Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/djCRfoHgfjhsSySN-mnSBMJ0cVU.roa
File: djCRfoHgfjhsSySN-mnSBMJ0cVU.roa (raw, json)
Hash identifier: lKTtrvdQNcd/Hya3KXuQsyVMXwotOqPEnTVLhtCemVM=
Subject key identifier: 76:30:91:7E:81:E0:7E:38:6C:4B:24:8D:FA:69:D2:04:C2:74:71:55
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 018CC4924FA006201F935C6BA5B7C7A2AB6E
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/djCRfoHgfjhsSySN-mnSBMJ0cVU.roa
Signing time: Mon 01 Jan 2024 10:29:32 +0000
ROA not before: Mon 01 Jan 2024 10:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58079
IP address blocks: 95.158.153.0/24 maxlen: 24
46.35.180.0/23 maxlen: 24
46.35.184.0/22 maxlen: 24
46.35.188.0/22 maxlen: 24
95.158.184.0/22 maxlen: 24
93.152.243.0/24 maxlen: 24
93.152.242.0/24 maxlen: 24
93.152.241.0/24 maxlen: 24
93.152.245.0/24 maxlen: 24
93.152.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 18:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:4f:a0:06:20:1f:93:5c:6b:a5:b7:c7:a2:ab:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 10:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7630917e81e07e386c4b248dfa69d204c2747155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:ef:37:47:c5:50:a1:f4:c5:87:90:82:fc:
06:4e:d1:06:28:c7:b1:97:93:0c:68:3f:5d:d5:a4:
55:7c:19:c2:19:5f:50:50:53:e5:e8:be:2d:0f:da:
d0:6c:a6:6d:b8:e0:48:d6:8c:79:35:55:8f:63:75:
6d:89:36:5f:c6:48:7a:ba:7e:91:e0:d8:25:82:22:
82:87:31:03:90:51:0d:3a:12:d4:c6:3a:4a:12:5f:
b7:2c:b0:8f:17:05:bd:16:61:b2:c4:b1:1f:e1:6c:
f6:ad:64:45:f8:56:c4:1a:16:59:04:64:b3:b0:fb:
e4:63:62:fb:41:7c:5b:50:85:8e:ee:45:e9:21:29:
e9:4c:2a:13:1a:60:7e:c7:27:3c:b1:a4:63:13:83:
95:a4:d3:dc:d0:ea:f3:25:0f:90:75:97:0c:44:fc:
11:7c:6a:3b:f2:bf:63:94:9a:bf:2d:c8:da:69:a9:
1b:31:b5:bd:a2:8f:d0:df:b6:5d:99:b1:37:67:0c:
7f:d1:aa:4a:22:ad:a9:b7:58:27:1a:7c:3d:59:86:
10:ca:68:bf:f1:81:11:1f:4d:e1:16:47:97:6b:b9:
69:dd:12:79:c4:dc:15:94:a3:c9:40:e3:32:f7:51:
78:ff:6b:f0:c7:f8:08:12:5e:41:83:ea:24:32:e2:
c2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:30:91:7E:81:E0:7E:38:6C:4B:24:8D:FA:69:D2:04:C2:74:71:55
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/djCRfoHgfjhsSySN-mnSBMJ0cVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.180.0/23
46.35.184.0/21
93.152.241.0-93.152.245.255
95.158.153.0/24
95.158.184.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:8f:62:99:5d:98:ac:72:86:ec:a0:12:f1:43:aa:2c:af:5b:
b9:ea:10:b2:a8:05:8b:ae:38:af:a5:fa:1f:96:ca:59:4e:42:
95:4c:7b:00:57:a1:79:6f:86:60:7d:24:10:17:ba:43:24:cc:
43:a7:f5:fd:0b:3b:a1:e8:66:3d:b1:a5:49:c1:db:9c:52:bc:
9c:1d:ad:3d:b2:56:39:8a:be:17:e6:c9:d8:95:f0:7b:66:e9:
67:cd:cf:4f:c1:47:c1:80:bd:4d:46:3b:48:f1:1d:9b:6f:9e:
b3:ef:14:8c:5c:83:17:85:52:20:f5:51:b2:8d:c9:49:24:ac:
19:db:59:13:ab:92:c5:5c:cf:6b:37:21:3e:e8:ab:29:cd:1a:
bc:ca:b1:5f:9f:a9:6f:74:5f:a3:9d:66:11:56:1b:ba:37:0a:
1e:94:dc:2f:1e:88:be:fe:a8:93:ff:28:d1:84:3d:eb:5a:bf:
38:81:fe:cf:bc:14:7c:95:7e:66:de:5e:f6:df:ea:98:5a:38:
49:ec:3c:45:eb:01:e6:8d:56:51:62:0b:28:98:65:0f:2b:a3:
5d:0c:0d:f3:98:8a:65:4c:63:16:36:c6:f6:6d:29:7e:40:e9:
05:ec:60:66:59:d8:d8:47:c1:53:c7:2c:f6:8f:ac:b7:8c:78:
15:50:7b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 00:22:14 2024 by rpki-client on console-ams.rpki-client.org