Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/dc_x9ouU3B8qOJGmXJ8zumnuZCE.roa
File: dc_x9ouU3B8qOJGmXJ8zumnuZCE.roa (raw, json)
Hash identifier: i1UYhcNSiPwGvW3huRmvlRSLe7h9tX4aJ5nWf2Q61bk=
Subject key identifier: 75:CF:F1:F6:8B:94:DC:1F:2A:38:91:A6:5C:9F:33:BA:69:EE:64:21
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 018CC4249B815CD04BFD36F1AAA17BBE6FFF
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/dc_x9ouU3B8qOJGmXJ8zumnuZCE.roa
Signing time: Mon 01 Jan 2024 08:29:42 +0000
ROA not before: Mon 01 Jan 2024 08:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28907
IP address blocks: 195.39.197.0/24 maxlen: 24
195.39.196.0/24 maxlen: 24
195.39.196.0/23 maxlen: 23
5.149.124.0/22 maxlen: 24
5.149.120.0/21 maxlen: 21
193.178.144.0/23 maxlen: 23
193.178.146.0/23 maxlen: 23
77.87.192.0/21 maxlen: 21
89.184.64.0/22 maxlen: 24
89.184.64.0/19 maxlen: 24
89.184.66.0/23 maxlen: 23
89.184.65.0/24 maxlen: 24
89.184.72.0/21 maxlen: 21
89.184.80.0/21 maxlen: 24
89.184.88.0/21 maxlen: 21
78.27.192.0/19 maxlen: 24
2a02:2278:235::/48 maxlen: 48
2a02:2278:204::/48 maxlen: 48
2a02:2278:100::/44 maxlen: 56
2a02:2278:236::/48 maxlen: 48
2a02:2278:ff00::/40 maxlen: 56
2a02:2278:7000::/40 maxlen: 56
2a02:2278:800::/40 maxlen: 56
2a02:2278:200::/40 maxlen: 56
2a02:2278::/40 maxlen: 56
2a02:2278::/32 maxlen: 32
2a02:2278:220::/48 maxlen: 48
2a02:2278:234::/48 maxlen: 48
2a02:2278:208::/48 maxlen: 48
2a02:2278:221::/48 maxlen: 48
2a02:2278:237::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 15:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:9b:81:5c:d0:4b:fd:36:f1:aa:a1:7b:be:6f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Jan 1 08:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75cff1f68b94dc1f2a3891a65c9f33ba69ee6421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:77:e5:50:5c:af:a0:33:ef:5d:a9:14:e5:d2:
8d:0a:65:3f:1f:2c:b3:a3:1c:17:db:e4:c2:f6:48:
25:28:0d:ce:52:ad:4c:6d:6c:aa:59:7e:ef:cb:d6:
61:36:6b:03:b5:f9:fe:79:6a:8e:18:d1:9a:d5:ea:
e2:c1:13:dd:55:f5:d9:3d:60:07:02:b6:98:a3:69:
5a:22:0a:2b:39:d0:72:86:b4:b6:65:f9:d3:2d:57:
a5:7f:d6:9c:7d:a2:56:a9:33:3c:86:0f:ce:51:4f:
5b:7d:8b:79:ee:c1:48:74:89:6d:ac:59:a5:31:f2:
47:b1:60:7d:b9:45:df:53:cd:25:07:09:79:ec:c3:
b9:de:48:41:5a:0b:b5:8e:2b:0f:f1:96:a2:16:fb:
9d:39:a0:64:53:8f:16:0c:9d:74:e7:80:90:3b:ba:
9e:5b:40:a4:9a:df:ef:02:4f:4c:45:82:ab:d8:71:
88:f1:06:69:9c:85:71:e0:cd:2d:13:94:24:25:95:
d1:a9:39:83:47:b3:f5:04:bd:c3:1d:ad:bd:59:51:
87:f8:54:3e:eb:af:4a:44:4e:ab:9e:62:c3:b1:8f:
84:6e:b4:15:9f:ee:67:c1:9a:7a:92:b1:65:d5:a1:
b3:a6:f8:85:92:19:65:88:de:44:94:44:b9:95:54:
28:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CF:F1:F6:8B:94:DC:1F:2A:38:91:A6:5C:9F:33:BA:69:EE:64:21
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/dc_x9ouU3B8qOJGmXJ8zumnuZCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.120.0/21
77.87.192.0/21
78.27.192.0/19
89.184.64.0/19
193.178.144.0/22
195.39.196.0/23
IPv6:
2a02:2278::/32
Signature Algorithm: sha256WithRSAEncryption
7b:df:e3:87:5a:34:ea:86:a5:a1:e0:e8:97:f7:04:02:7e:29:
7d:06:08:92:7f:21:45:e2:ea:f1:63:81:cf:43:cc:37:5e:81:
9f:7f:47:7d:04:fb:07:49:1b:ba:90:5a:09:26:1e:84:10:5e:
da:f4:68:a3:97:5d:93:57:00:33:21:2d:81:df:52:b8:17:5c:
3b:bc:dc:9d:51:fd:3b:95:08:c6:08:33:c3:b8:d9:e2:49:8e:
23:a7:c1:dd:49:37:de:d5:e2:2e:b0:76:1d:60:91:cb:0c:d9:
17:5e:0a:f6:62:e8:a4:d6:1a:8e:80:4e:d5:6a:e0:6f:79:dc:
c7:37:49:3a:95:db:44:27:f0:0c:4c:8c:34:ba:d5:31:20:e9:
92:d2:ab:f2:5b:db:44:01:7d:1a:bb:b4:74:a4:84:19:c9:87:
20:18:b1:27:41:4b:94:c4:77:cd:1f:2d:de:a8:d4:04:71:7b:
f0:38:6d:4c:ea:f0:00:ee:87:24:ee:8e:b6:e8:a3:7e:70:11:
e2:c2:27:05:25:9d:7b:ef:71:66:dd:58:64:8a:40:e7:bd:27:
61:11:df:8d:51:ae:98:a9:80:7c:b2:a7:b8:80:f3:9b:bc:da:
bb:d7:ca:06:e9:a1:99:97:8a:f9:f7:7b:72:0d:bd:f3:c3:4b:
9c:4c:50:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:47 2024 by rpki-client on console-fra.rpki-client.org