Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/V3lIj4NJbaUoa_9biySS7VfrBec.roa
File: V3lIj4NJbaUoa_9biySS7VfrBec.roa (raw, json)
Hash identifier: 920vLg+3eag7UL3TNOTOfYIucc5Zy0plqTfsAfvrHWs=
Subject key identifier: 57:79:48:8F:83:49:6D:A5:28:6B:FF:5B:8B:24:92:ED:57:EB:05:E7
Certificate issuer: /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial: 018D8EB2BF4CF22A79F015CFE9AEB467EFA5
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/V3lIj4NJbaUoa_9biySS7VfrBec.roa
Signing time: Fri 09 Feb 2024 16:28:15 +0000
ROA not before: Fri 09 Feb 2024 16:28:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60530
IP address blocks: 5.152.128.0/22 maxlen: 24
5.152.144.0/22 maxlen: 24
5.152.148.0/23 maxlen: 24
5.152.154.0/23 maxlen: 24
5.152.156.0/22 maxlen: 24
185.30.44.0/22 maxlen: 24
2a00:ab20::/29 maxlen: 32
2a11:cf40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8e:b2:bf:4c:f2:2a:79:f0:15:cf:e9:ae:b4:67:ef:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Validity
Not Before: Feb 9 16:28:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5779488f83496da5286bff5b8b2492ed57eb05e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:73:bd:7f:f0:60:26:75:c5:07:ec:4e:17:13:
d9:d9:19:2f:f9:27:3c:03:07:17:d1:f1:5a:69:ac:
9e:97:34:19:0c:41:8b:5e:da:d7:f2:6c:35:f9:a1:
8d:27:22:ce:0d:f4:c4:e2:f6:e3:92:a5:fe:39:ba:
8c:8f:21:03:49:08:39:28:88:90:48:e5:0b:67:b4:
24:7c:99:d5:b6:de:7c:75:e8:0c:8d:0c:91:c6:19:
cf:31:60:fd:2f:12:87:c1:04:3e:e6:10:ba:a6:d6:
72:08:b0:9a:5c:d9:b1:7d:a1:1b:c8:65:9c:9a:af:
0c:9b:77:e1:9b:d5:0f:ff:69:d9:c9:1c:7f:3f:86:
d6:00:49:32:71:2c:c1:1b:ef:29:35:60:10:5a:0e:
15:ed:31:1b:0c:d7:51:15:92:67:cb:ec:d6:4c:1f:
b9:b0:5b:39:9f:be:84:69:f2:02:21:48:14:35:61:
57:05:14:e4:c2:22:1c:25:eb:9d:4c:fe:c6:2c:7c:
8d:5d:d5:8e:69:2c:ac:00:31:b1:a9:17:3a:e9:46:
a8:f8:cf:84:66:3f:f5:79:5f:95:c2:82:cf:fd:99:
92:19:f3:8b:f4:99:33:83:18:b9:16:53:3b:0d:82:
68:8f:c2:1e:a5:18:70:9e:c0:e6:23:c7:7c:7f:a3:
2b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:79:48:8F:83:49:6D:A5:28:6B:FF:5B:8B:24:92:ED:57:EB:05:E7
X509v3 Authority Key Identifier:
keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/V3lIj4NJbaUoa_9biySS7VfrBec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.128.0/22
5.152.144.0-5.152.149.255
5.152.154.0-5.152.159.255
185.30.44.0/22
IPv6:
2a00:ab20::/29
2a11:cf40::/29
Signature Algorithm: sha256WithRSAEncryption
23:cd:7e:71:6f:f8:af:88:5a:fd:45:c3:4f:bb:97:5f:81:d7:
30:55:28:cd:03:5d:b1:39:e9:be:af:d1:58:5f:d2:8d:e6:82:
9b:fd:39:64:e8:8d:bd:f4:00:d7:d4:33:2a:97:9e:3b:10:6d:
3b:f3:6f:23:eb:7f:b4:9d:40:d9:cc:48:4f:53:33:c9:24:b9:
ea:fa:9b:91:2d:ef:dc:57:d2:de:f9:cd:d0:93:a1:b3:0a:d4:
2b:a8:71:1b:de:d5:dd:e7:73:4b:ae:35:b3:e5:a8:dd:e7:6f:
27:20:8e:b6:b0:f5:2f:3b:1c:3f:6a:3f:49:87:df:97:14:a9:
f9:9a:0c:c1:ed:f8:c4:0d:4c:ba:d0:ba:13:c2:f3:a9:ea:93:
d4:4b:7c:e3:77:30:3c:25:42:1e:6b:f1:6c:c4:17:f9:c0:97:
57:0a:56:0e:31:04:7c:9f:17:8a:98:ac:d1:bc:0e:33:cc:3d:
84:5b:fb:1a:29:1c:04:26:e6:b8:66:91:b7:cb:a6:6c:b9:fc:
fa:fc:9b:08:e9:f3:2f:04:19:e8:61:d6:8f:cb:4e:c4:37:41:
ae:ea:87:64:0b:e1:6f:18:e3:1c:cd:f4:75:f5:c6:14:cb:a4:
ff:c9:8e:33:b6:38:1d:13:b7:ee:6c:a8:2a:7b:0d:77:9e:f1:
8f:b5:e4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:21 2024 by rpki-client on console-fra.rpki-client.org