Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/d28-XnA6iBNBZLE6lAWiIpWQgfw.roa
File: d28-XnA6iBNBZLE6lAWiIpWQgfw.roa (raw, json)
Hash identifier: tFzwXZJcUMDEyY8L64Xj9NiWsOiu8UXBW9bLrFFCnlk=
Subject key identifier: 77:6F:3E:5E:70:3A:88:13:41:64:B1:3A:94:05:A2:22:95:90:81:FC
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 018CC4249A9315C1F15BC13CB9CB41DBC3EA
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/d28-XnA6iBNBZLE6lAWiIpWQgfw.roa
Signing time: Mon 01 Jan 2024 08:29:42 +0000
ROA not before: Mon 01 Jan 2024 08:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25393
IP address blocks: 193.178.144.0/23 maxlen: 23
78.27.224.0/19 maxlen: 24
77.87.192.0/21 maxlen: 21
195.39.197.0/24 maxlen: 24
89.184.68.0/22 maxlen: 24
89.184.72.0/21 maxlen: 21
89.184.88.0/21 maxlen: 21
5.149.120.0/22 maxlen: 24
5.149.124.0/22 maxlen: 24
195.177.116.0/22 maxlen: 22
2a02:2278:200::/40 maxlen: 56
2a02:2278:204::/48 maxlen: 48
2a02:2278:100::/44 maxlen: 56
2a02:2278:208::/48 maxlen: 48
2a02:2279::/32 maxlen: 32
2a02:2279::/40 maxlen: 56
2a02:2279:1200::/40 maxlen: 56
2a02:2279:200::/40 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:9a:93:15:c1:f1:5b:c1:3c:b9:cb:41:db:c3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Jan 1 08:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=776f3e5e703a88134164b13a9405a222959081fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:ac:c2:ac:ee:43:41:d3:0c:d6:23:d1:e3:
36:97:9e:43:7d:b9:04:e1:f6:05:9f:83:a1:d6:2a:
48:ed:94:37:b1:0b:00:b8:65:e1:09:da:e0:25:51:
4f:3f:59:1a:b5:2a:44:7c:71:45:3b:18:50:d3:c9:
99:36:56:87:73:0a:32:29:ed:b5:2a:d1:9a:5d:78:
0f:72:60:4a:08:f3:54:dd:5e:67:dd:85:35:e4:6e:
f7:4b:55:2d:eb:d5:3d:93:cc:b3:34:de:d4:38:54:
be:b1:3c:a6:85:04:23:5c:69:91:d6:3d:51:09:d8:
d0:07:f8:ee:9f:b9:0b:0d:ae:44:2a:a0:19:1c:aa:
bd:f4:17:3e:99:3e:9f:3c:33:c7:36:ff:1a:79:a9:
cb:47:55:ad:3d:c3:72:ed:4a:eb:a2:4a:d0:52:54:
05:4d:04:e1:98:18:d9:6f:b8:63:d0:b5:8e:51:e7:
76:98:93:be:40:3f:34:2c:75:8b:57:ac:cf:04:7d:
84:37:7e:0c:81:75:7b:ed:2f:b6:04:93:37:90:d4:
0f:b5:5a:20:97:4b:de:17:94:13:c4:a3:bb:94:ae:
75:b5:f3:5b:fa:1f:43:3a:44:a6:00:2c:77:ab:8e:
a8:a2:d7:0f:d5:46:63:c3:6e:dd:1a:ec:b8:2a:06:
29:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6F:3E:5E:70:3A:88:13:41:64:B1:3A:94:05:A2:22:95:90:81:FC
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/d28-XnA6iBNBZLE6lAWiIpWQgfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.120.0/21
77.87.192.0/21
78.27.224.0/19
89.184.68.0-89.184.79.255
89.184.88.0/21
193.178.144.0/23
195.39.197.0/24
195.177.116.0/22
IPv6:
2a02:2278:100::/44
2a02:2278:200::/40
2a02:2279::/32
Signature Algorithm: sha256WithRSAEncryption
3e:56:9f:c5:d2:85:e9:e5:12:1d:0d:4d:68:85:76:b3:cc:bd:
43:06:68:7f:12:ea:32:b7:56:5e:2d:e6:fb:47:67:5b:d6:cb:
3e:cf:45:10:6c:05:c7:4a:ec:6f:e8:40:cf:d5:f1:2f:60:93:
7c:6b:ce:a2:a9:7a:e7:f5:ad:a5:58:95:db:6f:cb:c0:c2:ec:
a4:6b:a9:9f:dc:0c:8b:c5:40:b9:95:99:f0:be:ad:58:e5:52:
9a:30:d7:e8:28:41:40:4c:56:be:17:05:3d:e4:84:9c:91:fb:
cf:c5:f2:61:fa:ac:29:e5:d0:e2:86:4f:29:31:68:74:e4:84:
fd:7b:c4:44:1f:3b:e5:49:00:b2:af:4b:28:b4:08:50:b4:32:
10:7c:ab:5c:ab:46:87:d0:69:45:7c:a7:28:6a:23:43:66:43:
af:ba:c0:9d:4b:a4:f1:47:25:a7:3a:d9:f3:ab:20:75:49:4e:
64:d3:50:cd:72:04:a4:bf:6b:23:e0:17:9a:8c:a4:21:2f:d3:
98:cd:39:84:d7:51:97:1a:c4:55:50:f4:79:cb:80:cc:d4:7f:
b4:c0:2b:94:29:22:1e:58:de:be:8e:c4:cf:df:cd:e4:72:a2:
48:af:1f:d6:4e:7e:c4:36:0f:42:7a:bf:3c:59:1d:8f:8b:cd:
8c:71:90:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:24:05 2024 by rpki-client on console-ams.rpki-client.org