Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/0vvNyVSd06GYSXx69YdysmpgZgs.roa
File: 0vvNyVSd06GYSXx69YdysmpgZgs.roa (raw, json)
Hash identifier: HnTv4UWvFSqPhH3eBi/TA3AVyIUk6Tn68NGiq/8V2mE=
Subject key identifier: D2:FB:CD:C9:54:9D:D3:A1:98:49:7C:7A:F5:87:72:B2:6A:60:66:0B
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 018CC6B7D4999C51C8067934A9E361892BD2
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/0vvNyVSd06GYSXx69YdysmpgZgs.roa
Signing time: Mon 01 Jan 2024 20:29:45 +0000
ROA not before: Mon 01 Jan 2024 20:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52126
IP address blocks: 147.78.36.0/22 maxlen: 22
185.12.34.0/23 maxlen: 23
95.130.8.0/21 maxlen: 21
185.32.216.0/22 maxlen: 22
37.26.240.0/21 maxlen: 21
77.83.208.0/22 maxlen: 22
152.89.112.0/22 maxlen: 22
2a10:7340::/29 maxlen: 29
2a02:ebc0::/29 maxlen: 29
2a02:a80::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:d4:99:9c:51:c8:06:79:34:a9:e3:61:89:2b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: Jan 1 20:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2fbcdc9549dd3a198497c7af58772b26a60660b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:fe:42:b8:99:48:c0:e1:ee:01:57:44:ab:
9b:c9:31:ed:66:b9:a5:0b:73:ed:19:19:ba:b6:7c:
c1:36:07:5b:92:d8:1d:5f:3a:16:e8:1f:fb:6c:64:
5f:97:ca:4c:8c:4a:26:7d:9a:2f:3f:0c:9b:47:4e:
b7:2d:d7:1c:fb:ad:bd:77:cb:62:b8:7c:b7:3b:b3:
c0:3b:18:f6:9d:8a:a3:dc:1d:e7:bd:54:8c:d8:98:
11:37:a1:9f:46:4c:33:8c:f1:af:93:ef:c0:25:e9:
56:82:6a:01:02:72:86:5a:6e:e0:b8:99:53:b4:53:
7c:2b:0a:ea:5d:f2:c8:8f:29:40:aa:02:0f:59:fe:
d1:12:30:6c:c1:f6:f1:8e:ac:4d:90:5a:34:3b:cb:
40:b5:31:ef:af:6c:e9:ba:27:4d:b3:11:33:14:f0:
aa:1b:90:47:1e:e5:77:1f:81:c7:29:5b:07:24:df:
c9:50:0a:5d:cf:8a:e4:fc:6c:7c:6b:41:5e:34:ea:
07:91:87:6b:83:f5:61:04:ee:85:8b:98:cb:ad:1c:
1e:72:d4:28:83:ff:e8:3d:fe:69:5a:6c:85:13:07:
04:4c:e6:79:62:62:a1:f2:16:67:fe:50:03:ed:2b:
95:56:49:df:be:85:75:e8:db:b4:ff:a1:8c:5c:98:
ca:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FB:CD:C9:54:9D:D3:A1:98:49:7C:7A:F5:87:72:B2:6A:60:66:0B
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/0vvNyVSd06GYSXx69YdysmpgZgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.240.0/21
77.83.208.0/22
95.130.8.0/21
147.78.36.0/22
152.89.112.0/22
185.12.34.0/23
185.32.216.0/22
IPv6:
2a02:a80::/29
2a02:ebc0::/29
2a10:7340::/29
Signature Algorithm: sha256WithRSAEncryption
31:d7:58:1f:47:df:d5:40:7c:ca:8f:ae:40:7d:57:21:b8:68:
b1:b5:27:23:2d:69:bb:e4:97:93:f5:82:a8:cf:61:28:14:9a:
2c:99:77:2f:83:10:4e:d4:21:a1:7a:96:56:e3:2c:86:3d:13:
f3:6f:b6:f1:1a:29:bd:1b:c7:93:37:d2:0f:47:6a:8b:78:57:
d5:e4:ae:bd:fa:43:ae:d5:61:9f:09:36:73:99:fd:d5:94:85:
70:c8:cb:80:21:82:13:03:45:ba:fd:dc:12:79:01:ad:4d:a7:
07:57:9d:51:6a:c2:80:74:d6:b0:7a:c9:c6:e1:6a:6f:e7:0f:
92:c3:ab:ab:3a:f8:31:7b:97:89:81:05:b3:28:7d:2e:85:ee:
42:8a:e1:ea:8e:1b:4d:a3:73:7a:7a:ce:4f:66:44:94:ac:58:
ec:93:21:cd:2e:c0:bf:13:37:ed:f8:27:9c:51:86:cb:ea:bc:
8d:5e:62:be:99:9c:e5:88:d0:f8:41:5d:4d:14:51:a5:69:74:
aa:5f:6c:5f:23:c4:a6:f3:b7:03:ab:65:a4:c2:41:08:52:22:
97:16:be:d7:e9:48:7d:de:71:b4:74:2b:91:87:12:9e:21:e5:
f6:3f:d9:c4:73:fb:a6:e1:d5:f3:b9:66:83:82:b2:ea:c9:c6:
3d:03:d0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:15:33 2024 by rpki-client on console-ams.rpki-client.org