Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/DNWHcnRTx5MZmIlbtQc1KCfOK6U.roa
File: DNWHcnRTx5MZmIlbtQc1KCfOK6U.roa (raw, json)
Hash identifier: rEdzU+7souDsu//Az6Qwl+Qnja/PRb0Cxok3Y4ZwHrE=
Subject key identifier: 0C:D5:87:72:74:53:C7:93:19:98:89:5B:B5:07:35:28:27:CE:2B:A5
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 018CC4255B2E92FD21C29805CBFE818F9B08
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/DNWHcnRTx5MZmIlbtQc1KCfOK6U.roa
Signing time: Mon 01 Jan 2024 08:30:31 +0000
ROA not before: Mon 01 Jan 2024 08:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58305
IP address blocks: 198.105.124.0/23 maxlen: 24
45.43.64.0/19 maxlen: 24
45.43.66.0/23 maxlen: 24
45.43.74.0/23 maxlen: 24
45.43.76.0/22 maxlen: 24
198.105.96.0/19 maxlen: 24
198.105.116.0/23 maxlen: 24
155.254.32.0/22 maxlen: 24
155.254.32.0/19 maxlen: 24
155.254.62.0/24 maxlen: 24
107.161.160.0/24 maxlen: 24
107.161.161.0/24 maxlen: 24
107.161.162.0/24 maxlen: 24
107.161.168.0/24 maxlen: 24
107.161.169.0/24 maxlen: 24
107.161.170.0/24 maxlen: 24
107.161.171.0/24 maxlen: 24
107.181.128.0/19 maxlen: 24
107.181.138.0/23 maxlen: 24
107.181.144.0/23 maxlen: 24
162.220.240.0/24 maxlen: 24
162.220.242.0/24 maxlen: 24
162.220.240.0/21 maxlen: 24
162.220.241.0/24 maxlen: 24
113.20.156.0/22 maxlen: 24
107.161.174.0/23 maxlen: 24
162.217.250.0/24 maxlen: 24
162.217.251.0/24 maxlen: 24
2a05:9f40::/29 maxlen: 48
2a07:9944:20::/48 maxlen: 48
2a07:9942:39d7::/48 maxlen: 48
2a07:9940::/29 maxlen: 48
2a07:9944:10::/48 maxlen: 48
2a02:2ca0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 07:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5b:2e:92:fd:21:c2:98:05:cb:fe:81:8f:9b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cd587727453c7931998895bb507352827ce2ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:90:ac:1b:a1:0d:f7:d5:f9:2b:3e:8c:7a:14:
63:4d:09:53:ef:4d:ba:6a:fc:d3:c6:9e:a9:df:a0:
e3:ab:7c:71:10:c4:25:e8:be:8f:81:6c:3f:12:8c:
e6:40:58:b8:0b:f9:ac:f6:ca:b2:fc:2f:1f:7a:43:
8f:be:fe:9e:f9:f3:2f:78:bc:1d:74:e0:e5:8d:20:
cb:8d:d1:ce:89:40:18:c7:1d:46:51:4f:ed:5f:b3:
72:d1:62:59:9d:bb:f3:64:6d:75:08:4f:c5:37:e1:
f0:fd:cb:25:9a:24:17:0f:4e:ec:87:d1:c5:1c:74:
b7:92:29:77:ef:ae:b1:4a:d9:ec:9a:c6:64:fd:ad:
60:a2:fe:83:f5:f7:b5:c2:2d:44:53:73:f4:ab:10:
31:30:0c:41:8d:8c:a4:ff:ec:bb:4c:94:9c:e5:8f:
28:c3:e6:70:be:98:1a:ba:04:9e:eb:b3:46:d6:ff:
30:81:c8:62:f4:b2:20:a1:e1:da:a6:de:6b:3a:92:
10:52:ca:17:22:d1:2a:0f:0a:77:87:86:94:f9:e7:
57:d4:3a:9b:8a:76:b1:cc:e9:d3:a6:23:f0:2a:32:
b6:fc:7e:7f:11:74:e6:4e:85:23:14:4f:b5:c8:46:
fe:62:5c:29:37:93:46:41:a9:a1:ff:75:06:4c:eb:
37:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D5:87:72:74:53:C7:93:19:98:89:5B:B5:07:35:28:27:CE:2B:A5
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/DNWHcnRTx5MZmIlbtQc1KCfOK6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/19
107.161.160.0-107.161.162.255
107.161.168.0/22
107.161.174.0/23
107.181.128.0/19
113.20.156.0/22
155.254.32.0/19
162.217.250.0/23
162.220.240.0/21
198.105.96.0/19
IPv6:
2a02:2ca0::/29
2a05:9f40::/29
2a07:9940::/29
Signature Algorithm: sha256WithRSAEncryption
5c:0f:bb:f4:9f:f4:7d:17:16:70:41:8b:1f:a9:df:00:2b:02:
3e:20:db:0f:81:05:49:10:63:aa:5c:b2:f3:79:e8:49:c3:73:
f0:c9:e8:c4:fd:29:cb:56:ac:aa:bb:bd:04:a8:89:97:13:46:
54:ac:19:fe:1d:dd:44:33:8a:2f:60:51:63:79:67:fb:f5:4f:
af:39:cd:3a:29:be:20:fd:e9:66:51:ee:18:7b:a9:75:12:78:
7e:54:2d:5b:6f:bc:52:44:96:95:1e:fe:03:d9:29:ab:0e:17:
1a:56:99:fd:a3:79:3e:43:95:b8:79:d6:a6:13:a6:41:81:b5:
57:7e:ca:a7:1e:72:ae:51:38:29:69:ab:d5:da:c9:7b:7f:55:
99:c2:ee:af:45:df:f7:a5:95:24:47:ed:4c:60:db:9d:8d:e9:
df:80:4d:f0:91:e8:be:a9:4d:fc:38:7f:ca:98:b6:fc:72:a2:
58:6e:52:b7:bb:67:af:3c:20:9b:b7:f2:e5:ee:1b:b1:a3:c5:
72:f4:83:d9:b4:91:50:95:55:0b:e6:e6:80:3c:92:6c:7b:ad:
eb:82:3e:31:df:fb:a7:8c:09:98:79:6f:b9:d2:3d:b9:fa:0a:
f7:54:76:fb:db:43:f1:2c:2c:9d:63:10:98:fc:b7:e7:6e:7b:
7e:d9:1d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:46:50 2024 by rpki-client on console-ams.rpki-client.org