Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/L7cwL9N0XiaaSm6NxFd1x29yQLk.roa
File: L7cwL9N0XiaaSm6NxFd1x29yQLk.roa (raw, json)
Hash identifier: 8aKAFZeP0HRiA3vQ5bMsKiELgoRfDbx5J7sqeXTAGcQ=
Subject key identifier: 2F:B7:30:2F:D3:74:5E:26:9A:4A:6E:8D:C4:57:75:C7:6F:72:40:B9
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 0192122D9060DD599258C7FE7EFA4EE25294
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/L7cwL9N0XiaaSm6NxFd1x29yQLk.roa
Signing time: Sat 21 Sep 2024 01:23:48 +0000
ROA not before: Sat 21 Sep 2024 01:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398779
IP address blocks: 5.183.78.0/24 maxlen: 24
45.14.114.0/24 maxlen: 24
147.189.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:12:2d:90:60:dd:59:92:58:c7:fe:7e:fa:4e:e2:52:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Sep 21 01:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fb7302fd3745e269a4a6e8dc45775c76f7240b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:3a:58:6f:df:70:5d:85:bf:35:d6:4f:16:
ab:09:85:6b:bd:8d:37:87:58:2f:66:13:83:11:b9:
c0:0c:d3:cd:b7:b0:6f:ef:3a:aa:eb:ce:81:39:1f:
ef:4f:b8:e0:c8:2d:77:f5:9a:1b:d8:54:23:5a:8d:
98:07:43:dd:ad:73:c0:3d:a9:c4:0f:47:29:37:44:
e4:78:4f:02:ca:78:87:3e:e7:13:8c:71:0d:05:0d:
92:ca:cf:d8:68:ef:27:e7:1e:dd:36:9b:08:b9:9d:
65:d9:66:11:49:2a:9d:e1:50:06:46:c0:33:e2:8e:
ec:04:ae:c2:b2:0b:04:14:fc:c0:31:54:37:00:95:
53:d5:4c:3a:9b:c9:9b:5b:3c:5b:dd:24:c9:ad:09:
bb:c0:b2:2e:93:95:65:1e:3b:ae:47:ed:4c:f2:2a:
14:01:b6:47:15:fe:b9:92:21:23:f2:d8:1b:50:14:
8e:a2:f6:23:71:5e:a1:c5:3d:ac:3a:6e:28:d8:c5:
6f:8a:f2:c5:07:75:50:b3:3a:06:e6:3b:6d:55:88:
5d:1a:52:1f:94:f6:7c:d3:c8:70:25:74:3b:be:7d:
49:4d:7b:a4:9f:f9:ff:15:c7:8b:90:6d:f6:33:c1:
a2:a7:f3:d4:2a:3c:68:01:73:aa:6e:48:12:96:cf:
a6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B7:30:2F:D3:74:5E:26:9A:4A:6E:8D:C4:57:75:C7:6F:72:40:B9
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/L7cwL9N0XiaaSm6NxFd1x29yQLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.78.0/24
45.14.114.0/24
147.189.139.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c7:49:3d:9f:1a:8d:33:9f:da:56:97:33:34:7a:f1:5b:0b:
59:44:82:d5:0f:cd:99:11:2b:e1:1f:63:cb:84:59:69:72:5f:
ab:bd:97:2a:0c:f3:50:22:85:33:34:3c:5c:44:61:a6:38:8a:
e7:2c:47:61:76:2e:bb:28:90:3c:8e:84:8c:81:3e:7e:1b:df:
f6:d6:09:c5:af:5b:09:e9:67:6a:7c:50:74:49:8d:e2:67:57:
19:e6:1f:ea:22:e7:4f:67:da:0e:f7:46:de:9b:07:8c:12:fe:
74:4e:c9:72:84:ea:31:2f:5b:a6:37:94:c8:ca:0f:01:46:cc:
24:5a:6b:d9:ff:d6:26:71:c1:b0:bb:bb:a2:07:34:8e:5b:cf:
13:f3:72:70:67:e9:e3:93:7d:1b:a0:cd:5c:38:69:b1:bf:44:
2a:90:c7:30:ab:4e:fa:2f:9a:c7:7c:94:12:5e:b9:2b:83:75:
e4:00:15:f1:dd:f5:62:1c:ce:a6:98:34:9b:26:d9:1c:44:cb:
09:45:99:aa:41:7b:3f:9b:1b:9d:6d:04:e6:26:5c:c6:b8:ea:
6d:68:eb:15:66:b7:a7:e4:ee:48:2b:14:97:09:3f:e4:a5:4b:
30:f2:cf:29:8f:3f:84:0e:ff:98:c6:49:1b:09:4c:be:e9:c6:
df:df:77:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:10 2024 by rpki-client on console-fra.rpki-client.org