Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/bjNEfx5h5Hoot4ZFT3mcigYjPIQ.roa
File: bjNEfx5h5Hoot4ZFT3mcigYjPIQ.roa (raw, json)
Hash identifier: orZWNrux38XYlUcKZjf16pss7P3GTCOK3CV7gg4wAow=
Subject key identifier: 6E:33:44:7F:1E:61:E4:7A:28:B7:86:45:4F:79:9C:8A:06:23:3C:84
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 018FD05A9289D9DB908B579088C8E02C7D95
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/bjNEfx5h5Hoot4ZFT3mcigYjPIQ.roa
Signing time: Fri 31 May 2024 20:32:27 +0000
ROA not before: Fri 31 May 2024 20:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 45.10.16.0/23 maxlen: 23
45.10.18.0/24 maxlen: 24
45.88.5.0/24 maxlen: 24
45.88.6.0/24 maxlen: 24
45.88.7.0/24 maxlen: 24
45.95.40.0/22 maxlen: 22
45.130.100.0/22 maxlen: 22
83.229.34.0/24 maxlen: 24
95.178.107.0/24 maxlen: 24
185.144.56.0/22 maxlen: 24
188.191.48.0/22 maxlen: 22
217.194.153.0/24 maxlen: 24
2a05:e4c0::/29 maxlen: 32
2a07:3bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d0:5a:92:89:d9:db:90:8b:57:90:88:c8:e0:2c:7d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: May 31 20:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e33447f1e61e47a28b786454f799c8a06233c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8d:77:e6:89:c4:fa:7c:68:53:1c:52:da:a0:
4a:d5:f3:d1:c3:ad:2d:ee:56:8b:bb:ee:e4:43:76:
42:cc:ed:37:1b:c1:86:61:c4:e4:c5:05:68:26:8e:
94:45:f1:15:0c:1e:ef:5a:80:80:f0:23:7c:2a:5d:
96:35:6e:bf:20:39:2f:91:a4:3d:5c:99:0a:76:8a:
23:6e:db:f9:15:ae:9e:3a:5d:2e:ac:9e:41:90:9c:
e2:79:87:95:c3:f3:e0:e0:a2:33:01:ef:5d:6e:53:
6a:a2:a8:ab:c7:b8:17:cf:f1:d8:50:7c:bb:92:7a:
17:af:e4:b0:53:c3:38:e4:ae:e4:16:90:4d:ef:63:
b1:de:ef:f0:d3:88:f7:22:89:b5:2e:9d:f5:d9:ab:
d2:5b:07:45:be:73:c0:6f:64:30:6e:43:8f:5e:7d:
e0:37:00:52:b5:00:40:63:e6:1f:63:87:05:36:dc:
31:4f:05:e0:e1:05:ad:8b:31:1b:2a:1e:63:27:29:
4f:13:e0:ad:7e:ee:3c:37:80:12:ea:1e:9c:8f:1d:
50:db:43:20:ae:5d:b2:e9:63:6a:09:14:fb:3f:bb:
39:5a:43:75:17:e6:66:86:c1:de:47:83:02:ee:fa:
49:72:0c:2d:1e:b6:4f:4a:75:1a:fd:48:f5:36:6e:
22:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:33:44:7F:1E:61:E4:7A:28:B7:86:45:4F:79:9C:8A:06:23:3C:84
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/bjNEfx5h5Hoot4ZFT3mcigYjPIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.16.0-45.10.18.255
45.88.5.0-45.88.7.255
45.95.40.0/22
45.130.100.0/22
83.229.34.0/24
95.178.107.0/24
185.144.56.0/22
188.191.48.0/22
217.194.153.0/24
IPv6:
2a05:e4c0::/29
2a07:3bc0::/29
Signature Algorithm: sha256WithRSAEncryption
21:50:81:b6:3a:a8:a2:6d:ab:c6:41:e6:44:bf:8c:e3:97:6f:
ff:2f:11:72:86:2f:53:46:41:cc:c7:1d:0d:6b:d0:dc:a3:69:
36:90:6c:e9:4c:6c:68:1b:56:17:77:82:16:1c:c3:ff:45:6c:
48:f1:55:3b:d4:28:5c:b7:e7:ad:5d:7c:13:14:c9:55:39:db:
c6:36:95:bf:35:c6:ad:5c:48:a3:af:b1:59:35:13:e2:66:78:
9a:f4:ac:30:90:4f:3c:63:3f:b6:8a:e4:d2:34:9f:b3:e8:41:
82:2b:44:88:ce:0b:86:d2:b2:c4:09:ae:7c:94:a0:80:65:f4:
5c:a6:aa:bf:9d:81:1c:14:81:08:2d:98:17:d7:c6:03:d1:80:
9e:3a:12:e2:d9:36:7e:10:6f:eb:4a:95:ca:d4:e5:91:17:39:
a5:5c:d4:72:ca:ae:72:58:30:86:d5:06:f8:7f:fd:37:d0:15:
4b:85:c5:6d:75:e2:0e:72:e6:9b:d6:7e:48:f3:02:85:3d:5a:
f7:f1:f2:5c:8f:fa:e0:10:e4:04:70:b9:b6:c9:96:43:69:e8:
a4:71:2e:63:cc:8a:5d:31:41:4f:f2:16:29:c9:72:48:c9:c7:
03:9e:85:1f:7e:bd:51:29:83:cd:98:7f:0a:54:3a:d9:f2:af:
da:28:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 03:29:05 2024 by rpki-client on console-fra.rpki-client.org