Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/V7AGjIDF7zLdKy8akZtcm3_mGhQ.roa
File: V7AGjIDF7zLdKy8akZtcm3_mGhQ.roa (raw, json)
Hash identifier: iutPQFrZJfNtUUEkH9yeyZ1zc+q8eufikGAyadN3nOI=
Subject key identifier: 57:B0:06:8C:80:C5:EF:32:DD:2B:2F:1A:91:9B:5C:9B:7F:E6:1A:14
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D20E9D4224DE03262194F6423299B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/V7AGjIDF7zLdKy8akZtcm3_mGhQ.roa
Signing time: Mon 01 Jan 2024 00:29:40 +0000
ROA not before: Mon 01 Jan 2024 00:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33911
IP address blocks: 89.35.158.0/24 maxlen: 24
89.34.24.0/23 maxlen: 23
89.41.176.0/23 maxlen: 23
188.214.88.0/24 maxlen: 24
89.41.182.0/24 maxlen: 24
77.81.181.0/24 maxlen: 24
89.41.183.0/24 maxlen: 24
2001:4d18:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:20:e9:d4:22:4d:e0:32:62:19:4f:64:23:29:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57b0068c80c5ef32dd2b2f1a919b5c9b7fe61a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:75:1c:32:3b:8d:75:27:0c:e8:7c:fb:39:
74:78:66:79:8b:98:e5:33:f4:57:c7:dd:39:9a:cc:
0a:ac:92:78:db:23:a3:43:07:d4:da:c1:cb:64:9e:
45:41:3a:d7:97:56:f1:d1:9d:79:9a:c2:e9:8c:83:
66:b2:32:20:4e:81:3d:ab:88:1e:24:c5:9d:99:33:
31:eb:50:16:2c:4d:c5:ee:74:7e:86:11:b9:55:a4:
6b:92:a4:0d:6e:e5:4f:f5:ea:db:36:f4:a9:e6:bb:
db:a5:69:15:37:86:09:6a:99:25:91:20:3b:d3:de:
68:07:34:90:8b:db:32:14:9b:6d:5b:bd:c1:13:17:
19:51:7a:73:6a:10:be:19:ae:08:5f:db:61:63:b2:
5e:82:20:14:da:db:ca:88:47:f6:70:2e:8b:b2:5e:
35:14:15:df:49:57:c9:93:85:d1:d5:36:55:82:3e:
77:a4:ea:f6:b7:d0:49:74:6a:e2:e6:5f:a1:b2:94:
6c:2b:36:a3:e9:39:e3:96:a2:9f:a3:8c:dd:c4:c2:
82:b5:a7:96:b8:bf:70:a9:b1:28:ea:47:46:5f:5c:
16:3b:88:48:23:9a:3a:14:14:aa:d3:36:ce:f7:00:
e0:a6:01:9a:a4:23:fe:b7:79:31:e6:eb:bd:01:cd:
61:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B0:06:8C:80:C5:EF:32:DD:2B:2F:1A:91:9B:5C:9B:7F:E6:1A:14
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/V7AGjIDF7zLdKy8akZtcm3_mGhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.181.0/24
89.34.24.0/23
89.35.158.0/24
89.41.176.0/23
89.41.182.0/23
188.214.88.0/24
IPv6:
2001:4d18:2::/48
Signature Algorithm: sha256WithRSAEncryption
20:b3:61:74:f6:74:28:32:98:a3:f0:ad:bc:ef:53:8c:bd:05:
f6:74:fb:30:8d:83:8a:22:78:4c:18:d8:f8:83:f0:95:f1:bf:
01:cf:61:a5:b0:ad:1b:1d:b9:b6:21:86:34:57:ac:27:67:e3:
2d:3b:c2:7c:b3:f2:57:24:aa:24:af:7e:0d:02:69:5d:87:8e:
64:b6:b1:12:ff:27:cd:35:52:2e:11:f5:5d:61:04:8d:ff:31:
66:cf:d1:c9:70:0e:07:9a:f7:79:9c:2c:7a:22:db:51:15:d9:
da:b1:63:77:53:1b:e8:17:5a:ad:1f:19:3b:bc:3f:19:7d:40:
58:d4:6d:cc:5a:8f:23:0b:e4:29:5a:61:65:e4:20:30:75:5b:
16:e0:32:20:be:0b:9a:f6:f7:24:cf:0c:8e:ad:48:ba:80:c8:
5e:80:f8:87:21:5f:71:94:86:d8:7a:30:2d:92:a4:62:45:11:
a4:9f:e5:53:09:50:3a:ad:6b:5b:d1:9d:2a:4d:51:a5:ff:13:
17:bf:74:a7:01:9b:ec:bf:34:19:50:52:6a:47:d4:8b:9c:f7:
d5:94:09:c5:43:5c:c9:b2:1a:fb:b1:18:96:96:d1:47:15:f0:
1a:19:ae:19:3b:b4:39:16:1f:8e:c8:81:d6:82:3a:a2:d5:2a:
cb:b5:3c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:43:54 2024 by rpki-client on console-fra.rpki-client.org