Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/ZSa6dn_K9eshmQP0QfJNyfJmU34.roa
File: ZSa6dn_K9eshmQP0QfJNyfJmU34.roa (raw, json)
Hash identifier: veUqThPutBbItzGeZPSg12aqEYElS5jLD+yLPQWWFY0=
Subject key identifier: 65:26:BA:76:7F:CA:F5:EB:21:99:03:F4:41:F2:4D:C9:F2:66:53:7E
Certificate issuer: /CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Certificate serial: 018CC794CAB1E74996F04954ACAA4565731B
Authority key identifier: E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/ZSa6dn_K9eshmQP0QfJNyfJmU34.roa
Signing time: Tue 02 Jan 2024 00:31:06 +0000
ROA not before: Tue 02 Jan 2024 00:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208770
IP address blocks: 45.151.24.0/22 maxlen: 22
45.151.24.0/24 maxlen: 24
45.151.24.0/23 maxlen: 23
45.151.27.0/24 maxlen: 24
45.151.25.0/24 maxlen: 24
45.151.26.0/23 maxlen: 23
45.151.26.0/24 maxlen: 24
195.80.32.0/22 maxlen: 24
45.145.76.0/23 maxlen: 23
45.145.76.0/24 maxlen: 24
45.145.77.0/24 maxlen: 24
45.145.78.0/24 maxlen: 24
45.145.78.0/23 maxlen: 23
45.145.76.0/22 maxlen: 22
45.145.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:ca:b1:e7:49:96:f0:49:54:ac:aa:45:65:73:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Validity
Not Before: Jan 2 00:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6526ba767fcaf5eb219903f441f24dc9f266537e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:41:f9:8c:76:82:f6:77:2c:a6:ee:1e:b2:
03:c8:3a:df:84:5d:36:42:c2:b9:fa:b6:ec:00:ee:
04:e2:84:23:c1:6f:0e:77:74:e0:f3:da:cf:5b:70:
76:3e:f5:7d:14:d6:e1:d2:63:7c:19:55:07:f7:6d:
2a:f8:78:50:86:37:5d:b8:25:c0:15:ce:be:89:ab:
1b:95:51:d2:8a:e9:fb:91:6f:5f:55:26:30:d5:42:
47:cb:dd:4f:3c:20:28:3e:5e:70:a2:76:28:b3:30:
58:31:04:c6:7a:e5:a6:6d:58:07:6a:15:db:0c:18:
b9:42:b7:5c:ef:30:c5:9a:54:4d:a5:a2:01:0f:99:
6f:d0:59:29:56:5b:66:46:10:9f:c8:ca:2e:ed:8c:
a4:30:7b:ee:c4:74:c6:da:25:a1:1e:67:af:1c:9e:
dc:1d:2c:98:93:d5:89:80:66:a0:93:7f:62:0f:62:
ed:cf:92:62:a7:47:15:d8:e2:92:9c:5d:ff:0f:62:
b6:99:59:35:f8:c7:00:76:ee:19:7c:ef:0c:75:b7:
a6:c9:41:14:19:c9:90:d4:d5:05:34:bf:08:81:34:
2c:8f:c2:9c:dd:7f:9c:ae:31:bb:4f:33:59:67:dc:
4e:3c:69:ec:3e:27:66:22:9c:c4:af:d8:2d:bc:52:
83:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:26:BA:76:7F:CA:F5:EB:21:99:03:F4:41:F2:4D:C9:F2:66:53:7E
X509v3 Authority Key Identifier:
keyid:E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/ZSa6dn_K9eshmQP0QfJNyfJmU34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.76.0/22
45.151.24.0/22
195.80.32.0/22
Signature Algorithm: sha256WithRSAEncryption
54:1b:a8:cf:2e:97:43:44:17:36:aa:6b:14:e3:88:ff:35:23:
c0:c6:4a:2c:f6:72:77:26:12:20:38:7e:20:d5:5c:3c:ff:d8:
90:06:22:d7:fd:2e:44:ee:ae:c4:89:61:b8:ad:28:8c:1b:5f:
84:01:63:44:6d:c2:85:74:71:17:7b:73:34:05:46:23:0d:2b:
29:f4:0b:26:4a:04:92:26:11:18:3f:4e:88:a9:8a:5d:41:18:
d5:1d:15:40:15:8b:70:20:c2:24:b9:59:46:4a:f0:b6:4d:ee:
0b:b2:f4:f8:06:70:de:0f:9f:73:da:1a:38:63:a2:0f:24:e9:
9b:47:1c:c5:8a:59:8e:6d:03:53:22:88:e2:80:58:9f:c2:ff:
fb:e5:67:d3:e6:2c:26:1e:a1:1b:c3:e0:61:1e:3e:f3:21:79:
d5:2e:91:2d:a6:0b:56:5c:a5:3a:2f:dc:53:73:d9:97:95:b6:
9a:db:da:9f:fe:db:b4:e8:ca:2a:63:a4:d6:d8:05:41:ae:40:
a3:99:b5:95:c2:29:74:bc:e0:f3:01:e4:60:b0:a7:c0:bc:ee:
b0:eb:1a:03:56:a2:70:0b:b6:a4:07:d0:34:66:64:8a:48:cd:
7d:1e:8a:82:c0:31:79:a5:06:15:4a:b2:0a:06:60:87:22:07:
dc:bf:b3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 08:47:55 2024 by rpki-client on console-ams.rpki-client.org