid:02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/W86jxNqZbb08dN6cX-FSjqNs2mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.72.0/23
185.177.52.0/22
Signature Algorithm: sha256WithRSAEncryption
03:01:05:19:15:7c:48:f5:56:59:8e:ab:ec:8e:ab:a0:1d:39:
fa:39:cb:19:3f:ea:e0:bb:fc:65:42:70:4e:0e:4b:ed:57:8b:
3f:a2:0e:ae:00:52:f6:af:68:53:41:8a:54:df:ae:20:9d:79:
66:b6:61:18:f8:25:0a:c9:56:b7:02:17:1f:f3:35:d6:16:ff:
e0:ee:82:c3:be:e3:e0:0c:88:06:67:cf:a9:7d:2e:ae:d3:9f:
5e:cf:a4:f2:85:22:81:93:3e:55:2d:4e:ba:34:07:73:15:80:
a2:94:f5:86:d5:9a:2e:42:40:34:18:4e:65:95:3c:b3:0d:e5:
f7:74:bc:37:aa:e7:40:66:76:5d:fb:d3:af:3a:ff:61:10:10:
44:01:21:b9:96:c6:b4:36:cb:82:c0:cc:c7:dd:b8:35:5b:eb:
81:9d:53:41:c2:63:68:b5:60:42:59:1f:69:d1:6d:04:e9:71:
60:a6:f1:5d:e8:37:03:27:80:4d:e2:86:f0:c4:c8:e5:8b:76:
a9:8e:d9:74:7e:1f:55:17:9e:5a:c5:70:b6:84:a4:00:dd:fc:
b3:ba:b2:ae:7a:47:95:40:cc:51:39:76:25:40:2b:67:f4:62:
d5:d4:27:4a:d4:b0:dc:59:6a:68:f7:22:5c:aa:f2:68:34:4e:
57:58:e5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:49:25 2024 by rpki-client on console-fra.rpki-client.org