Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/a1sao6VUW-41vZlUwR_Fj0M_VyA.roa
File: a1sao6VUW-41vZlUwR_Fj0M_VyA.roa (raw, json)
Hash identifier: q6+kw7zRDCe5MS1VaCBFqyKxuFSVG5WCPgtQf2ulrOI=
Subject key identifier: 6B:5B:1A:A3:A5:54:5B:EE:35:BD:99:54:C1:1F:C5:8F:43:3F:57:20
Certificate issuer: /CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
Certificate serial: 0192322F87E8BEA26B2EF1545C5F327974B1
Authority key identifier: 79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/a1sao6VUW-41vZlUwR_Fj0M_VyA.roa
Signing time: Fri 27 Sep 2024 06:33:48 +0000
ROA not before: Fri 27 Sep 2024 06:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59706
IP address blocks: 77.83.56.0/24 maxlen: 24
77.83.57.0/24 maxlen: 24
185.137.152.0/22 maxlen: 22
185.137.152.0/24 maxlen: 24
185.137.153.0/24 maxlen: 24
185.137.154.0/24 maxlen: 24
185.137.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:2f:87:e8:be:a2:6b:2e:f1:54:5c:5f:32:79:74:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
Validity
Not Before: Sep 27 06:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b5b1aa3a5545bee35bd9954c11fc58f433f5720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:60:f1:5a:93:74:a4:58:b6:88:99:90:5a:
22:c1:61:20:46:d9:4a:57:04:fb:82:0f:31:2b:0f:
f1:d3:b5:af:c0:c6:24:86:01:40:55:63:09:48:15:
48:ce:48:cc:74:b9:1f:06:23:bb:38:b2:7d:35:e1:
c0:af:77:8b:4a:19:a2:a6:00:f1:4e:12:bc:af:52:
12:40:34:c9:a6:bd:18:90:ae:31:14:ae:12:10:dc:
67:97:b5:a6:12:cd:5b:f4:86:3d:b9:05:09:a0:af:
a2:9e:4b:ec:df:0b:c9:88:59:ae:e2:dd:0e:72:55:
d6:1c:53:60:0f:2a:0a:43:ee:27:af:dc:38:30:23:
11:86:60:a6:8e:33:78:19:a7:8f:72:a0:17:e4:b0:
7f:9f:62:5f:f1:07:6e:14:ee:75:e0:cb:2e:98:33:
88:29:28:1c:6d:97:0f:2f:26:6b:e9:86:db:74:e0:
e2:4b:d1:17:15:4c:88:3e:cd:4a:5f:1d:3b:d1:ea:
6c:96:95:18:a0:e2:06:6d:e0:49:9b:71:b6:87:bc:
50:08:f6:ed:5d:90:11:19:27:06:0a:8c:9f:dd:6f:
cc:53:2c:29:8d:d7:4b:b8:db:bc:d3:4f:10:89:a9:
57:82:68:3e:43:43:08:62:68:d4:1d:79:27:a8:27:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5B:1A:A3:A5:54:5B:EE:35:BD:99:54:C1:1F:C5:8F:43:3F:57:20
X509v3 Authority Key Identifier:
keyid:79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/a1sao6VUW-41vZlUwR_Fj0M_VyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.56.0/23
185.137.152.0/22
Signature Algorithm: sha256WithRSAEncryption
71:c7:99:5e:e6:0d:91:0b:c3:0c:a0:6a:d2:c1:9a:d0:c1:7f:
b6:a7:e2:20:d9:50:69:0c:89:28:05:69:9e:64:b8:82:2a:05:
85:35:ab:f3:ce:18:32:71:79:52:6b:e9:f0:9d:58:86:7a:73:
ee:05:43:72:a3:d6:ca:3f:6c:27:87:da:eb:18:91:40:fe:6e:
91:c1:ae:b4:83:f5:26:10:4b:f0:26:01:f0:3e:8e:02:95:7c:
24:af:a4:5e:ee:05:54:f9:b2:c9:8c:40:6f:dd:00:07:11:da:
a4:a6:0e:aa:d3:f1:2c:b3:39:94:d8:67:81:2b:15:10:04:1a:
50:61:fa:3c:64:81:27:0a:0e:e6:d2:43:ad:40:34:6d:26:5f:
5d:9d:2e:ac:31:96:56:17:a4:2f:f9:0f:76:f0:29:97:27:7f:
af:99:80:f1:d6:71:56:c8:2f:13:23:c0:98:4c:19:ff:4b:32:
49:e3:10:62:a1:1d:95:eb:97:6a:99:73:11:83:01:00:d1:a1:
8f:4c:2a:bc:05:d7:ca:cb:64:ed:d9:eb:56:ae:78:61:a9:ed:
10:d0:2a:1e:79:cf:ae:04:65:56:16:dc:05:c0:08:d2:26:a6:
ce:da:b0:48:3f:ee:cd:a7:85:3a:ec:7b:a2:c1:cc:41:0d:4e:
ca:f9:8e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:18:52 2024 by rpki-client on console-ams.rpki-client.org