Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/49Za3blXOjp8GCnz8bABQyC7_dA.roa
File: 49Za3blXOjp8GCnz8bABQyC7_dA.roa (raw, json)
Hash identifier: k8/bbPZAqw5dk6tmtvy67B3qtKPZxLl+fxBLZbUpPeM=
Subject key identifier: E3:D6:5A:DD:B9:57:3A:3A:7C:18:29:F3:F1:B0:01:43:20:BB:FD:D0
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 018CC5DCB6D8E34EB48D4B95D5A134A7ACD6
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/49Za3blXOjp8GCnz8bABQyC7_dA.roa
Signing time: Mon 01 Jan 2024 16:30:25 +0000
ROA not before: Mon 01 Jan 2024 16:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210097
IP address blocks: 82.159.153.0/24 maxlen: 24
84.124.62.0/24 maxlen: 24
62.82.51.0/24 maxlen: 24
95.39.61.0/24 maxlen: 24
5.40.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:b6:d8:e3:4e:b4:8d:4b:95:d5:a1:34:a7:ac:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 1 16:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3d65addb9573a3a7c1829f3f1b0014320bbfdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:2f:a8:03:e0:0a:8d:ac:52:ab:9f:52:85:
46:dc:ca:e1:fb:75:29:b8:6b:15:a8:7d:38:48:84:
32:46:fc:57:77:df:7c:26:51:5f:c1:e6:ad:99:9a:
a8:04:26:fa:f8:64:d3:1b:09:d8:f2:01:aa:9b:2d:
57:6e:02:d0:74:6e:a0:82:d9:f2:d1:4f:05:27:dd:
6c:03:71:e6:c1:f7:a9:d4:d0:aa:aa:ed:1e:17:ce:
de:0a:28:80:59:f2:0e:45:e3:e8:18:31:e5:bd:a0:
c2:f8:75:03:df:b9:5a:c4:99:b2:bf:5f:a7:67:06:
32:d4:dd:b4:01:0c:3c:7e:34:eb:64:1e:99:db:49:
4f:39:fe:56:9d:1f:73:77:40:f2:35:aa:29:65:1f:
f7:ff:d5:37:56:0f:bf:69:45:57:52:d6:13:8f:3d:
f4:d7:3a:db:1b:49:85:87:b2:eb:19:f9:c5:fc:a1:
55:9c:0d:6b:d0:80:5c:b5:f2:44:e1:8d:15:b4:60:
1a:17:86:79:90:69:08:7a:ba:46:58:d5:65:ad:27:
ef:06:be:fb:a2:72:4e:e3:df:27:63:0b:8c:e9:de:
ba:9f:f8:82:b0:e6:4b:90:42:2e:5b:9c:92:a5:3e:
92:8e:41:b0:f1:0b:73:67:c5:4f:23:bc:ed:ab:14:
28:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D6:5A:DD:B9:57:3A:3A:7C:18:29:F3:F1:B0:01:43:20:BB:FD:D0
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/49Za3blXOjp8GCnz8bABQyC7_dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.40.136.0/24
62.82.51.0/24
82.159.153.0/24
84.124.62.0/24
95.39.61.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ff:f7:79:17:a8:d4:d7:2f:e7:96:a8:1c:05:d2:59:70:db:
e8:d2:b5:bc:1d:29:49:92:61:89:4b:00:17:7d:33:04:07:42:
40:e7:be:31:d8:d4:40:fd:62:c5:79:62:6d:49:84:02:b8:ae:
9d:5c:be:cf:86:28:e9:f4:a8:a5:4a:5a:eb:71:cb:13:af:47:
8c:89:ba:a1:15:80:a7:5f:01:2a:25:34:49:28:fd:ab:59:ee:
7e:af:9a:73:b4:2c:f4:a3:6f:51:7c:e0:c5:22:8b:74:59:45:
d8:7f:1a:a0:17:a5:1f:36:73:7a:68:6e:61:8a:63:97:24:0e:
5f:97:04:43:2f:44:0e:fa:12:63:5d:24:88:59:ed:e4:c0:3b:
64:a7:35:a0:e3:23:7a:88:35:ea:92:c5:20:3c:03:1f:94:8c:
47:cd:0f:aa:84:a7:cf:52:b5:58:d6:68:73:10:aa:e1:6c:21:
60:f1:60:67:a4:b0:08:60:54:4b:4e:5a:b5:1e:ea:53:5a:d7:
1b:33:68:8b:f5:52:05:4a:51:a0:42:fe:cc:59:d3:7a:34:7f:
9f:8b:5f:73:f9:b7:11:0d:8e:92:67:59:4b:10:68:2a:31:89:
78:75:21:be:81:c0:27:1a:9e:c5:00:18:96:75:9e:a9:d9:cc:
8a:2d:6e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:28:54 2024 by rpki-client on console-fra.rpki-client.org