Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/c6UlQx3ddhbfoiXtURhA0uI7Qo8.roa
File: c6UlQx3ddhbfoiXtURhA0uI7Qo8.roa (raw, json)
Hash identifier: Ni9Pfw3SZnXaR66V3dZ64SylRxMqhVXpdKbaAsfKqGs=
Subject key identifier: 73:A5:25:43:1D:DD:76:16:DF:A2:25:ED:51:18:40:D2:E2:3B:42:8F
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 018CC56E2216A0166A74240118A7F555CE1F
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/c6UlQx3ddhbfoiXtURhA0uI7Qo8.roa
Signing time: Mon 01 Jan 2024 14:29:38 +0000
ROA not before: Mon 01 Jan 2024 14:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39040
IP address blocks: 77.95.120.64/26 maxlen: 26
77.95.120.0/26 maxlen: 26
77.95.120.192/26 maxlen: 26
77.95.120.128/27 maxlen: 27
77.95.120.160/27 maxlen: 27
77.95.120.0/24 maxlen: 24
194.187.90.0/23 maxlen: 23
194.187.89.0/24 maxlen: 24
2a02:388:ffff::/48 maxlen: 48
2a02:388::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:22:16:a0:16:6a:74:24:01:18:a7:f5:55:ce:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Jan 1 14:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73a525431ddd7616dfa225ed511840d2e23b428f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:34:14:30:98:84:25:09:2c:52:16:ea:aa:
9d:0f:9e:60:5d:8d:f3:79:84:25:3b:fb:2e:f1:5d:
16:02:cb:52:a4:aa:c7:5e:bf:4a:5b:cb:f4:04:26:
ff:b6:67:55:39:08:e1:40:0b:d6:e2:0d:fb:2b:e6:
71:09:c5:6c:46:b2:bb:78:6b:78:c4:4b:e4:31:39:
39:0a:5e:bd:22:ec:b2:a7:6e:f6:2a:05:50:e1:87:
47:c8:a8:80:d7:ac:1a:c8:8e:7a:cf:28:ed:ff:63:
5e:08:3f:82:c2:eb:46:10:f7:20:5e:c5:2e:12:48:
e4:75:0c:6a:c2:16:69:34:d4:57:d5:15:3f:4f:96:
1a:fc:f7:24:a5:0d:41:9f:cc:c8:72:d4:72:43:73:
26:a0:f8:f3:4d:7c:0a:6d:cc:a4:fb:1a:9b:b9:c1:
0d:66:13:68:23:e0:62:0d:b3:99:75:f0:35:70:9e:
20:9c:b3:aa:9f:7d:63:a5:01:79:f3:42:8c:57:b6:
58:cc:07:29:9a:7d:05:98:dd:b3:80:33:45:44:9c:
5f:b5:81:14:bc:d9:66:e8:92:f4:b2:9b:03:a8:53:
5f:eb:db:76:95:31:36:12:1e:d8:f3:1c:2d:fd:88:
14:72:29:24:6e:7d:a0:b4:d9:d0:13:6b:ec:12:e3:
58:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A5:25:43:1D:DD:76:16:DF:A2:25:ED:51:18:40:D2:E2:3B:42:8F
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/c6UlQx3ddhbfoiXtURhA0uI7Qo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.120.0/24
194.187.89.0-194.187.91.255
IPv6:
2a02:388::/32
Signature Algorithm: sha256WithRSAEncryption
1c:3f:29:3f:b5:1d:59:76:26:0f:a2:7d:01:e0:96:94:55:39:
7d:25:ab:8f:f1:11:be:21:e1:5b:f7:d4:43:36:d3:20:48:2e:
fc:95:e8:9f:1d:cd:c0:fc:25:c8:68:b8:0d:4d:c6:9d:c9:53:
11:cd:8a:ba:05:5f:8e:44:c3:85:f7:f4:71:ad:4e:02:58:d8:
e5:c8:ff:f4:75:3b:8b:82:eb:f3:66:84:7a:38:0a:6f:79:de:
16:f0:d7:98:92:b5:1e:7c:b3:ad:ff:9b:f5:9a:6b:50:ff:1e:
7c:44:e3:6d:67:cd:69:f0:56:fa:0b:39:f4:60:94:76:b8:c8:
7b:ca:0e:83:5f:44:ff:b6:5e:21:8f:d2:45:b5:0f:00:6a:15:
66:fb:54:78:84:e3:04:11:55:4e:6f:31:18:de:c6:3a:74:bf:
64:55:77:e9:12:1e:cf:9f:5c:5c:e0:9e:54:9d:7a:8e:83:13:
b4:37:b4:e3:ae:15:65:e1:d3:e7:bb:1f:d0:35:92:3f:c7:65:
4d:87:5c:c2:3d:27:b3:8a:af:cf:37:45:34:c2:0b:43:6c:de:
b3:29:37:43:e3:3d:5e:14:c9:44:6e:e2:55:97:9d:06:82:f1:
ff:f4:27:74:bc:e2:e9:51:c1:d3:9c:84:85:5b:9a:30:77:f4:
f7:84:90:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:54:34 2024 by rpki-client on console-fra.rpki-client.org