Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/5nKd1dN_mJvBwaccZccTNDnXn4w.roa
File: 5nKd1dN_mJvBwaccZccTNDnXn4w.roa (raw, json)
Hash identifier: ByixUQEpYGRJ5I+xpPJxDkwcibKV2YAxc9kEr0JcWfA=
Subject key identifier: E6:72:9D:D5:D3:7F:98:9B:C1:C1:A7:1C:65:C7:13:34:39:D7:9F:8C
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 018CC3B68ECEA6CC6DDB084258AB1A8CE985
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/5nKd1dN_mJvBwaccZccTNDnXn4w.roa
Signing time: Mon 01 Jan 2024 06:29:30 +0000
ROA not before: Mon 01 Jan 2024 06:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60385
IP address blocks: 87.238.139.0/24 maxlen: 24
185.18.251.0/24 maxlen: 24
185.18.248.0/24 maxlen: 24
185.18.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8e:ce:a6:cc:6d:db:08:42:58:ab:1a:8c:e9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Jan 1 06:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6729dd5d37f989bc1c1a71c65c7133439d79f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:5d:4c:59:dd:63:91:e7:61:b6:00:20:55:
75:57:4e:3c:03:08:8e:c2:48:83:0e:97:c4:ab:1a:
03:ce:3e:73:ec:7c:81:20:a8:20:ea:1b:23:9a:dd:
84:52:92:c0:6b:13:8f:b7:67:d0:d8:1b:0c:c8:7f:
f5:2a:9d:14:22:f3:df:90:6b:15:64:85:8c:56:45:
1e:6f:3d:21:7c:f4:ad:31:41:0f:c4:6f:f1:1d:a6:
3b:e8:a9:23:cf:9f:87:66:23:aa:9f:43:eb:ce:ed:
e4:ec:9e:b0:05:99:84:f7:a2:0a:7c:5f:c1:e6:e8:
a3:91:9f:54:af:2b:d8:e9:2e:96:87:a4:88:3f:b8:
84:80:4e:4a:26:f5:7a:3e:90:7d:2f:84:bb:4f:61:
c0:39:1c:d6:cc:7c:14:c7:60:48:6e:32:f9:92:f9:
2f:45:6a:0a:bf:84:71:bb:f6:00:74:f9:4c:e8:12:
86:30:af:7e:ce:2f:24:60:70:34:9e:fa:6f:72:ba:
ff:30:32:f3:de:6e:8f:91:4d:35:2e:6d:c1:fb:66:
e2:75:0a:58:a7:41:6a:cf:e6:59:08:62:11:3d:fa:
96:ad:de:47:55:28:18:c1:83:8a:b8:ea:46:5e:09:
13:7a:79:86:35:29:89:43:eb:ac:ad:7a:3b:27:81:
21:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:72:9D:D5:D3:7F:98:9B:C1:C1:A7:1C:65:C7:13:34:39:D7:9F:8C
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/5nKd1dN_mJvBwaccZccTNDnXn4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.139.0/24
185.18.248.0/23
185.18.251.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:3d:26:a7:a0:36:b8:c5:d8:8d:63:b7:14:0c:4d:b9:b5:8f:
d3:73:7e:60:a6:b2:3f:3d:e8:37:1e:3b:fe:82:14:2c:85:db:
09:5b:77:7d:46:88:a4:07:43:6d:68:9d:f9:f9:a9:dd:ca:5f:
fd:20:5a:5c:0a:18:fc:29:bf:b0:bb:c0:7c:09:b0:79:11:3e:
84:9d:47:a0:ed:3f:9b:71:ba:e4:e6:a1:38:e3:bd:af:e4:41:
f2:8a:64:8c:2b:e2:99:8e:7f:92:1b:94:70:12:72:76:32:8f:
62:cd:46:6a:c2:1a:74:8a:50:08:c9:13:ef:41:4a:4b:2b:5d:
31:89:a3:5b:c5:67:03:7b:df:15:fb:72:c5:7e:31:9c:c2:2c:
ee:49:15:5a:6f:df:2d:ba:f8:dd:b2:bb:cc:a7:06:fb:3d:4a:
2d:bf:1f:4d:76:94:56:ce:d2:6e:f1:92:f2:28:54:cf:82:ef:
7d:65:d9:62:10:c5:a8:73:51:9a:2a:57:92:b1:80:4a:aa:dd:
c3:b4:0e:97:3d:49:93:54:01:09:27:80:bb:6c:23:51:f2:69:
29:bf:e2:68:9b:3b:72:20:44:ca:00:22:5f:8b:ef:0d:e8:38:
c2:af:fc:e6:58:a2:7b:b5:4e:30:fd:10:bf:11:10:00:3f:11:
8a:1c:ff:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:06:13 2024 by rpki-client on console-fra.rpki-client.org