Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/dnFtIWyZHishTVrmuxtZ0o5SRGI.roa
File: dnFtIWyZHishTVrmuxtZ0o5SRGI.roa (raw, json)
Hash identifier: nIqwOUEzLesM+4n/97gHAL8eXNwYbZWYfhUa1eBN7xU=
Subject key identifier: 76:71:6D:21:6C:99:1E:2B:21:4D:5A:E6:BB:1B:59:D2:8E:52:44:62
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018CC5003CED2670444CB1C9CBA70695D7F5
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/dnFtIWyZHishTVrmuxtZ0o5SRGI.roa
Signing time: Mon 01 Jan 2024 12:29:36 +0000
ROA not before: Mon 01 Jan 2024 12:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 5.252.20.0/24 maxlen: 24
5.252.23.0/24 maxlen: 24
5.252.22.0/24 maxlen: 24
5.252.21.0/24 maxlen: 24
45.83.180.0/22 maxlen: 24
2.58.124.0/22 maxlen: 24
45.150.110.0/23 maxlen: 24
92.118.124.0/24 maxlen: 24
92.118.125.0/24 maxlen: 24
92.118.127.0/24 maxlen: 24
92.118.126.0/24 maxlen: 24
2a0b:ec82::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:3c:ed:26:70:44:4c:b1:c9:cb:a7:06:95:d7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 12:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76716d216c991e2b214d5ae6bb1b59d28e524462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cc:55:99:0b:f8:9e:4c:ca:d1:0e:91:00:39:
15:38:05:4c:f8:c2:ff:0a:23:26:a9:05:ac:4e:46:
c1:22:f2:b0:b7:86:75:54:f4:f2:46:5e:e7:43:88:
2f:58:14:60:d0:f8:21:27:22:d6:b2:13:ae:0e:43:
70:17:95:da:9f:8f:6d:d2:5c:cd:c2:8f:de:4e:11:
a2:6a:e5:a2:e4:aa:9e:fa:ec:2f:c4:75:cf:13:f9:
6d:4e:88:78:d7:c6:41:aa:ab:08:b6:1e:2f:0f:18:
c3:65:58:5b:e9:c2:c3:83:3c:62:31:c3:24:0d:c9:
c5:01:88:73:d1:0c:f0:e8:f8:cc:b1:e5:59:1d:12:
92:c3:b4:a0:6a:af:93:76:ca:25:3a:41:63:64:aa:
1e:06:50:5a:b7:2a:6d:65:2f:f6:5d:2e:10:1c:f5:
cf:8e:ed:27:be:20:f5:75:ce:c5:77:bd:97:d3:c8:
3a:e1:b5:43:4b:c2:45:7b:95:68:fe:7b:cf:32:bf:
85:be:2f:19:51:22:d6:e0:0c:f6:09:19:54:5b:26:
e5:7f:90:7a:9d:ee:3b:5f:f2:f3:fb:8d:8c:c8:ed:
2f:02:a2:db:0f:da:bd:f2:64:86:27:b4:5a:1f:7d:
07:e2:63:5c:77:79:28:80:3a:af:40:fb:c8:7c:a0:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:71:6D:21:6C:99:1E:2B:21:4D:5A:E6:BB:1B:59:D2:8E:52:44:62
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/dnFtIWyZHishTVrmuxtZ0o5SRGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.124.0/22
5.252.20.0/22
45.83.180.0/22
45.150.110.0/23
92.118.124.0/22
IPv6:
2a0b:ec82::/32
Signature Algorithm: sha256WithRSAEncryption
27:15:73:65:6c:ff:2a:62:fe:95:de:b9:65:b8:72:9d:44:8e:
64:5d:84:57:e2:fe:fb:f6:db:e5:f0:4b:b9:71:ee:ea:db:33:
00:88:1d:26:f8:a0:4a:d7:71:d7:4f:8c:f7:15:a4:bd:20:fb:
ef:27:66:5e:4b:da:fe:8c:9b:1d:21:2b:7c:e6:c8:c0:e1:42:
2e:47:76:c6:08:27:6b:3d:0e:c5:01:72:d5:0f:95:0b:dc:43:
87:d7:60:9c:68:73:2f:3f:43:a9:e5:92:33:73:ed:c2:84:2b:
c8:27:5b:2a:ab:6c:17:b5:b8:e3:f4:5b:40:88:45:72:51:88:
2a:8a:1c:50:72:ca:e5:95:9c:b7:b3:a2:f7:a3:b2:b4:83:15:
e9:63:90:47:66:35:a5:02:ea:7e:16:02:99:83:22:b1:51:87:
b1:dd:ca:fa:93:17:ca:ac:4e:17:31:87:a7:db:40:33:d0:d5:
fa:81:6a:64:b3:a1:b4:a7:fd:8c:23:17:9f:cc:ca:31:a0:b5:
30:60:8f:b8:2f:53:85:02:35:f3:b8:07:95:6d:57:78:bc:20:
6c:6c:4e:55:06:a6:7d:d8:77:fe:01:dd:9e:7b:2b:53:c3:ff:
c3:c9:d9:7f:2d:9b:a6:3e:83:7b:99:18:e2:1e:d7:c5:a6:ef:
ec:be:5e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 11:58:34 2024 by rpki-client on console-fra.rpki-client.org