Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/rElWlT8sjWlXnnzvZNqIuABvLdA.roa
File: rElWlT8sjWlXnnzvZNqIuABvLdA.roa (raw, json)
Hash identifier: /EPPOCWPThckca/V+3doeHwSFT6d4B3Cl6ojGlgep3k=
Subject key identifier: AC:49:56:95:3F:2C:8D:69:57:9E:7C:EF:64:DA:88:B8:00:6F:2D:D0
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 018CC8DE58E77A610B409C6B59E55AFDAC14
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/rElWlT8sjWlXnnzvZNqIuABvLdA.roa
Signing time: Tue 02 Jan 2024 06:31:04 +0000
ROA not before: Tue 02 Jan 2024 06:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60134
IP address blocks: 45.152.157.0/24 maxlen: 24
45.152.156.0/24 maxlen: 24
193.30.129.0/24 maxlen: 24
45.152.158.0/24 maxlen: 24
45.152.159.0/24 maxlen: 24
185.158.253.0/24 maxlen: 24
185.158.252.0/22 maxlen: 22
185.158.252.0/24 maxlen: 24
185.158.255.0/24 maxlen: 24
185.158.254.0/24 maxlen: 24
45.144.206.0/24 maxlen: 24
45.144.205.0/24 maxlen: 24
45.144.204.0/22 maxlen: 22
45.144.204.0/24 maxlen: 24
45.144.207.0/24 maxlen: 24
213.232.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 Nov 2024 11:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:58:e7:7a:61:0b:40:9c:6b:59:e5:5a:fd:ac:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Jan 2 06:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac4956953f2c8d69579e7cef64da88b8006f2dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:a4:63:ce:80:db:09:8d:f6:0f:a9:0e:15:
70:8e:16:fc:26:db:ad:aa:36:3e:e4:ff:ce:bf:38:
66:a2:d4:58:b6:77:c1:6a:82:63:50:11:38:43:bd:
99:44:cc:91:40:94:90:5e:9f:1a:0a:46:a2:26:57:
52:e1:b0:dd:14:1d:0f:56:54:74:b2:1d:24:cb:ba:
1a:a3:33:10:8d:9f:60:fd:29:91:ab:dc:30:96:f1:
00:b1:6b:e2:a0:ae:47:c5:6a:65:63:a8:78:5a:c0:
29:26:a9:e5:a9:be:9e:d7:2d:b4:4d:56:3b:70:78:
55:4a:dd:65:e4:94:17:ce:37:b5:e3:3f:d8:73:47:
e9:00:45:45:3f:b9:6f:7b:0a:69:f2:4e:11:f8:bf:
3b:c1:42:53:d1:07:ea:56:e0:ee:57:ac:ae:a2:56:
f2:91:0b:09:c7:7f:b4:94:86:5a:e1:0a:46:96:60:
65:87:21:d3:d1:14:e5:1d:f5:f5:70:62:5d:b9:1c:
25:a1:02:e9:22:57:8e:0e:97:55:f1:77:d4:1a:e2:
09:26:a2:06:fc:97:28:cb:ff:34:36:96:76:49:d8:
99:e5:e9:a8:b8:b3:98:2a:06:99:c7:58:cc:11:40:
29:97:1e:04:50:da:6f:4e:52:fa:78:3d:4d:b8:c9:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:49:56:95:3F:2C:8D:69:57:9E:7C:EF:64:DA:88:B8:00:6F:2D:D0
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/rElWlT8sjWlXnnzvZNqIuABvLdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.204.0/22
45.152.156.0/22
185.158.252.0/22
193.30.129.0/24
213.232.248.0/24
Signature Algorithm: sha256WithRSAEncryption
62:dc:09:2a:87:77:9a:3e:27:0c:35:42:19:ab:02:57:1e:e7:
d2:20:ee:26:66:fd:3e:fa:8a:38:4c:88:36:ac:3b:ab:ac:bf:
84:da:5f:31:a2:2d:3f:28:a6:f5:a5:1b:df:cc:d1:db:75:b3:
cc:82:aa:80:a1:73:7e:89:7d:d6:de:6d:8d:3f:9a:8d:6a:0e:
88:1c:ab:36:5d:04:48:5f:0e:bd:4f:e5:04:f4:f7:a6:12:b2:
c8:e2:50:07:ce:c9:b0:c8:8c:5d:fc:4b:c8:74:c2:95:cf:b2:
47:22:d3:a6:84:65:7b:8c:59:20:e9:fb:f8:8d:a0:43:81:13:
21:84:b3:4a:60:40:03:ad:a8:d3:cb:23:91:55:8d:85:64:bd:
7f:f9:77:9f:1f:c1:8e:49:0b:54:e6:39:a9:c9:25:1d:63:0b:
d9:f7:e3:15:d9:69:cd:d2:24:bf:9d:e3:e6:db:2a:0d:2c:b1:
f4:f9:a0:d5:fc:94:b5:f1:ce:30:76:91:b1:11:cc:64:6b:1a:
49:58:70:ca:8f:57:23:83:4d:10:14:03:8d:e3:81:25:1c:77:
f4:60:15:f1:c3:0e:a0:26:34:5b:70:a9:ff:7c:62:77:bc:9a:
38:f9:fb:a6:7c:c5:c9:d8:24:26:6f:d6:8f:80:41:f7:54:54:
29:cb:f1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 19:54:28 2024 by rpki-client on console-ams.rpki-client.org