Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/RPAVhgo3uFqbFqaxibIt7oPbi90.roa
File: RPAVhgo3uFqbFqaxibIt7oPbi90.roa (raw, json)
Hash identifier: a/eiDbYqVfRjPGjJP88AiqroZ1LqNOyZOVy3THShqn0=
Subject key identifier: 44:F0:15:86:0A:37:B8:5A:9B:16:A6:B1:89:B2:2D:EE:83:DB:8B:DD
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019362EDC5D80CDD7FAF3AEB4576BD27E407
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/RPAVhgo3uFqbFqaxibIt7oPbi90.roa
Signing time: Mon 25 Nov 2024 10:46:10 +0000
ROA not before: Mon 25 Nov 2024 10:46:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.139.6.0/23 maxlen: 24
46.249.110.0/24 maxlen: 24
82.115.9.0/24 maxlen: 24
82.115.28.0/23 maxlen: 24
89.251.10.0/24 maxlen: 24
159.255.32.0/22 maxlen: 22
159.255.36.0/22 maxlen: 22
185.231.172.0/22 maxlen: 24
188.209.156.0/22 maxlen: 24
188.253.8.0/21 maxlen: 24
202.133.90.0/23 maxlen: 24
212.90.100.0/22 maxlen: 24
213.173.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:ed:c5:d8:0c:dd:7f:af:3a:eb:45:76:bd:27:e4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 25 10:46:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44f015860a37b85a9b16a6b189b22dee83db8bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:ec:6d:e0:b1:f9:49:67:7d:fc:e4:8a:19:
31:1c:c4:02:39:55:3c:1b:71:0a:69:8e:ec:76:df:
94:50:3c:40:9f:d1:bc:3c:40:9f:11:1a:1c:6d:95:
92:49:60:a2:be:ef:bc:91:f3:15:b3:94:58:6d:0e:
de:ae:8e:03:6b:3a:26:5e:25:32:f5:b7:0b:e9:4b:
1b:fb:c2:a1:3e:bf:80:7d:bc:65:c1:e2:a3:18:a0:
ef:2f:e2:80:65:93:03:93:9e:9f:52:f2:0a:e3:9e:
cb:47:11:ed:da:2c:aa:30:ab:bd:a0:6a:b7:5f:96:
f1:00:6b:a7:85:28:ac:2e:12:49:d5:56:41:60:89:
85:79:2c:01:ec:b0:b1:2f:9e:1b:74:5f:3e:6d:8f:
53:ab:b9:97:19:06:ce:3c:75:3d:0c:49:48:ab:29:
f4:b3:31:23:1d:cb:64:96:06:8d:03:a5:96:6b:d4:
1f:b8:62:24:66:4a:75:2d:12:43:fc:77:9b:50:1a:
5e:6a:2f:3b:4a:f6:da:36:af:c0:fe:f4:17:06:8b:
95:47:0a:3e:bf:d0:9f:a8:55:db:75:83:f5:d3:a8:
6b:f9:0a:17:34:b7:c0:bd:d5:88:49:e2:95:6b:d0:
95:58:07:0a:2b:c4:af:3d:b5:e3:d2:b0:50:75:96:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F0:15:86:0A:37:B8:5A:9B:16:A6:B1:89:B2:2D:EE:83:DB:8B:DD
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/RPAVhgo3uFqbFqaxibIt7oPbi90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
46.249.110.0/24
82.115.9.0/24
82.115.28.0/23
89.251.10.0/24
159.255.32.0/21
185.231.172.0/22
188.209.156.0/22
188.253.8.0/21
202.133.90.0/23
212.90.100.0/22
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:35:05:50:76:08:6c:1b:33:e7:21:8f:b3:94:a1:f3:f3:ce:
c8:a4:63:4a:3a:94:52:e4:c2:4b:84:14:25:5f:c8:2e:7c:1a:
50:eb:50:40:f2:4c:4b:10:a1:07:af:e0:a9:58:c6:33:46:1c:
a1:95:d8:22:24:96:f1:55:a3:56:68:a6:6a:a8:f2:fc:b7:27:
a3:6c:bf:31:cc:70:27:0c:83:0a:0c:15:ab:02:3f:e7:53:82:
23:a7:3c:b1:39:3d:91:5d:f9:53:0d:1d:13:5e:9c:31:f9:e1:
5f:78:28:a7:c4:be:90:68:24:7f:1c:13:b4:b6:46:db:d7:a5:
37:50:bc:da:d9:49:2a:73:ce:be:7f:41:38:bf:ea:7a:16:68:
43:32:e4:eb:07:b8:1e:f2:85:45:7a:7d:80:0c:45:75:d6:17:
aa:ef:71:29:f9:f3:92:ff:20:70:21:6c:5a:28:a2:3b:dd:21:
ab:a3:d6:32:d9:63:95:31:32:f3:5a:38:9a:75:70:fc:cb:aa:
28:f5:fc:65:fd:3b:4c:a5:22:cf:4a:ef:2f:b8:c1:42:cf:14:
20:10:9d:2c:65:88:9a:a8:8f:ff:2c:4b:3a:e7:ca:cb:83:ef:
88:2f:be:b2:ec:ec:d8:16:e4:45:5f:0e:37:eb:6c:6a:55:57:
ec:fb:af:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:32:19 2024 by rpki-client on console-fra.rpki-client.org