Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/_97So05QzLZj_q5VjjrjU09jTCk.roa
File: _97So05QzLZj_q5VjjrjU09jTCk.roa (raw, json)
Hash identifier: iCLxpFrueFrJm260SBrc7DAkO+S9leYKwrsi/MhPbIY=
Subject key identifier: FF:DE:D2:A3:4E:50:CC:B6:63:FE:AE:55:8E:3A:E3:53:4F:63:4C:29
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 019154F61765C3F35B7652EC7C230AAF40D4
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/_97So05QzLZj_q5VjjrjU09jTCk.roa
Signing time: Thu 15 Aug 2024 07:34:59 +0000
ROA not before: Thu 15 Aug 2024 07:34:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 5.253.63.0/24 maxlen: 24
79.133.180.0/24 maxlen: 24
194.113.153.0/24 maxlen: 24
195.245.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:54:f6:17:65:c3:f3:5b:76:52:ec:7c:23:0a:af:40:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Aug 15 07:34:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffded2a34e50ccb663feae558e3ae3534f634c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c7:a7:e2:7a:90:e9:07:8a:5f:9b:22:48:eb:
1a:8f:1f:c3:d3:60:12:dd:30:25:ac:e9:84:9c:62:
84:d2:b2:f5:34:f8:04:cb:e4:ee:40:d5:9d:1f:ff:
7e:e5:84:f0:e1:b4:c4:6a:df:97:3c:0b:bb:f8:90:
44:fb:29:a7:9b:f9:62:c6:0e:2c:7f:af:e5:16:bf:
fb:d8:31:97:90:ff:5b:1c:cb:14:96:37:2c:99:97:
1c:05:c5:bf:34:af:36:f3:53:52:a0:0a:63:a2:04:
70:14:36:19:5c:25:6d:5d:59:09:0b:b6:55:eb:b7:
36:f9:83:e2:ea:03:5e:0b:9f:fd:26:2b:42:e2:a2:
2a:72:19:81:52:33:d6:a6:88:8d:48:b1:79:c3:b0:
19:9d:93:51:33:8a:c8:bb:52:55:f5:17:3f:36:76:
db:2f:e2:ce:92:2c:3e:ad:d3:69:d1:c8:bd:da:33:
4d:2b:f2:9a:bb:06:58:62:42:97:01:5c:00:97:65:
7b:d8:4b:54:40:93:79:b9:54:24:17:b0:66:2d:50:
4e:cc:a8:3c:b5:ab:36:78:72:84:d8:7c:21:5b:d4:
35:c8:a3:c6:dc:61:fa:61:a8:6c:ea:07:a0:98:b0:
31:e1:ae:ab:28:2a:94:4c:0f:58:2e:8f:50:2c:34:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DE:D2:A3:4E:50:CC:B6:63:FE:AE:55:8E:3A:E3:53:4F:63:4C:29
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/_97So05QzLZj_q5VjjrjU09jTCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.63.0/24
79.133.180.0/24
194.113.153.0/24
195.245.239.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:9c:46:e0:b1:cd:8a:40:cc:94:39:2e:86:54:05:af:00:37:
17:c8:33:9c:51:bb:53:40:d3:28:30:eb:74:46:a6:a7:bc:2a:
6e:3e:8d:cd:9b:a7:d9:09:73:12:c7:e0:6c:d3:da:0d:84:74:
78:11:ce:6b:56:ba:cc:02:27:d7:07:74:10:44:be:99:4a:46:
49:94:58:13:ca:17:e1:ae:5d:b9:b5:11:e9:01:02:93:f7:a1:
6c:4f:9f:50:76:06:c5:4c:93:9c:be:b1:21:fd:1d:0a:9b:f7:
cd:c2:5f:10:0b:b8:71:96:9d:7c:cf:fd:a4:23:a9:ef:e0:9e:
cb:95:91:20:ef:22:14:e6:ea:a1:b9:97:ea:9b:2d:ed:fc:20:
1e:7d:8b:3e:88:c3:25:15:93:6d:93:80:f7:93:23:98:72:20:
3d:c5:da:8f:56:ea:17:b1:72:21:1b:e7:a0:7b:40:e4:59:58:
06:04:96:41:4d:a9:a2:dc:02:69:93:a4:a8:60:e5:98:c5:ec:
e5:ec:7e:ed:7a:e5:e1:ea:d1:44:95:6e:8b:63:6b:b3:79:2f:
c6:c8:11:cd:83:74:e4:09:5b:bc:63:a9:6c:0b:2d:19:86:2f:
ee:a5:42:d9:59:bb:09:29:56:9d:08:03:d4:32:f2:1c:d1:9e:
20:e7:09:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:38:49 2024 by rpki-client on console-ams.rpki-client.org