Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/XT7pJS81kiWffTE9P7Kftaa-eEk.roa
File: XT7pJS81kiWffTE9P7Kftaa-eEk.roa (raw, json)
Hash identifier: 2oKUoeLdXEwNNaYDXhEdGF+QmIqWUCT65PUw5kl6DrQ=
Subject key identifier: 5D:3E:E9:25:2F:35:92:25:9F:7D:31:3D:3F:B2:9F:B5:A6:BE:78:49
Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Certificate serial: 018CC3B677BDDFCB7A10556FC934855E2D51
Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/XT7pJS81kiWffTE9P7Kftaa-eEk.roa
Signing time: Mon 01 Jan 2024 06:29:24 +0000
ROA not before: Mon 01 Jan 2024 06:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35612
IP address blocks: 49.236.0.0/18 maxlen: 21
128.116.128.0/17 maxlen: 17
77.32.0.0/17 maxlen: 21
212.124.160.0/19 maxlen: 19
78.134.0.0/17 maxlen: 17
185.11.20.0/22 maxlen: 22
146.241.0.0/16 maxlen: 21
84.33.128.0/18 maxlen: 21
5.157.96.0/19 maxlen: 19
216.247.128.0/18 maxlen: 18
84.33.64.0/18 maxlen: 21
88.149.128.0/17 maxlen: 17
147.53.128.0/17 maxlen: 17
88.147.0.0/17 maxlen: 21
81.174.0.0/18 maxlen: 18
2001:4c90::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:77:bd:df:cb:7a:10:55:6f:c9:34:85:5e:2d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Validity
Not Before: Jan 1 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d3ee9252f3592259f7d313d3fb29fb5a6be7849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d8:8a:19:e4:97:50:82:93:db:1b:d3:eb:ab:
23:a2:d4:1f:f4:01:fa:37:f0:35:44:be:ca:e6:42:
cf:a5:2b:94:ea:a9:c5:2f:31:1f:67:ed:f3:60:e4:
42:fc:a7:7c:16:9f:22:e4:27:88:85:17:fc:e0:b9:
4c:ee:28:53:8f:a6:61:6c:63:ef:3a:83:37:bb:9a:
bf:4a:a3:dc:5a:d5:40:e1:03:4f:eb:8d:6e:ce:e4:
d3:fe:b9:57:96:a2:98:f7:e2:9e:25:d3:29:05:bc:
e5:b2:d9:db:67:66:b5:5e:7c:31:6b:36:38:9e:d3:
ee:88:7d:be:5d:03:13:a8:5d:92:ea:ad:12:d1:b0:
70:da:2c:c7:73:5d:a2:1b:2b:4f:b0:1f:0a:aa:86:
e4:d3:72:43:9c:65:8a:ae:0c:d2:c3:98:23:d5:39:
bb:b2:d9:44:cf:67:d2:9c:52:6f:15:e6:0e:bb:2f:
a4:01:2f:c1:af:e1:13:7d:9b:26:e9:55:89:a3:5a:
3d:1c:07:bc:a9:1a:a0:d6:96:46:ad:8c:d7:e1:58:
28:e7:e6:86:8a:8b:a6:7c:12:fc:f6:61:1d:38:e6:
e1:1a:9a:64:48:52:61:84:96:4a:03:34:15:77:2d:
a6:f7:31:bc:44:66:0b:12:31:b4:de:fb:58:e5:20:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3E:E9:25:2F:35:92:25:9F:7D:31:3D:3F:B2:9F:B5:A6:BE:78:49
X509v3 Authority Key Identifier:
keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/XT7pJS81kiWffTE9P7Kftaa-eEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.96.0/19
49.236.0.0/18
77.32.0.0/17
78.134.0.0/17
81.174.0.0/18
84.33.64.0-84.33.191.255
88.147.0.0/17
88.149.128.0/17
128.116.128.0/17
146.241.0.0/16
147.53.128.0/17
185.11.20.0/22
212.124.160.0/19
216.247.128.0/18
IPv6:
2001:4c90::/29
Signature Algorithm: sha256WithRSAEncryption
30:1c:92:7e:d4:c3:45:27:12:39:63:c3:d1:26:df:7c:3b:05:
bf:7a:68:26:eb:df:5d:64:35:8c:71:86:5a:a5:3c:97:e9:1c:
c4:82:cb:e2:cf:64:52:51:ed:6c:f2:dc:25:ab:ed:4b:78:6f:
c1:33:fe:6e:ef:88:95:06:e0:dc:3d:3f:1c:cb:5f:31:3a:17:
fb:3b:17:3a:2c:4b:5a:cd:ba:58:77:15:96:3a:c7:d6:c8:da:
a7:f0:e9:eb:6d:21:7d:43:d7:ee:e7:0e:c9:b3:e0:fc:af:a7:
7a:33:3d:39:5f:4a:1d:22:f8:9a:71:91:9d:e5:9d:30:f5:f0:
e8:4b:2a:12:77:8f:2a:5f:e4:ca:be:59:0f:5c:4f:94:0d:8a:
85:1f:63:4a:d1:70:d2:92:22:a4:30:bb:c8:1b:2e:74:a9:61:
d9:01:c0:80:08:15:49:fd:37:d7:b7:61:d4:0a:48:66:bf:27:
27:b2:82:1a:42:22:69:2f:4c:28:ab:d6:95:9d:3d:0a:8b:21:
18:61:70:2c:49:b9:a3:7f:4d:78:99:c5:41:9b:e8:bf:09:ab:
3d:7d:2c:c3:49:12:73:9d:60:da:05:02:07:4d:61:83:c1:a2:
d2:5a:bb:21:f2:4b:f2:a2:33:60:87:c2:a8:2f:ee:7f:b7:d3:
e0:e7:25:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:35:16 2024 by rpki-client on console-ams.rpki-client.org