Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/96rf8AD-H7MRSWHWsbyYayWRzhk.roa
File: 96rf8AD-H7MRSWHWsbyYayWRzhk.roa (raw, json)
Hash identifier: K5vBcb1Rqb7t3RqJwnQpiO6hNp8xC2gY8wrOKO4LsrE=
Subject key identifier: F7:AA:DF:F0:00:FE:1F:B3:11:49:61:D6:B1:BC:98:6B:25:91:CE:19
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FAB070C3F3A3B1E0BC0CB2F89F824
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/96rf8AD-H7MRSWHWsbyYayWRzhk.roa
Signing time: Tue 02 Jan 2024 04:30:10 +0000
ROA not before: Tue 02 Jan 2024 04:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54103
IP address blocks: 45.87.23.0/24 maxlen: 24
45.87.21.0/24 maxlen: 24
45.88.121.0/24 maxlen: 24
45.88.123.0/24 maxlen: 24
45.133.253.0/24 maxlen: 24
45.133.255.0/24 maxlen: 24
185.243.245.0/24 maxlen: 24
185.243.247.0/24 maxlen: 24
45.143.193.0/24 maxlen: 24
45.143.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:ab:07:0c:3f:3a:3b:1e:0b:c0:cb:2f:89:f8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7aadff000fe1fb3114961d6b1bc986b2591ce19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:ed:a1:43:59:cf:fa:41:1a:5e:95:aa:a0:
1e:8a:fb:30:64:a2:59:0c:26:61:78:ac:0b:1d:97:
e1:e2:5d:6b:12:d7:57:6b:69:d6:d8:25:e7:db:d3:
a3:6a:af:55:70:fd:95:16:d9:26:a7:f6:8f:aa:b2:
cf:6f:87:63:49:3f:ce:ae:fb:62:b5:70:bb:6b:69:
47:45:ea:08:1c:3d:bc:af:fa:e7:d6:2b:50:8c:c2:
2a:f5:f8:c8:6b:9e:a0:4b:a4:81:52:0b:73:a7:e6:
2c:59:77:5c:5f:62:32:2e:cf:d5:82:2c:f0:3f:bf:
b2:59:80:89:37:14:ce:27:28:db:8f:c0:da:20:96:
f3:5d:77:6b:e4:a5:e2:03:c5:23:b9:b1:42:6c:0e:
77:8d:cd:d1:5b:a2:8a:14:dd:83:ef:5f:fc:46:f8:
11:fe:43:d3:5e:7f:62:dc:ac:3d:92:a0:61:af:57:
1c:62:1f:97:5c:28:0f:58:be:0a:18:b3:05:4d:3e:
ea:d5:e3:ad:5c:68:d2:64:9c:db:46:fa:2e:f8:b0:
7c:3a:29:92:bd:a8:ce:80:f0:11:6c:00:f2:cc:18:
b2:34:5a:c8:31:70:4a:40:67:c2:5a:82:d3:87:42:
4a:e6:4e:bb:82:a9:c1:49:ea:6f:b1:41:b8:f6:e8:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AA:DF:F0:00:FE:1F:B3:11:49:61:D6:B1:BC:98:6B:25:91:CE:19
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/96rf8AD-H7MRSWHWsbyYayWRzhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.21.0/24
45.87.23.0/24
45.88.121.0/24
45.88.123.0/24
45.133.253.0/24
45.133.255.0/24
45.143.193.0/24
45.143.195.0/24
185.243.245.0/24
185.243.247.0/24
Signature Algorithm: sha256WithRSAEncryption
10:7c:cb:5e:0a:4b:c2:01:81:ce:b1:52:8a:1c:4d:2f:6e:9d:
60:4c:04:88:bd:85:8a:d5:18:96:92:21:21:e4:e8:7d:d6:5e:
d3:4e:a2:88:a9:6a:e4:ab:96:a2:50:94:6b:0b:3b:7e:2e:d0:
42:b9:f8:02:c4:81:8c:25:82:af:e7:d9:43:25:df:3e:60:16:
f7:f0:eb:0c:2c:ce:32:7d:da:83:86:3d:59:97:04:2e:e5:8a:
73:26:b0:d3:31:98:24:d0:9e:4a:10:2e:0d:bb:bc:ba:df:42:
74:99:49:95:c1:10:ad:e1:11:07:55:d8:64:86:a3:a2:1f:59:
0d:7f:5f:a1:59:5f:81:5a:90:59:80:5f:2e:3a:61:08:7a:17:
6d:09:1c:6f:e5:40:d6:7c:a6:3f:84:31:b6:d3:28:50:f0:8c:
51:8b:3a:95:60:84:89:58:0e:42:c2:cb:6b:d5:aa:3b:e1:7d:
00:bc:56:63:9a:0e:64:7c:ba:85:af:f3:55:f8:6b:04:6d:9e:
f9:55:1a:cc:a8:40:06:7c:3d:d3:34:e8:a3:e9:36:2a:ac:b3:
48:f9:8b:aa:ad:95:12:de:d0:d2:36:9b:0a:28:12:0e:2b:67:
bb:d5:12:4b:e7:09:83:fd:75:18:e5:6c:f2:cb:a2:17:51:98:
a3:f7:09:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:22:20 2024 by rpki-client on console-ams.rpki-client.org