Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/9QGnahV28bJhwnCPwABtzpfIbxs.roa
File: 9QGnahV28bJhwnCPwABtzpfIbxs.roa (raw, json)
Hash identifier: iCZlPb8sAq/BNgWfg+hDugN1s/PGXJ3WXHINajuUauI=
Subject key identifier: F5:01:A7:6A:15:76:F1:B2:61:C2:70:8F:C0:00:6D:CE:97:C8:6F:1B
Certificate issuer: /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Certificate serial: 018CC94D4163A1795419729453ABAD00BDEE
Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/9QGnahV28bJhwnCPwABtzpfIbxs.roa
Signing time: Tue 02 Jan 2024 08:32:12 +0000
ROA not before: Tue 02 Jan 2024 08:32:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57704
IP address blocks: 45.158.156.0/24 maxlen: 24
45.158.158.0/24 maxlen: 24
45.158.157.0/24 maxlen: 24
45.158.159.0/24 maxlen: 24
176.106.40.0/21 maxlen: 24
192.145.120.0/22 maxlen: 22
192.145.120.0/24 maxlen: 24
192.145.122.0/24 maxlen: 24
192.145.121.0/24 maxlen: 24
192.145.123.0/24 maxlen: 24
45.130.98.0/24 maxlen: 24
45.130.96.0/24 maxlen: 24
45.130.97.0/24 maxlen: 24
45.130.99.0/24 maxlen: 24
152.89.42.0/24 maxlen: 24
152.89.41.0/24 maxlen: 24
152.89.43.0/24 maxlen: 24
152.89.40.0/24 maxlen: 24
185.5.221.0/24 maxlen: 24
185.5.220.0/22 maxlen: 22
185.5.220.0/24 maxlen: 24
185.5.223.0/24 maxlen: 24
185.5.222.0/24 maxlen: 24
2a03:7c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:41:63:a1:79:54:19:72:94:53:ab:ad:00:bd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Validity
Not Before: Jan 2 08:32:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f501a76a1576f1b261c2708fc0006dce97c86f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:ec:8f:57:14:c5:f5:ee:7d:17:59:42:55:
1c:66:6b:49:1c:4e:22:9d:9b:9b:83:fb:85:ed:80:
9e:03:a9:f5:f7:5a:96:c4:ea:e2:3f:9e:1f:37:2b:
3e:ec:a4:af:6b:d9:5a:7e:06:bf:d1:f6:c3:ed:d9:
18:f0:7a:44:bf:8e:25:db:14:9d:97:9a:f9:4a:3c:
93:0f:f7:d1:50:3b:9b:60:7b:c2:2e:cd:8a:7b:a8:
5b:3b:32:ea:58:20:a2:fb:99:3a:1e:fd:d0:ff:9f:
b3:aa:e9:c6:ed:07:fe:fa:4b:16:e5:91:17:28:25:
14:89:70:62:e8:16:c0:93:12:e2:a0:1a:15:ca:82:
00:61:26:52:df:d6:08:ff:44:d1:c0:da:9e:7f:7e:
a0:84:91:94:8b:e1:b1:40:6b:64:70:1c:d6:1d:9e:
60:4e:72:9e:2c:ec:bd:35:f4:f9:78:ab:48:09:f3:
d1:60:b7:7e:5e:fb:0f:6f:d6:21:d2:65:41:17:82:
c4:11:38:e1:8a:ca:3b:53:7e:ca:d6:98:28:d5:15:
d0:66:c1:9f:dd:38:df:f2:24:55:a3:b1:aa:c1:1e:
2f:71:9a:4d:2b:79:b2:3a:ad:ec:ef:ab:a5:f1:58:
a8:e8:25:4a:8b:0b:12:51:37:dc:78:9f:ea:bf:b2:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:01:A7:6A:15:76:F1:B2:61:C2:70:8F:C0:00:6D:CE:97:C8:6F:1B
X509v3 Authority Key Identifier:
keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/9QGnahV28bJhwnCPwABtzpfIbxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.96.0/22
45.158.156.0/22
152.89.40.0/22
176.106.40.0/21
185.5.220.0/22
192.145.120.0/22
IPv6:
2a03:7c0::/32
Signature Algorithm: sha256WithRSAEncryption
01:e7:85:c6:d7:c7:34:3b:fa:57:ec:24:f7:58:73:7f:79:1b:
a6:fc:5b:d8:e9:02:1f:1b:f7:82:38:df:08:a9:95:25:d6:b6:
b1:0c:45:85:ae:bf:7b:fb:f3:87:21:ec:7c:c9:b0:65:e5:6a:
98:4e:d4:50:42:7f:e7:78:01:31:1f:bd:b0:54:2e:76:8c:2f:
9b:cb:f4:7e:c0:a0:65:3a:2e:77:59:e6:70:f5:11:3a:99:0a:
e6:5a:0e:13:a9:a4:50:92:c7:51:5b:0f:8b:b5:04:35:2e:e3:
b9:01:81:32:e5:24:41:49:9a:55:49:cd:0a:b9:81:06:29:72:
55:c9:d4:4a:f3:42:29:a5:a6:af:3b:29:c3:21:0f:de:28:14:
de:3f:9e:92:f5:2a:31:e0:32:4f:88:cf:71:8a:7d:0b:2c:62:
80:94:3c:7c:87:70:53:6a:77:f4:de:f7:ba:cf:92:8b:a6:f9:
e6:01:72:25:14:c2:8d:fd:87:0d:3b:2a:93:8c:e4:ce:5a:2b:
c6:0f:b0:1b:81:0f:52:9f:ac:c9:89:a9:06:59:0d:19:b5:b8:
9f:06:ec:a0:14:3b:f3:14:f5:22:83:fc:21:68:4f:78:16:2a:
ff:f6:e7:fc:cf:70:6f:33:d4:ce:a0:bd:14:f8:93:a3:a9:8a:
27:7b:77:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:28:32 2024 by rpki-client on console-fra.rpki-client.org