Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/kUwpmhOpEgt9WB4nu40z46v5yuE.roa
File: kUwpmhOpEgt9WB4nu40z46v5yuE.roa (raw, json)
Hash identifier: tgy4qcO1AMqUlxSqckg69a65f/XUnBpU4SSYJ1MqFFs=
Subject key identifier: 91:4C:29:9A:13:A9:12:0B:7D:58:1E:27:BB:8D:33:E3:AB:F9:CA:E1
Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial: 019006426B9F574B48940C3D145FD35089ED
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/kUwpmhOpEgt9WB4nu40z46v5yuE.roa
Signing time: Tue 11 Jun 2024 07:45:34 +0000
ROA not before: Tue 11 Jun 2024 07:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56798
IP address blocks: 45.66.220.0/22 maxlen: 22
45.86.36.0/24 maxlen: 24
91.200.144.0/24 maxlen: 24
185.34.102.0/24 maxlen: 24
185.54.7.0/24 maxlen: 24
193.17.33.0/24 maxlen: 24
2a0f:9180::/29 maxlen: 29
2a0f:9180:1::/48 maxlen: 48
2a10:d440:1::/48 maxlen: 48
2a10:d440:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:42:6b:9f:57:4b:48:94:0c:3d:14:5f:d3:50:89:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Validity
Not Before: Jun 11 07:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=914c299a13a9120b7d581e27bb8d33e3abf9cae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:77:c3:86:bc:dc:e8:8d:cc:72:7c:19:6a:
c7:56:eb:15:3b:d6:26:8d:50:e9:81:38:af:a0:c1:
de:33:46:57:90:b6:80:0c:ec:92:db:8c:37:43:01:
d8:25:21:8a:2b:5a:e7:8c:d1:48:84:f9:62:d7:32:
f2:64:15:e9:0f:78:36:20:c9:ee:7a:96:0b:09:34:
04:5e:6f:1d:4e:bc:db:24:67:8e:cf:e7:b7:b1:f6:
f1:5e:77:c5:a3:75:64:3e:0d:45:9d:e4:4d:98:be:
70:89:67:91:64:a0:83:98:fd:b6:cd:5c:a4:a0:42:
33:87:4a:6c:9a:d9:a5:b0:24:fe:e5:30:b3:3d:b3:
b5:8a:2d:5c:56:77:c6:5b:60:1f:cb:84:4e:d6:9e:
6e:af:5e:6a:99:07:c0:28:72:4d:56:21:5a:c1:42:
2f:3e:1f:cf:9a:d2:88:1f:4e:5a:83:bd:bb:e7:71:
d3:da:ba:e3:cc:02:df:4a:11:ed:47:17:1f:fe:31:
80:34:fc:25:07:75:97:56:99:f4:a5:bd:fa:e3:a0:
36:52:4a:ae:34:7a:d8:d5:06:8d:df:24:15:ce:f7:
7f:74:73:d1:a5:b5:0a:9d:ad:6d:12:fa:1f:16:c9:
a7:09:01:50:1b:a3:24:30:72:bf:a0:6b:42:04:03:
b9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4C:29:9A:13:A9:12:0B:7D:58:1E:27:BB:8D:33:E3:AB:F9:CA:E1
X509v3 Authority Key Identifier:
keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/kUwpmhOpEgt9WB4nu40z46v5yuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.220.0/22
45.86.36.0/24
91.200.144.0/24
185.34.102.0/24
185.54.7.0/24
193.17.33.0/24
IPv6:
2a0f:9180::/29
2a10:d440:1::-2a10:d440:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
af:75:70:bf:8e:db:fc:c3:2c:ba:c7:4e:0e:91:99:b9:0f:8c:
3e:46:93:9d:17:b2:99:86:e0:0d:d5:d7:da:61:9d:12:30:c6:
2f:57:e2:a3:7a:21:c8:0a:a2:1d:7c:bc:9f:bc:fc:77:fe:d6:
2e:a5:a5:01:4a:42:25:5b:98:98:7a:57:85:60:fa:34:78:05:
9a:63:42:e3:2e:94:56:a1:73:87:ed:19:77:23:4b:fe:d5:8e:
27:c2:96:ed:fb:6b:82:6e:a4:e4:b4:bf:78:3e:57:dc:7e:f0:
8d:1a:c8:6d:36:fe:a9:28:08:1e:bc:13:82:96:f6:d2:b2:57:
55:47:34:c7:46:70:d8:f1:a1:37:9c:8c:f7:d1:02:8c:24:7f:
fb:c0:ad:77:72:e7:08:ce:77:f7:f7:86:76:97:fb:8d:89:43:
00:58:01:c3:a5:c8:2a:cf:31:45:73:23:e9:49:86:2b:85:93:
ee:ed:dc:6e:26:0f:e5:8f:0b:19:53:b6:1e:31:70:cc:2d:f5:
bc:8f:0e:11:ed:15:1d:b1:03:c3:96:21:18:d8:4b:58:20:d8:
05:33:63:93:19:6e:e7:57:1b:a2:89:9d:50:f2:fa:c8:a1:2a:
f6:aa:60:a1:83:27:19:41:c1:9c:9c:65:0a:1a:aa:79:d5:33:
7c:22:de:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:02:09 2024 by rpki-client on console-fra.rpki-client.org