Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/uayvd43qYzerWLENBT-74W4F58c.roa
File: uayvd43qYzerWLENBT-74W4F58c.roa (raw, json)
Hash identifier: 0YST+FcHpp3D/O64N0GyRFCCLshP2wB/zPby4PKVFME=
Subject key identifier: B9:AC:AF:77:8D:EA:63:37:AB:58:B1:0D:05:3F:BB:E1:6E:05:E7:C7
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0191930A2C63AF6BCBB6B604BE49590E1ADF
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/uayvd43qYzerWLENBT-74W4F58c.roa
Signing time: Tue 27 Aug 2024 08:53:23 +0000
ROA not before: Tue 27 Aug 2024 08:53:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34974
IP address blocks: 77.82.0.0/16 maxlen: 16
77.82.0.0/20 maxlen: 20
77.82.48.0/20 maxlen: 20
77.82.64.0/18 maxlen: 24
77.82.80.0/21 maxlen: 21
77.82.128.0/17 maxlen: 17
77.82.130.0/24 maxlen: 24
77.82.140.0/23 maxlen: 23
77.82.142.0/24 maxlen: 24
77.82.143.0/24 maxlen: 24
85.28.192.0/18 maxlen: 23
85.28.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:93:0a:2c:63:af:6b:cb:b6:b6:04:be:49:59:0e:1a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 27 08:53:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9acaf778dea6337ab58b10d053fbbe16e05e7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:5e:24:d0:3b:f2:7d:68:6d:ac:8d:0d:13:
e3:c5:f2:7a:5f:36:68:dd:11:17:ad:71:be:91:ae:
09:d6:bf:a2:c4:ff:ae:95:1c:bc:71:9b:0a:de:64:
c4:50:56:ce:4e:f2:d1:1e:34:b1:b1:30:14:12:af:
9e:88:c0:ec:0c:f3:5b:e7:c9:e9:04:c5:f3:ca:47:
56:4f:96:7d:8f:ce:5f:53:43:24:7b:bf:bb:2d:1a:
e2:c8:12:0b:8b:0e:37:16:b9:76:01:7c:cc:69:0b:
be:74:39:3b:a6:d0:1e:59:13:3a:d9:cf:50:d8:94:
db:98:c1:a1:de:57:ef:46:c7:59:97:e4:bb:b9:ad:
8f:8c:81:8d:4a:46:12:f3:df:23:b0:87:f2:8b:19:
e0:76:f4:6f:66:27:57:ba:43:90:7e:1f:93:43:bc:
58:3a:8b:9d:2c:bf:c7:73:ce:21:61:35:29:68:46:
9a:51:7c:37:e6:14:67:07:7b:bb:c7:12:67:53:68:
da:3e:87:d6:d6:07:7d:d8:88:1a:31:13:29:8f:53:
20:81:35:ef:88:1d:0e:a0:67:22:8d:dc:de:ad:a8:
53:97:f3:e5:03:d8:d2:71:56:fb:93:ea:d0:10:74:
e3:88:e0:47:22:41:ad:6e:41:5b:05:50:9a:aa:0a:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AC:AF:77:8D:EA:63:37:AB:58:B1:0D:05:3F:BB:E1:6E:05:E7:C7
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/uayvd43qYzerWLENBT-74W4F58c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.82.0.0/16
85.28.192.0/18
Signature Algorithm: sha256WithRSAEncryption
80:97:e3:1e:12:c4:e9:c9:f8:44:48:92:7b:02:dd:ed:36:9d:
68:81:ed:1d:ac:0f:a8:b1:9a:1e:91:b0:77:92:d4:4f:df:af:
e2:91:09:d0:54:73:b7:80:9a:fd:4e:a8:c2:77:96:eb:79:79:
a6:18:3f:e8:fe:27:8c:6d:fb:a6:c1:ac:d3:34:aa:55:15:2d:
df:c2:fe:a6:58:4c:e6:a8:bd:50:9a:d3:48:3c:18:c2:b4:50:
1f:4b:f5:63:38:bd:65:68:1b:0c:6f:0e:24:d9:08:db:fc:24:
7e:d7:f6:98:56:0c:a0:d3:99:7c:b3:75:3c:d3:d7:48:27:84:
2e:0b:ea:a3:b9:c6:95:e9:b9:63:a1:07:b5:f6:71:5b:d7:0f:
5a:42:43:df:9d:65:83:42:d1:fe:1e:5b:6f:d3:15:54:4a:c2:
fa:85:a0:ca:f8:33:e8:68:e1:e6:1b:86:2d:fc:92:bd:4b:76:
7d:67:e2:d0:f2:cf:54:15:2f:16:1e:81:ad:a3:8e:f7:dc:e5:
d1:a8:52:ad:2a:26:ea:6b:34:6b:94:e5:ac:79:a3:65:8e:45:
b9:56:75:4c:5e:97:d5:d2:83:6f:31:17:e5:a5:8a:7e:d2:ec:
d7:04:47:76:64:1f:ee:7f:1f:7e:cf:da:b0:58:7a:8d:18:0a:
28:c1:df:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:36:26 2024 by rpki-client on console-fra.rpki-client.org