Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/dyP0fg15Irp5XccLtUu7GYfSaWE.roa
File: dyP0fg15Irp5XccLtUu7GYfSaWE.roa (raw, json)
Hash identifier: 7N1wo8OeziR/zTEiswrEM9Jsy2hgTl2q2AwXzSrST+Y=
Subject key identifier: 77:23:F4:7E:0D:79:22:BA:79:5D:C7:0B:B5:4B:BB:19:87:D2:69:61
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 0191044C72CDC8EAF2EA413839DA7E7B421C
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/dyP0fg15Irp5XccLtUu7GYfSaWE.roa
Signing time: Tue 30 Jul 2024 15:40:04 +0000
ROA not before: Tue 30 Jul 2024 15:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 85.28.32.0/23 maxlen: 23
85.28.34.0/24 maxlen: 24
85.28.56.0/22 maxlen: 22
85.28.56.0/24 maxlen: 24
85.28.58.0/24 maxlen: 24
109.238.196.0/23 maxlen: 23
109.238.201.0/24 maxlen: 24
109.238.202.0/24 maxlen: 24
109.238.203.0/24 maxlen: 24
109.238.204.0/24 maxlen: 24
109.238.206.0/24 maxlen: 24
109.238.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:04:4c:72:cd:c8:ea:f2:ea:41:38:39:da:7e:7b:42:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Jul 30 15:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7723f47e0d7922ba795dc70bb54bbb1987d26961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:17:4c:a6:40:4b:cd:e2:f8:b1:ef:b8:d6:c0:
2e:04:6e:44:51:97:05:c3:f1:3d:5c:29:b1:e6:47:
0e:17:9a:a0:fd:68:2c:c6:fb:67:25:7a:a4:69:44:
46:a4:ab:79:be:5b:51:b5:62:42:84:98:61:f8:00:
36:50:d9:06:b9:f7:75:df:dd:29:22:17:1f:ff:54:
11:60:1e:73:1d:0c:e6:5f:e6:fa:60:e5:58:9a:87:
7e:8f:f7:55:79:f1:ae:a7:36:4f:1c:57:dd:00:56:
98:c2:dd:f5:f3:61:2b:44:85:67:1e:5b:5c:86:78:
e1:e7:ab:34:ec:91:42:73:4d:9b:ec:31:62:ad:5c:
d0:0f:be:cb:2f:e3:54:41:82:69:ae:5c:51:d0:8b:
a5:ad:48:bd:a8:bb:3d:cd:c6:1b:6f:1b:95:56:aa:
1a:4f:28:59:61:d1:a7:ff:e7:9f:a4:17:a2:db:e4:
6b:f4:8f:d4:a9:e0:d6:14:92:64:b6:f5:d7:f1:39:
48:8f:50:1e:19:50:11:41:6c:b8:87:94:5e:ba:17:
f7:e6:34:f4:b4:22:e7:33:85:1b:44:75:e4:4e:dc:
c2:a5:1b:a7:09:7d:07:fa:c3:23:d7:16:d0:f6:b5:
a8:69:81:8e:d0:49:71:18:a8:b4:dc:62:dd:2a:81:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:23:F4:7E:0D:79:22:BA:79:5D:C7:0B:B5:4B:BB:19:87:D2:69:61
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/dyP0fg15Irp5XccLtUu7GYfSaWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.32.0-85.28.34.255
85.28.56.0/22
109.238.196.0/23
109.238.201.0-109.238.204.255
109.238.206.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:8e:72:df:21:34:5a:4d:59:e9:fd:10:67:50:04:cb:97:e5:
e1:ba:54:82:94:28:8b:67:dc:db:86:11:20:fa:e6:7a:dc:ad:
7b:69:33:e9:fe:ee:fa:8b:d8:c0:de:31:a6:e0:a8:11:1f:b6:
67:d2:c1:ba:d4:44:f4:be:df:8f:33:34:b4:7f:d5:56:32:72:
68:f5:b1:ec:c0:23:e3:b6:af:2a:a5:3c:b9:7b:32:cf:25:9e:
f8:8a:c0:10:73:3c:1e:f6:35:b3:a0:df:d7:e0:32:81:6e:23:
d0:d7:3a:e6:2c:9c:73:17:c3:6a:6c:0f:4f:ff:d9:98:38:74:
cb:52:b7:79:a8:3d:a3:0c:35:95:a6:94:f2:39:d2:7f:a4:19:
da:4c:19:0c:bd:76:aa:f8:e2:26:33:d6:07:c1:ba:a1:bd:20:
8d:a1:e6:0d:b0:03:6b:80:c6:b1:e6:e1:ff:ca:15:cf:04:7d:
ff:fb:81:45:d9:07:76:01:63:9a:ca:e9:97:49:c2:27:bf:11:
25:6d:28:1a:33:46:cd:d2:d2:84:64:94:c0:d5:98:30:a9:89:
97:33:09:60:55:7b:60:b3:ee:d1:5c:5e:d1:57:d8:aa:7d:d2:
72:b7:ce:c7:e1:81:a7:82:a9:d8:d8:ff:04:21:5b:f2:6a:7b:
aa:be:2f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:47:54 2024 by rpki-client on console-fra.rpki-client.org