Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/oEYYpaDFfedJB5n-5ZB-hiCNQw0.roa
File: oEYYpaDFfedJB5n-5ZB-hiCNQw0.roa (raw, json)
Hash identifier: NkX+Gnens741Jl7DJk7QHUiiaxbN9ctgMymqQeHPBic=
Subject key identifier: A0:46:18:A5:A0:C5:7D:E7:49:07:99:FE:E5:90:7E:86:20:8D:43:0D
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0192D849A1CDC5344C029887CD607C70129E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/oEYYpaDFfedJB5n-5ZB-hiCNQw0.roa
Signing time: Tue 29 Oct 2024 12:39:17 +0000
ROA not before: Tue 29 Oct 2024 12:39:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 2.58.168.0/24 maxlen: 24
2.58.169.0/24 maxlen: 24
77.242.156.0/24 maxlen: 24
77.242.158.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
88.151.57.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
88.209.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d8:49:a1:cd:c5:34:4c:02:98:87:cd:60:7c:70:12:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 29 12:39:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a04618a5a0c57de7490799fee5907e86208d430d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c2:cc:c4:4d:6c:d9:92:e3:a8:16:52:5b:97:
fb:f6:4e:2b:f9:70:12:b7:c8:1d:a1:3a:86:e3:29:
d3:0a:2b:64:f1:24:02:f8:ab:da:76:cf:b3:13:1a:
8e:9e:32:04:a8:db:b1:32:dc:24:44:4d:62:35:91:
bb:90:85:86:12:1e:84:8d:2c:d0:c5:5b:6d:a1:17:
39:6b:cb:b5:1f:a9:5b:66:1b:c5:f3:b2:92:43:d4:
ff:5c:09:6f:d3:11:1f:8f:44:3b:05:19:54:2b:df:
44:5f:bb:7c:05:14:f2:e6:16:9e:00:31:1f:67:8e:
83:3c:4c:85:e3:ea:72:55:b2:2e:6f:28:9d:f4:c2:
ca:61:df:2e:4e:1f:a8:36:eb:d0:e6:7f:5e:47:0c:
f5:49:b7:9d:2d:29:26:a5:e7:5a:f6:37:30:06:68:
ab:8b:a1:1a:14:81:2b:a3:93:f4:6e:a6:4a:f0:25:
ba:a0:24:a6:1c:29:07:1d:9d:67:a3:05:e8:30:d3:
b1:19:3f:a0:aa:cd:3b:f6:0d:0b:a4:33:11:97:5a:
43:f4:59:68:9a:25:58:6a:fc:5a:38:85:94:4f:ae:
1e:fd:d5:f7:30:86:46:1b:6c:96:bf:0f:7d:b0:e5:
d1:5e:ad:40:54:a8:1c:a4:52:5b:78:03:30:1a:a5:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:46:18:A5:A0:C5:7D:E7:49:07:99:FE:E5:90:7E:86:20:8D:43:0D
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/oEYYpaDFfedJB5n-5ZB-hiCNQw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/23
77.242.156.0/24
77.242.158.0/24
83.137.159.0/24
88.151.57.0-88.151.58.255
88.209.217.0/24
88.209.226.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:29:1a:4e:2a:30:0e:3f:39:dc:f5:dd:fb:a7:ee:bd:d8:ce:
ff:49:18:74:0f:f9:d1:4b:ef:ff:ee:38:c4:56:d8:06:a3:2c:
02:62:7f:34:7d:49:99:73:e4:93:2e:3b:b2:34:f2:a2:57:b4:
a6:6b:dc:e0:15:24:76:9f:c7:8f:55:fa:13:75:d8:64:e9:5b:
5c:3f:6a:54:d3:ef:b3:a4:ca:6d:30:43:5c:94:14:94:f9:a1:
3e:59:a8:cf:ac:98:86:ad:09:c4:71:52:14:9e:6d:e7:9c:7e:
dd:f4:c0:b9:90:fd:fb:92:ce:97:1f:03:52:71:2e:b0:73:07:
3a:ad:b2:f9:74:d7:91:34:5f:65:06:70:59:68:be:b3:b8:dc:
46:c2:b2:87:dc:05:76:be:70:9c:b2:ba:5f:46:a5:48:d0:77:
f5:8b:62:e0:25:79:09:7c:b5:04:9d:8e:7d:9d:81:82:00:96:
e5:b2:e9:0f:7d:b2:47:a0:33:33:dc:ef:dd:bf:a7:7f:42:82:
82:9b:0e:ef:81:b2:c2:df:75:ac:ed:54:39:8e:7f:42:ae:cf:
cc:c7:05:45:3c:6f:27:3e:af:42:df:39:e2:34:68:d9:39:76:
47:c7:90:38:29:94:d0:b7:e0:3a:a0:30:63:28:e4:75:b8:bf:
c7:7e:26:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:09:22 2024 by rpki-client on console-ams.rpki-client.org