Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Cjb0RJ3cAF0H9We3eUkun_fKKoo.roa
File: Cjb0RJ3cAF0H9We3eUkun_fKKoo.roa (raw, json)
Hash identifier: XoZVAzT6WlMDNVCXEqLHEkkgDzgbV7S9TwRJOlkKalM=
Subject key identifier: 0A:36:F4:44:9D:DC:00:5D:07:F5:67:B7:79:49:2E:9F:F7:CA:2A:8A
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018D13D7F5DDEFED16ECD52482C626B9466F
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Cjb0RJ3cAF0H9We3eUkun_fKKoo.roa
Signing time: Tue 16 Jan 2024 19:55:36 +0000
ROA not before: Tue 16 Jan 2024 19:55:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 45.139.30.0/24 maxlen: 24
45.141.185.0/24 maxlen: 24
45.141.196.0/24 maxlen: 24
85.209.105.0/24 maxlen: 24
85.209.106.0/24 maxlen: 24
85.209.107.0/24 maxlen: 24
91.191.186.0/24 maxlen: 24
109.196.175.0/24 maxlen: 24
213.139.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:f5:dd:ef:ed:16:ec:d5:24:82:c6:26:b9:46:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 16 19:55:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a36f4449ddc005d07f567b779492e9ff7ca2a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cc:11:3f:79:83:56:52:e2:fc:76:d0:b4:73:
04:ec:ec:5f:9d:36:e9:51:53:53:aa:53:62:39:a5:
c4:e6:7c:da:d5:a7:56:22:34:c0:4d:c8:45:ba:2f:
c5:2f:4d:c4:37:db:71:99:b7:94:48:1a:1a:7b:ea:
0d:56:ac:bc:7c:7f:da:53:a2:0d:ef:4d:b2:86:21:
30:69:8a:43:fa:ba:22:5d:87:bb:39:65:ea:05:48:
cc:ec:ba:ba:c3:9f:44:9d:98:e5:2c:81:77:f5:72:
54:c4:90:25:fd:4b:f1:95:e1:fb:a1:01:df:38:68:
48:17:c3:26:71:6f:a4:67:8b:98:f0:8c:36:f0:27:
d6:73:9f:a9:5c:30:77:2f:ed:2e:3d:d7:be:0d:9d:
a4:e3:73:58:dc:42:78:a3:02:50:fd:ad:a9:63:35:
6e:c3:2a:83:2b:07:90:92:da:84:39:ab:c1:c2:77:
ca:31:6a:a4:a9:ea:8d:2d:b0:fa:df:ed:de:b2:39:
40:cf:32:ee:7a:25:52:50:cb:06:25:9e:df:7b:79:
5f:6a:e9:4f:45:4f:93:0c:97:f2:c4:86:04:b7:47:
de:b8:4f:30:d3:9f:6e:1e:2b:71:af:67:b0:a9:b0:
08:af:c1:a6:dc:20:58:82:46:f5:f8:77:dd:28:a8:
74:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:36:F4:44:9D:DC:00:5D:07:F5:67:B7:79:49:2E:9F:F7:CA:2A:8A
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Cjb0RJ3cAF0H9We3eUkun_fKKoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.30.0/24
45.141.185.0/24
45.141.196.0/24
85.209.105.0-85.209.107.255
91.191.186.0/24
109.196.175.0/24
213.139.228.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:2d:ac:3a:b2:81:d1:2c:c9:b9:6f:50:57:2a:2f:ca:de:d8:
5e:84:bd:16:7a:61:5f:9e:32:9e:5b:30:30:86:fb:61:30:b4:
83:47:bb:eb:8e:16:f1:c9:61:4a:1f:e1:19:84:1a:34:c6:4e:
b2:23:8b:70:bb:cf:53:73:a8:29:32:ea:18:31:55:64:cc:33:
c3:c1:cc:ca:24:ca:eb:63:36:57:15:29:1f:09:59:c2:eb:39:
5a:20:04:0c:11:94:31:c6:1f:71:79:0e:d1:f1:6c:f7:ae:45:
ed:df:8d:e4:0a:7a:d6:a4:33:fa:4d:14:21:ec:19:2b:2e:0e:
d2:94:46:8b:d6:94:48:19:3d:9f:a6:f9:4a:c2:3f:5c:08:9a:
da:ae:63:f5:7e:e2:e4:8d:db:dc:2f:c2:cf:5b:db:a1:b8:80:
a4:cb:bc:2e:4b:c2:9e:56:4b:b3:2e:47:8d:6b:e0:6b:b4:b3:
13:f2:1b:0e:fd:0c:a1:7a:40:80:e5:09:b3:67:46:4f:cf:fc:
df:81:27:c8:55:85:76:87:21:94:df:25:32:3f:f2:ae:bf:f3:
13:c8:5d:c9:4f:fa:1f:a3:0f:02:f9:25:03:38:c6:a9:cc:e3:
23:86:49:3e:1d:22:fd:37:a9:28:35:34:60:fd:a9:f6:41:80:
a5:6c:01:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:06:51 2024 by rpki-client on console-ams.rpki-client.org