Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1qEBqvtcz5mI9_DFE--K0cXvkAU.roa
File: 1qEBqvtcz5mI9_DFE--K0cXvkAU.roa (raw, json)
Hash identifier: 4mQU3XK1Y7DLKaw2RSaKFGbXf6Vj+JNhDOwUsqYB/r0=
Subject key identifier: D6:A1:01:AA:FB:5C:CF:99:88:F7:F0:C5:13:EF:8A:D1:C5:EF:90:05
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0191E5D999E135E839DEAEAE214EDE7B22A7
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1qEBqvtcz5mI9_DFE--K0cXvkAU.roa
Signing time: Thu 12 Sep 2024 10:48:48 +0000
ROA not before: Thu 12 Sep 2024 10:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a05:f5c0::/32 maxlen: 32
2a0c:f1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:d9:99:e1:35:e8:39:de:ae:ae:21:4e:de:7b:22:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 12 10:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6a101aafb5ccf9988f7f0c513ef8ad1c5ef9005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:28:1f:e3:ae:a4:fe:e1:6a:be:f6:8f:5e:
72:9b:94:16:80:15:16:42:25:b9:98:94:4b:e8:a7:
0c:21:4a:83:b1:77:57:bd:de:fe:a7:7e:63:5a:cd:
71:ba:3a:d9:9f:19:5d:29:ae:49:93:ad:7d:c2:96:
65:b8:0a:a9:f1:7b:54:8d:78:61:9b:57:09:83:a5:
ca:25:07:f7:88:a0:44:69:c9:dd:58:48:8a:68:92:
38:e4:e8:13:9a:f7:2f:75:8b:3f:b0:3e:52:76:3d:
be:a4:de:1c:24:50:ea:74:86:41:e1:fe:aa:3e:4b:
d7:9b:32:69:b3:7d:58:5c:6f:51:00:d0:99:5e:7f:
bf:44:d1:9b:09:46:0c:18:2d:33:88:13:5b:b8:ec:
73:a0:af:90:d0:26:ef:65:a0:b7:07:59:6b:4b:da:
2e:d9:c0:a2:d2:15:68:c5:12:94:3d:ea:6f:ec:43:
d2:a4:db:cc:33:b4:79:5b:9e:22:6f:eb:c6:34:36:
d3:da:98:a2:ec:a0:03:50:56:27:13:34:f9:b6:92:
53:ef:ac:ba:24:35:d7:c7:b7:6e:fd:fa:5c:39:25:
56:8f:e7:cb:02:e4:7e:9a:a4:f0:27:8c:fa:3b:e0:
cb:cc:3a:09:87:0e:0f:3d:0b:01:24:11:19:91:7b:
e3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A1:01:AA:FB:5C:CF:99:88:F7:F0:C5:13:EF:8A:D1:C5:EF:90:05
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1qEBqvtcz5mI9_DFE--K0cXvkAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0/24
77.242.148.0/24
77.242.151.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.246.0/23
92.52.208.0/21
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
08:c2:29:d6:52:a7:39:34:40:23:78:3b:22:71:87:f4:67:d3:
31:fd:12:e4:b7:a8:34:c6:69:95:26:fe:c7:e7:c6:15:78:34:
95:ab:69:aa:6f:aa:b7:06:b7:63:9b:56:40:d2:bc:0b:ae:c7:
29:f8:b9:0f:c5:4c:36:4d:fe:33:15:95:4c:01:52:db:a1:c2:
37:ce:0a:fe:84:85:46:41:b2:09:b2:e7:75:41:e7:a3:04:85:
86:ad:9d:ff:12:aa:6b:c5:f9:e1:0e:ec:43:b8:46:c5:4a:55:
19:02:7f:61:b0:df:08:43:5d:e3:f5:3f:ad:2c:f8:22:a3:d0:
f8:50:5a:1b:c4:01:07:d3:be:cf:ad:cc:da:4f:53:bb:10:e7:
ff:ca:37:80:65:28:a2:be:60:a4:de:7b:f3:92:7c:24:39:b4:
9e:38:49:ca:61:69:96:ce:d6:2f:84:a9:f3:39:f8:26:71:0b:
bb:e4:1d:77:72:d2:59:5a:de:ba:e0:2a:bc:ef:cd:de:bf:07:
0b:52:a5:85:b6:49:00:56:98:7e:69:bc:5a:5f:8f:a4:1d:ee:
63:d3:b4:f4:cf:b9:82:66:1d:34:2d:4c:ba:92:eb:72:b6:ea:
36:78:b9:86:46:ec:d4:8c:a7:6e:d2:15:72:2b:8c:fe:81:38:
da:26:81:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:21:13 2024 by rpki-client on console-fra.rpki-client.org