Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/BDE_Y1J54qZ3PY51ktBQD0BFzd8.roa
File: BDE_Y1J54qZ3PY51ktBQD0BFzd8.roa (raw, json)
Hash identifier: 2kw9S/uz7Jh5xhJ0qiUnrV7tvxNd0zP1OifQLFIKryI=
Subject key identifier: 04:31:3F:63:52:79:E2:A6:77:3D:8E:75:92:D0:50:0F:40:45:CD:DF
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 018CC801273AC1B09A616A6D2ED06CC76CE3
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/BDE_Y1J54qZ3PY51ktBQD0BFzd8.roa
Signing time: Tue 02 Jan 2024 02:29:27 +0000
ROA not before: Tue 02 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.158.64.0/24 maxlen: 24
45.158.64.0/22 maxlen: 22
45.158.67.0/24 maxlen: 24
45.158.66.0/24 maxlen: 24
45.158.65.0/24 maxlen: 24
193.104.15.0/24 maxlen: 24
95.214.130.0/24 maxlen: 24
95.214.129.0/24 maxlen: 24
95.214.128.0/22 maxlen: 22
95.214.128.0/24 maxlen: 24
95.214.131.0/24 maxlen: 24
2a09:e180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:27:3a:c1:b0:9a:61:6a:6d:2e:d0:6c:c7:6c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: Jan 2 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04313f635279e2a6773d8e7592d0500f4045cddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a5:a2:5f:b8:e6:07:79:3b:52:ea:c9:c1:5e:
8d:e4:bc:22:4e:04:10:28:bc:c5:55:40:f2:5e:48:
f5:06:95:db:9b:a5:98:c9:e2:e8:6e:cf:19:7c:9d:
b9:2f:20:1f:f2:37:9f:fd:76:0f:9e:26:eb:df:65:
94:49:0c:bb:11:2d:c3:9e:8e:20:76:54:f5:87:94:
cd:c9:da:f7:dd:76:c1:0e:7f:fb:0d:bf:a5:09:63:
12:91:2a:a4:53:bb:d1:f2:e4:e9:99:34:16:b8:6f:
eb:a4:09:4e:59:1a:47:51:47:a7:ac:04:13:4a:e5:
ad:cf:35:b5:1c:a1:23:8e:03:9a:ac:37:8c:39:2f:
d8:b1:88:df:ea:b5:15:2b:aa:2b:ea:35:62:48:76:
ec:44:d5:74:42:57:a5:13:c5:d8:7e:b2:d1:20:24:
0d:14:6e:86:47:0c:da:76:d1:39:c6:e7:61:59:ac:
76:5a:e1:f3:71:7b:d6:35:74:95:64:69:f8:7b:5d:
89:ec:a0:1d:66:d5:b8:73:d7:ea:52:e9:8b:92:f8:
9d:6e:b0:6c:ae:04:6d:b4:c9:f5:06:57:9a:f3:81:
a0:8d:da:1b:df:43:ad:f9:e1:f6:68:e0:27:ce:64:
b1:54:fa:79:80:e8:bd:0d:4e:57:1d:ec:9c:3b:76:
57:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:31:3F:63:52:79:E2:A6:77:3D:8E:75:92:D0:50:0F:40:45:CD:DF
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/BDE_Y1J54qZ3PY51ktBQD0BFzd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.64.0/22
95.214.128.0/22
193.104.15.0/24
IPv6:
2a09:e180::/29
Signature Algorithm: sha256WithRSAEncryption
26:20:03:b7:ef:11:4e:dd:0e:62:05:75:61:7e:e8:1d:30:bb:
ce:06:60:a4:33:ee:08:20:2e:2c:ac:c2:14:2a:9a:19:cd:4f:
f7:c7:9a:a0:e1:e5:61:2f:6b:ce:c0:82:68:f4:39:9d:a9:3d:
b3:bf:10:eb:5a:e7:96:99:c4:f3:21:03:cc:15:0c:90:f5:1e:
94:75:03:a2:c1:94:6d:66:6d:dd:f0:ad:0d:b6:16:1b:6e:4c:
27:4a:c7:75:4c:7c:56:42:29:6c:4f:16:62:16:d3:e5:33:6a:
5e:3a:88:d8:f2:af:72:16:0a:ec:91:66:6f:0e:a5:c2:98:09:
3a:95:0e:83:3f:42:cd:e7:5e:eb:ea:18:95:1c:bd:11:8d:54:
80:17:3c:31:53:24:8d:ed:72:24:8f:51:6a:b7:b8:9f:e7:78:
73:a6:6d:59:51:f6:23:d7:2b:be:75:e2:67:3c:6c:2b:d8:90:
74:31:9f:cc:e9:85:64:12:88:79:18:ac:2f:fb:4e:7a:f4:5a:
8b:fd:d6:80:1f:ef:64:f9:12:27:7a:dd:27:45:46:b4:53:8c:
65:2f:de:0b:2c:7a:22:d3:18:1a:5e:8f:4f:54:75:17:c5:9b:
36:63:c8:11:23:a6:90:ea:f3:ad:63:6b:ac:47:7d:f7:3e:ed:
d4:c5:35:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:47:10 2024 by rpki-client on console-fra.rpki-client.org