Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/IwSbcS93CkBa7rBmB13tJy7Kv7c.roa
File: IwSbcS93CkBa7rBmB13tJy7Kv7c.roa (raw, json)
Hash identifier: 2L7Xk/HojCr9ZD7DX8Fs/tCE+8R7+tH14mnbs5kTbig=
Subject key identifier: 23:04:9B:71:2F:77:0A:40:5A:EE:B0:66:07:5D:ED:27:2E:CA:BF:B7
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01923D17E4C577B75AC5E591A7B922E5E927
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/IwSbcS93CkBa7rBmB13tJy7Kv7c.roa
Signing time: Sun 29 Sep 2024 09:23:48 +0000
ROA not before: Sun 29 Sep 2024 09:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208555
IP address blocks: 62.220.126.0/23 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.110.0/23 maxlen: 24
87.107.110.0/24 maxlen: 24
87.107.111.0/24 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/23 maxlen: 24
87.107.166.0/23 maxlen: 24
87.107.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3d:17:e4:c5:77:b7:5a:c5:e5:91:a7:b9:22:e5:e9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Sep 29 09:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23049b712f770a405aeeb066075ded272ecabfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:a2:9c:61:56:a6:6c:83:f8:f2:79:66:85:
61:df:91:15:b9:46:31:36:b6:b9:e9:fd:89:f9:26:
63:84:91:e9:05:0c:bf:8a:33:0e:0a:80:ec:7b:a6:
6d:8e:2f:a9:67:4d:58:92:05:54:d0:d0:f7:1a:cf:
82:07:f4:d7:0b:5f:fe:b9:a1:d5:f6:cf:0a:d6:7f:
ac:00:aa:40:53:45:55:08:ab:b1:5d:c0:cd:1a:d0:
a6:15:2a:a8:9a:ae:61:24:f9:c7:a7:d4:7d:91:89:
47:93:b0:42:b9:1e:06:67:70:56:2b:f4:08:9a:bf:
ee:73:ed:e8:b0:be:82:3d:47:01:d0:24:66:e5:90:
cd:3d:92:df:26:a6:b7:3f:02:04:74:79:8f:8c:49:
42:1e:4f:58:1b:7b:a5:37:bc:1f:88:0f:4a:26:29:
f2:ed:21:ac:b8:cd:34:57:1c:25:94:1e:f8:1e:e6:
12:e5:f3:df:c6:7a:68:c6:8e:e3:c7:cf:df:21:88:
07:79:2a:d8:ed:35:30:25:f5:2b:08:85:9c:0e:92:
5f:04:ae:00:57:ed:da:62:8a:10:7d:dd:84:68:c2:
a1:c0:ad:4f:d6:ef:ac:dd:d2:b2:75:dc:71:4f:36:
dd:a8:79:e2:b2:d6:08:50:72:70:95:2f:79:98:dd:
33:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:04:9B:71:2F:77:0A:40:5A:EE:B0:66:07:5D:ED:27:2E:CA:BF:B7
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/IwSbcS93CkBa7rBmB13tJy7Kv7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.126.0/23
81.12.24.0/22
81.12.30.0/23
87.107.110.0/23
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
95:18:cd:53:60:c5:a5:fb:de:b2:2a:e0:d6:2b:12:81:10:b2:
05:cb:d0:f9:8d:6a:1c:bf:19:87:6d:ed:e4:5c:6b:43:97:ea:
4a:7e:1a:51:ce:2e:9a:eb:92:74:19:ab:f3:78:96:a8:53:d9:
20:30:4b:9a:b4:cf:23:ce:62:2c:8c:dd:fa:cd:2b:83:b2:b2:
55:50:56:f3:47:eb:73:51:98:f6:aa:82:af:6f:a3:79:5f:16:
4b:ac:50:2c:e8:0c:94:77:ea:3d:71:93:68:d3:f8:9d:c3:66:
76:64:97:25:20:56:5f:45:39:5d:ff:8d:88:68:ec:1f:e8:d3:
f9:0b:b8:c9:c1:c0:5e:f1:c3:f1:4f:a7:58:39:76:1c:26:77:
51:f1:c2:a0:f1:b4:01:26:b0:dc:ae:ab:d4:50:e2:27:4c:4f:
30:95:3e:a9:f3:96:6b:94:ae:a1:54:9c:d3:5e:df:a2:a2:8f:
35:85:65:68:e3:5e:de:dc:14:1b:ca:fa:be:f3:9c:f1:d3:24:
db:62:40:27:ec:87:83:9f:12:a0:2a:9d:ca:ef:65:15:91:dc:
d4:94:32:72:eb:37:8b:35:99:02:28:4e:09:c3:1d:fc:3a:f5:
d7:ea:06:ad:09:f3:3d:81:bc:6e:af:74:1d:f3:a4:7a:ae:df:
46:2b:7e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:36:29 2024 by rpki-client on console-fra.rpki-client.org