Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TxEw7r4yol4s0r8pNDQaLNQtys4.roa
File: TxEw7r4yol4s0r8pNDQaLNQtys4.roa (raw, json)
Hash identifier: xnWhhzkC1Oc6AsCC7ReDBGO55pb6k68/QgibX0CNZJM=
Subject key identifier: 4F:11:30:EE:BE:32:A2:5E:2C:D2:BF:29:34:34:1A:2C:D4:2D:CA:CE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193013E06704385E35D8A1A10DAD866D6CD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TxEw7r4yol4s0r8pNDQaLNQtys4.roa
Signing time: Wed 06 Nov 2024 11:31:02 +0000
ROA not before: Wed 06 Nov 2024 11:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 5.253.56.0/23 maxlen: 24
45.139.123.0/24 maxlen: 24
91.92.67.0/24 maxlen: 24
93.123.76.0/22 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
94.156.178.0/24 maxlen: 24
94.156.180.0/23 maxlen: 24
94.156.237.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.25.219.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:3e:06:70:43:85:e3:5d:8a:1a:10:da:d8:66:d6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 6 11:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f1130eebe32a25e2cd2bf2934341a2cd42dcace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:2e:65:44:d3:f8:e7:b3:8f:b1:1d:b1:f2:
0e:f5:d9:34:d7:c7:77:71:3e:18:c2:05:24:b7:68:
dc:78:86:e0:48:20:3f:ac:65:99:71:64:b9:ed:5f:
31:56:33:69:0f:b9:16:ee:f6:0e:46:f4:2b:91:66:
d1:23:24:fe:36:52:42:34:bc:99:6b:36:a8:83:28:
86:f5:23:59:6b:61:4a:5c:84:0a:c1:e7:b9:57:88:
27:21:8e:34:91:bb:6c:4c:61:0f:09:5d:16:75:e0:
ab:f4:22:7a:03:1d:3f:27:d8:14:88:62:55:fd:a0:
98:85:75:ca:c2:58:c5:e0:36:cf:2f:a2:55:33:64:
d1:94:bf:09:6a:0f:5e:4f:b0:cd:2a:e5:77:c0:c4:
51:9a:7d:36:ea:11:3e:4c:4f:62:aa:36:d2:cb:2b:
3b:1d:a5:16:ab:a5:87:4d:8a:97:a5:74:ca:88:22:
0c:c6:6a:8c:5b:03:df:22:24:94:0b:42:83:f7:ea:
b7:60:4c:cc:48:36:38:20:8d:b5:c6:55:c2:3f:4d:
ad:94:47:1b:41:e7:d6:ad:69:b0:8f:d6:8e:a6:2d:
bb:5a:c7:9b:1f:f5:cb:78:bb:be:38:b8:cc:d6:bc:
62:e6:8b:8d:3d:93:5e:35:3d:0a:3f:85:5f:6d:0d:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:11:30:EE:BE:32:A2:5E:2C:D2:BF:29:34:34:1A:2C:D4:2D:CA:CE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TxEw7r4yol4s0r8pNDQaLNQtys4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/23
45.139.123.0/24
91.92.67.0/24
93.123.76.0/22
94.156.152.0/24
94.156.154.0/23
94.156.178.0/24
94.156.180.0/23
94.156.237.0/24
185.252.177.0/24
193.25.219.0/24
193.47.62.0/24
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:68:5a:f7:ad:db:95:7c:d5:70:20:d1:ca:f9:c7:43:cc:af:
7e:1b:32:24:db:9e:30:c7:92:a5:1a:49:38:db:c0:3d:09:18:
e8:50:5b:4a:6d:09:30:78:7b:2f:83:91:16:1c:d0:eb:aa:18:
d0:d3:79:50:93:48:77:1c:65:03:a9:95:23:e9:b1:a6:fc:17:
3b:e0:fb:d4:1a:49:74:b8:d0:c0:35:80:df:6a:06:e6:d3:b8:
28:e5:8a:a4:3d:71:bd:5f:a4:83:8b:aa:67:b9:83:fd:bc:59:
85:96:54:90:99:24:6e:68:63:b1:fc:f9:d8:2f:5f:de:54:63:
9b:b2:4c:e3:32:0a:67:0c:5a:60:30:97:d2:a3:95:c8:51:1e:
5a:47:a3:68:65:00:bd:a1:43:1a:84:e9:37:ad:0b:38:9c:70:
6c:25:92:15:6e:b8:db:10:29:aa:17:d0:0b:37:53:c5:61:31:
d6:ca:a5:4a:22:5c:cf:a5:b5:47:73:7a:8f:c0:8b:9e:c3:48:
5d:00:da:20:b7:b1:94:0b:bf:49:e4:9f:45:58:b5:81:46:2a:
d8:08:de:20:05:7d:19:9d:88:ff:bf:04:1f:9c:91:b6:ac:56:
e0:f3:cb:30:97:68:a9:e7:59:fa:87:d0:93:0a:db:fa:47:ad:
f0:3d:e1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:03:37 2024 by rpki-client on console-ams.rpki-client.org