Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zG2FFyi_6ug8xp5UD5bGXS1kkTU.roa
File: zG2FFyi_6ug8xp5UD5bGXS1kkTU.roa (raw, json)
Hash identifier: zmQo44afQKqUUlWn+UGYMH2+o3bn+MUk53X132drhes=
Subject key identifier: CC:6D:85:17:28:BF:EA:E8:3C:C6:9E:54:0F:96:C6:5D:2D:64:91:35
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018F0AA530D3EA1F462B0561429C93074A1D
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zG2FFyi_6ug8xp5UD5bGXS1kkTU.roa
Signing time: Tue 23 Apr 2024 11:09:09 +0000
ROA not before: Tue 23 Apr 2024 11:09:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34974
IP address blocks: 77.82.0.0/20 maxlen: 20
77.82.48.0/20 maxlen: 20
77.82.64.0/18 maxlen: 24
77.82.80.0/21 maxlen: 21
77.82.128.0/17 maxlen: 17
77.82.130.0/24 maxlen: 24
77.82.140.0/23 maxlen: 23
77.82.142.0/24 maxlen: 24
77.82.143.0/24 maxlen: 24
85.28.192.0/18 maxlen: 23
85.28.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0a:a5:30:d3:ea:1f:46:2b:05:61:42:9c:93:07:4a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 23 11:09:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc6d851728bfeae83cc69e540f96c65d2d649135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:de:7b:7b:ef:94:dc:0b:14:2b:8e:d9:82:d8:
90:d1:42:77:56:90:4c:fc:cf:9c:7f:81:47:2e:82:
e3:24:ca:0b:0f:4f:04:37:32:76:49:46:a4:66:72:
dc:44:89:3b:58:a8:02:0e:a4:80:8d:a4:bd:84:af:
81:54:40:62:7e:cc:d6:e3:21:74:5e:fd:35:6b:15:
2f:c4:2a:3b:4d:7f:d2:ee:c1:3f:6a:b8:12:1e:8d:
a6:6e:11:73:54:f0:89:ba:9c:de:d6:9d:ec:22:11:
92:f1:a6:7f:86:c9:bf:4b:54:7d:dd:4b:ad:0b:a0:
ee:d6:82:5e:9e:2d:89:8b:56:35:1d:fc:ec:8c:02:
95:79:e0:0d:67:a4:42:c1:ff:8d:d3:ca:bb:fe:aa:
6c:43:68:87:9f:d4:61:fb:16:43:8f:60:83:17:18:
cc:d7:70:c0:b5:19:ce:05:93:ae:b2:a4:28:87:34:
71:20:17:43:46:73:55:bb:d0:e2:d5:b7:70:94:bf:
05:9f:04:a5:c2:dc:b5:e3:0c:70:38:22:34:34:48:
d6:c4:8e:4b:60:92:96:18:41:a7:e1:49:32:ad:ce:
28:30:2f:39:a3:38:53:74:07:c8:06:33:af:2c:8a:
7d:ca:7f:6a:2b:4e:14:86:f8:e9:3e:13:ec:78:23:
3b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6D:85:17:28:BF:EA:E8:3C:C6:9E:54:0F:96:C6:5D:2D:64:91:35
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zG2FFyi_6ug8xp5UD5bGXS1kkTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.82.0.0/20
77.82.48.0-77.82.255.255
85.28.192.0/18
Signature Algorithm: sha256WithRSAEncryption
80:e7:3e:42:80:54:3b:54:57:aa:a9:4b:85:76:c3:c9:2b:4a:
f7:f8:5d:64:1c:74:ff:fb:9e:3b:23:88:79:d5:fc:12:52:f1:
94:b3:5a:3f:93:00:27:60:64:a0:b1:75:a2:db:74:65:e4:3d:
b5:c3:d9:9b:40:4b:26:27:93:ff:55:16:a1:4c:ca:0e:3b:60:
bb:24:8f:3a:63:77:70:eb:3e:00:4c:6f:db:b0:2c:16:be:a0:
13:37:50:34:bd:f5:1a:60:6c:e5:6a:2d:de:6e:f9:90:e2:a3:
78:e6:f7:ac:b3:cd:88:33:5f:fc:86:4d:64:37:d7:cd:a0:bc:
9c:60:42:1e:ae:ba:3b:86:70:0e:ca:7c:1b:53:e9:95:59:b1:
d2:ec:b4:2a:9c:eb:53:9d:37:a5:b1:f5:21:b0:40:de:fe:31:
26:a7:66:c9:43:af:c9:83:e8:af:2c:ab:8e:15:3d:c2:c9:26:
6a:ca:21:b7:5c:1f:1b:68:4c:b8:e5:03:5c:eb:19:83:e5:be:
63:b1:ab:4f:a0:8b:6f:71:3d:95:51:b0:33:fb:ad:cc:90:06:
77:e3:9f:98:80:e4:ca:1b:a1:7a:8a:ce:58:14:65:e2:e9:c5:
a8:09:d8:35:be:70:e0:2f:56:c5:ef:36:9b:3c:9d:fa:5e:23:
03:b0:e6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:59:49 2024 by rpki-client on console-fra.rpki-client.org