Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/Fdmxdl0vl0PMkM42BoDkVBAKAfI.roa
File: Fdmxdl0vl0PMkM42BoDkVBAKAfI.roa (raw, json)
Hash identifier: dtvxDJu05OeGEgy2cBgAQKq5ksDLaN18+kRnSw97P0g=
Subject key identifier: 15:D9:B1:76:5D:2F:97:43:CC:90:CE:36:06:80:E4:54:10:0A:01:F2
Certificate issuer: /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial: 018FC31E6E702D6F6F46505E3FE97ED3863E
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/Fdmxdl0vl0PMkM42BoDkVBAKAfI.roa
Signing time: Wed 29 May 2024 06:51:42 +0000
ROA not before: Wed 29 May 2024 06:51:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205112
IP address blocks: 45.157.240.0/22 maxlen: 22
45.157.241.0/24 maxlen: 24
45.157.242.0/24 maxlen: 24
185.65.240.0/22 maxlen: 24
185.232.100.0/22 maxlen: 24
2a0c:1700::/29 maxlen: 48
2a0f:6480::/29 maxlen: 29
2a0f:6480::/32 maxlen: 32
2a0f:6481::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c3:1e:6e:70:2d:6f:6f:46:50:5e:3f:e9:7e:d3:86:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Validity
Not Before: May 29 06:51:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15d9b1765d2f9743cc90ce360680e454100a01f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:be:05:a7:00:9a:ca:05:93:c0:83:49:80:
49:52:22:de:8e:8a:ef:5c:0e:00:08:54:c7:4a:2d:
81:5b:71:c7:51:b6:53:db:2c:d5:5d:d3:7f:89:8d:
a1:6b:33:90:b6:dd:3d:85:4a:fc:39:1e:fe:20:83:
53:b9:ed:0e:ac:df:cd:5b:80:7b:23:d3:0a:76:23:
23:4b:d0:85:76:f8:f7:8f:79:32:0c:5b:79:48:5c:
0c:0f:8f:1f:3f:28:31:e7:82:e5:ff:09:24:1b:36:
c1:32:08:a2:b9:00:45:8d:52:d6:a3:80:07:d6:5c:
83:5e:da:33:86:ac:5f:12:16:a4:6f:75:03:e4:db:
d1:14:94:3f:14:f4:f8:64:51:c7:ff:2f:eb:c1:77:
43:f0:b2:4f:84:f4:d5:95:45:54:d2:04:ba:ab:89:
78:7d:15:32:d9:c2:d5:73:a8:51:43:44:cd:d4:21:
4e:f7:eb:0e:ce:50:28:aa:82:27:f2:31:9a:8c:05:
ce:64:a5:4f:af:96:15:c6:56:15:c5:90:c7:df:64:
dd:9e:33:b1:4e:11:8f:a4:db:4a:6d:bb:b2:9c:66:
a8:8c:17:20:49:43:b4:25:d3:8b:ab:eb:6f:dd:0e:
d1:9a:42:0d:6c:be:2d:57:5a:95:d3:95:3f:b5:6c:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D9:B1:76:5D:2F:97:43:CC:90:CE:36:06:80:E4:54:10:0A:01:F2
X509v3 Authority Key Identifier:
keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/Fdmxdl0vl0PMkM42BoDkVBAKAfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.240.0/22
185.65.240.0/22
185.232.100.0/22
IPv6:
2a0c:1700::/29
2a0f:6480::/29
Signature Algorithm: sha256WithRSAEncryption
3d:aa:c8:35:60:2b:ef:fd:40:02:fc:5a:bd:c1:66:ad:29:73:
4e:99:1f:85:e0:d0:d9:41:02:00:ff:14:df:5f:77:38:3e:f6:
a1:ac:3d:f5:1e:03:36:65:ef:83:45:ad:90:75:d1:fd:8b:04:
74:b2:c6:64:30:31:f1:ba:59:86:59:7c:bb:fa:33:7d:16:10:
c1:1c:cc:ff:7a:91:1d:25:c7:29:d8:30:be:94:51:f3:65:d9:
2a:51:a6:9e:4d:d5:03:5e:6f:2d:61:0f:b9:2c:c5:5c:bc:f3:
db:14:d6:76:cf:44:69:bb:75:d1:ff:ae:aa:22:4d:aa:d4:05:
46:4a:ad:8a:ed:4d:fb:39:4c:f6:cc:12:a6:a6:7d:fe:47:39:
09:04:64:b5:a5:a8:33:68:89:74:d6:36:63:13:a4:95:f6:5f:
09:20:52:7e:74:fb:4b:8d:50:66:7d:0c:c4:1c:69:6b:3e:db:
87:82:fe:38:60:3c:69:21:c1:12:9a:72:a1:2a:2e:21:c8:ef:
a8:53:b1:88:b7:3d:c1:00:39:ed:b3:10:7e:af:39:3a:76:de:
31:e4:b9:f2:2a:40:18:b5:01:07:8f:b8:e7:d6:3f:ef:7a:4e:
93:3d:de:d5:76:ce:ae:ff:6d:8b:53:d7:9f:df:c3:5b:09:07:
ab:4c:92:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:07:11 2024 by rpki-client on console-fra.rpki-client.org