Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/KtmzsLhTcepwdlV9LpXet_32O00.roa
File: KtmzsLhTcepwdlV9LpXet_32O00.roa (raw, json)
Hash identifier: mRkH7xmG/2G9oLvWJQ2YoznULWOWmaw2y1Yg8yWP4vM=
Subject key identifier: 2A:D9:B3:B0:B8:53:71:EA:70:76:55:7D:2E:95:DE:B7:FD:F6:3B:4D
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FA161EDCC06B34BF9621CB7EB031D
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/KtmzsLhTcepwdlV9LpXet_32O00.roa
Signing time: Tue 02 Jan 2024 04:30:08 +0000
ROA not before: Tue 02 Jan 2024 04:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 193.176.210.0/24 maxlen: 24
45.85.124.0/22 maxlen: 24
45.130.136.0/24 maxlen: 24
45.91.20.0/24 maxlen: 24
45.91.22.0/24 maxlen: 24
45.132.193.0/24 maxlen: 24
2a07:e341::/32 maxlen: 32
2a07:e340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:a1:61:ed:cc:06:b3:4b:f9:62:1c:b7:eb:03:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ad9b3b0b85371ea7076557d2e95deb7fdf63b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:a5:31:b9:4b:75:1a:fb:87:e6:b8:e4:fe:
20:72:ec:59:e6:51:14:fd:78:d3:12:3d:7b:04:18:
d6:9e:15:90:26:71:2d:36:eb:e1:cf:49:d5:b7:7f:
57:f4:74:4e:bd:c2:c2:be:31:20:70:08:c8:34:6c:
44:cc:96:e3:7a:01:58:22:c9:1c:4b:e2:3c:2a:ac:
0e:50:39:82:7e:2d:69:d1:e0:23:c8:65:af:66:21:
69:a6:1c:2c:94:ea:ab:af:a1:7b:28:29:0c:59:ca:
87:91:56:c0:e5:f1:f5:40:81:64:7b:91:ee:0a:9c:
15:32:ad:ca:bd:51:13:40:fc:7b:28:2b:61:5b:20:
0b:10:e0:4a:0f:3d:6d:cc:00:7c:03:43:cf:35:25:
a7:04:2b:b0:1d:d5:c5:93:a3:48:d0:50:11:26:4b:
78:03:6f:3c:0c:bb:56:64:10:22:a5:48:83:8a:c9:
cd:d5:78:19:f2:23:42:2b:7b:90:bb:cb:3e:92:37:
8f:73:9c:fc:02:03:eb:73:8f:5a:67:5a:be:00:1e:
2a:dd:6c:42:fc:15:df:11:f5:d8:bc:f2:68:10:c1:
0a:d9:6e:1b:90:d6:c7:e5:ee:61:47:82:8b:a0:6c:
0c:fc:d0:76:16:bd:5f:4e:17:a5:1b:27:52:d6:af:
c3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D9:B3:B0:B8:53:71:EA:70:76:55:7D:2E:95:DE:B7:FD:F6:3B:4D
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/KtmzsLhTcepwdlV9LpXet_32O00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.124.0/22
45.91.20.0/24
45.91.22.0/24
45.130.136.0/24
45.132.193.0/24
193.176.210.0/24
IPv6:
2a07:e340::/31
Signature Algorithm: sha256WithRSAEncryption
4d:17:fd:22:3c:cf:01:94:24:7a:97:d0:a5:76:77:fa:a0:00:
aa:ed:d8:98:32:0c:be:23:db:fb:b9:7b:79:6d:f2:66:70:6d:
6f:b0:74:32:ad:8e:70:98:5b:0b:c5:4f:7a:51:2b:8f:88:9a:
3a:06:7d:e5:a8:ae:3f:e3:af:3c:d6:c6:9c:f9:c1:52:93:a9:
2f:82:aa:79:bc:65:8e:e4:ce:ec:66:9a:a9:a6:2b:7a:8a:52:
33:e0:1c:3f:68:9c:3e:5a:92:ed:2e:c8:15:b6:b5:5e:21:b7:
42:2f:73:a5:8f:a1:a1:ff:c2:70:75:0a:98:b4:b1:0c:59:e5:
ef:51:fb:46:b3:19:d2:e5:ae:2b:1d:d7:9d:ac:e6:41:08:21:
3b:ce:da:7d:d5:fd:61:60:4e:92:0d:cc:26:0a:04:7f:0f:ac:
61:6d:52:da:7e:05:28:67:a6:24:df:80:38:0c:32:a7:43:9e:
c0:46:53:03:f1:20:0c:73:63:66:74:d7:77:35:6c:d7:c7:de:
45:62:8f:e0:35:7d:7a:fb:89:96:71:2a:cc:40:ea:1f:fe:ec:
fe:9f:8e:3b:f9:9f:ab:53:f7:0a:79:09:9e:d3:7d:43:43:81:
38:f6:bb:56:ce:f1:19:a1:aa:6d:51:52:85:06:f8:fe:6d:d6:
9f:3a:24:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:34:38 2024 by rpki-client on console-fra.rpki-client.org