Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/alBy_WYHJn_kICtZq0q0YOozvdY.roa
File: alBy_WYHJn_kICtZq0q0YOozvdY.roa (raw, json)
Hash identifier: 5u6u3QEfh4QxUS1h1uE4Ypgg7R+n9fyx7tnWe0GUxKE=
Subject key identifier: 6A:50:72:FD:66:07:26:7F:E4:20:2B:59:AB:4A:B4:60:EA:33:BD:D6
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 0193B53A3BBFAC226A68DFFF35C194548ED8
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/alBy_WYHJn_kICtZq0q0YOozvdY.roa
Signing time: Wed 11 Dec 2024 10:18:32 +0000
ROA not before: Wed 11 Dec 2024 10:18:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 78.109.224.0/24 maxlen: 24
78.109.226.0/24 maxlen: 24
78.109.233.0/24 maxlen: 24
78.109.234.0/24 maxlen: 24
78.109.235.0/24 maxlen: 24
78.109.238.0/24 maxlen: 24
185.52.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 04:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:3a:3b:bf:ac:22:6a:68:df:ff:35:c1:94:54:8e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Dec 11 10:18:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a5072fd6607267fe4202b59ab4ab460ea33bdd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ad:15:8f:05:63:b9:2d:bc:32:5c:f2:39:bc:
47:71:80:84:8b:86:55:53:7c:b8:20:e2:ed:2f:c1:
82:29:0f:69:f6:a7:81:4c:dd:4c:c5:26:27:42:f1:
24:1c:dd:db:de:12:88:bd:0b:8b:02:a1:a3:43:ba:
28:0a:93:33:6e:9a:dc:da:03:62:aa:47:ca:66:f2:
ea:c7:a2:ef:d0:69:33:45:57:f9:f7:42:95:7f:98:
a7:92:9b:26:06:76:46:e8:25:23:74:72:8f:60:0f:
f5:d6:30:89:76:71:45:b5:29:8c:aa:41:3a:af:06:
3e:5d:cf:b5:3f:32:97:e0:2a:97:dd:dc:0b:08:7d:
15:33:51:9b:5d:79:71:11:ea:8d:7e:3b:e7:5f:31:
02:7b:ed:aa:9e:f5:fa:e4:c4:35:7d:77:00:85:38:
71:f3:99:96:fc:5e:e5:b6:ca:98:bb:74:63:2c:82:
d5:c5:d9:74:01:45:29:ef:c0:bd:14:2e:68:7a:ef:
3f:85:28:70:0b:91:8b:61:35:f3:6b:5b:65:c8:99:
d0:e0:8a:7d:73:cc:0d:79:59:ba:c4:17:5d:2e:2b:
b1:1c:e2:19:c6:1d:51:da:83:46:d3:8c:07:4d:6d:
4d:90:d8:c1:86:43:64:ae:64:a7:8f:16:95:2b:7f:
db:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:50:72:FD:66:07:26:7F:E4:20:2B:59:AB:4A:B4:60:EA:33:BD:D6
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/alBy_WYHJn_kICtZq0q0YOozvdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.224.0/24
78.109.226.0/24
78.109.233.0-78.109.235.255
78.109.238.0/24
185.52.101.0/24
Signature Algorithm: sha256WithRSAEncryption
37:d7:2b:ab:3b:b9:4c:64:d3:60:be:a4:4a:9f:97:9e:73:67:
64:9f:96:3b:fb:18:8e:89:cf:1e:d0:0b:fc:48:77:ae:6d:79:
0c:8a:c2:e9:48:70:15:1c:34:6e:9c:9d:c8:93:e4:c5:77:0f:
bb:61:af:83:59:e7:4b:35:27:07:b9:e3:dd:03:13:a3:88:be:
0f:04:64:9b:de:1e:47:ec:cf:05:3c:55:0e:e7:02:7d:fe:74:
a6:3e:b9:27:45:ce:2e:fb:56:82:53:96:b5:ec:cf:33:38:4f:
a0:83:74:1a:3f:f7:bd:71:7a:f7:eb:a5:4e:28:68:9a:b0:59:
e5:ef:af:5a:18:43:9e:68:29:c6:55:5a:6c:56:7d:64:b4:36:
24:30:8d:bb:aa:69:8e:e7:5b:af:bd:fb:27:38:6f:63:a1:1f:
d5:db:7e:fc:04:c2:b9:75:75:f8:f2:f0:e1:8d:2d:bf:d7:1e:
da:63:0f:b0:88:ff:85:d1:11:c7:c7:de:40:71:f2:80:98:44:
51:b7:8f:06:fe:a6:af:b0:cd:a5:da:a1:fc:7d:72:09:95:61:
94:ca:15:c0:0e:21:7f:a9:bd:ef:c1:02:45:21:ee:4d:2f:fe:
2f:f8:a1:63:f0:e5:d7:06:ef:3b:9e:7d:08:ac:6e:de:7b:0f:
54:cf:ea:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 13:33:20 2024 by rpki-client on console-ams.rpki-client.org