Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/IDZ3zAcfEPYAW1n6JNz7dHyIIgc.roa
File: IDZ3zAcfEPYAW1n6JNz7dHyIIgc.roa (raw, json)
Hash identifier: /qjhxYat//PDNXtvAVmfESvFTcBOFuFblShVjVaTPMs=
Subject key identifier: 20:36:77:CC:07:1F:10:F6:00:5B:59:FA:24:DC:FB:74:7C:88:22:07
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 018CC2DB04CCD82E564D5294B47F52B53C85
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/IDZ3zAcfEPYAW1n6JNz7dHyIIgc.roa
Signing time: Mon 01 Jan 2024 02:29:42 +0000
ROA not before: Mon 01 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29107
IP address blocks: 91.216.176.0/24 maxlen: 24
193.201.80.0/23 maxlen: 23
77.87.144.0/22 maxlen: 22
195.69.84.0/23 maxlen: 23
195.69.84.0/22 maxlen: 22
195.69.86.0/23 maxlen: 23
194.0.88.0/23 maxlen: 23
194.0.88.0/22 maxlen: 22
194.0.90.0/23 maxlen: 23
194.0.90.0/24 maxlen: 24
92.249.64.0/18 maxlen: 18
77.87.148.0/22 maxlen: 22
178.54.4.0/24 maxlen: 24
178.54.0.0/17 maxlen: 17
178.54.5.0/24 maxlen: 24
178.54.6.0/24 maxlen: 24
178.54.7.0/24 maxlen: 24
178.54.8.0/24 maxlen: 24
178.54.9.0/24 maxlen: 24
178.54.10.0/24 maxlen: 24
178.54.11.0/24 maxlen: 24
178.54.79.0/24 maxlen: 24
178.54.120.0/24 maxlen: 24
178.54.121.0/24 maxlen: 24
2001:67c:2b14::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:04:cc:d8:2e:56:4d:52:94:b4:7f:52:b5:3c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Jan 1 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=203677cc071f10f6005b59fa24dcfb747c882207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:51:1c:e9:7f:db:63:bb:c8:30:af:9e:71:
22:da:64:86:e2:6e:83:64:7b:3a:61:fb:28:c6:12:
d9:8f:97:35:59:3d:b0:44:3e:17:9a:8c:62:48:f9:
95:7d:6a:a5:38:5a:80:29:a6:b6:8f:f3:d5:e3:63:
94:22:8f:d7:ec:fa:91:06:1a:aa:58:10:e3:e6:36:
90:af:36:47:76:a9:db:a0:88:aa:de:9f:b0:e3:60:
c9:9e:da:05:4b:ea:91:0a:66:16:f4:69:f6:ae:99:
d7:60:5f:8c:b4:50:d4:de:f8:ab:9d:e3:79:49:00:
89:e4:80:83:a5:01:1f:d2:af:84:46:ec:d7:25:8e:
53:c4:13:99:66:e6:54:96:f6:b1:b6:e9:05:26:82:
65:d6:ad:fd:1a:ec:bd:7c:6d:a7:01:57:6c:41:01:
4b:25:ca:27:04:88:88:e0:b5:60:19:99:32:f9:05:
f0:f6:80:10:aa:4a:14:4a:da:2c:be:e1:c8:97:87:
7b:98:b8:10:57:e8:d3:2a:ee:d9:35:a7:93:3f:07:
6c:7e:77:06:d1:7b:e4:68:d1:6c:c3:0e:62:d6:48:
d4:04:e1:c2:5d:3b:e8:38:c5:64:cd:ab:bb:51:24:
23:9e:e3:15:b4:08:f3:1a:d8:e6:1b:e6:73:15:13:
90:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:36:77:CC:07:1F:10:F6:00:5B:59:FA:24:DC:FB:74:7C:88:22:07
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/IDZ3zAcfEPYAW1n6JNz7dHyIIgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.144.0/21
91.216.176.0/24
92.249.64.0/18
178.54.0.0/17
193.201.80.0/23
194.0.88.0/22
195.69.84.0/22
IPv6:
2001:67c:2b14::/48
Signature Algorithm: sha256WithRSAEncryption
7b:1a:94:18:c0:75:6e:b7:c1:ea:83:d2:fa:fb:7f:13:0b:0b:
bd:b3:0d:f5:84:cb:4a:68:30:4c:19:a8:2d:af:60:75:fa:57:
b4:2d:36:63:57:af:64:f8:8c:06:96:5e:60:f3:3b:e4:4e:c4:
0e:1c:60:6b:d5:c2:aa:92:7e:be:15:96:62:a9:d1:8d:11:77:
85:ae:49:4f:6c:e3:af:3f:47:3f:54:36:45:78:1c:ed:bd:07:
3c:b9:4e:4a:ef:9e:92:76:b0:a1:24:c3:0c:15:ec:3d:c7:92:
57:ab:a9:8a:85:27:eb:65:46:56:c9:63:ec:ae:56:ed:02:5d:
21:47:36:54:b9:3c:09:dc:ab:4a:03:fb:e8:39:69:22:23:e4:
cd:c3:db:4a:fa:0e:c4:55:d9:5c:5c:a5:73:64:33:1b:e3:31:
34:bd:32:78:8b:d8:cd:89:6a:2c:a4:4f:0b:56:f5:c5:66:36:
06:ca:93:27:56:bb:0c:2e:0e:2f:4c:a2:62:12:04:44:33:96:
3f:db:b8:cc:f7:62:2d:66:c6:a3:a2:69:74:1f:b5:25:c7:4f:
bb:92:39:f3:c2:8c:0c:82:d3:28:57:4d:2b:bb:fe:e0:6f:4e:
ed:5f:92:63:09:ae:59:2a:d9:52:e7:40:2a:71:c0:f7:f9:28:
f4:eb:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:03:54 2024 by rpki-client on console-fra.rpki-client.org