Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yZLRsz_HGcJeL02CKk3061ejuLk.roa
File: yZLRsz_HGcJeL02CKk3061ejuLk.roa (raw, json)
Hash identifier: lIQNzfPYBYaKA/5eP0WhWYmT9uKlNyDLJzrFJZfsiFo=
Subject key identifier: C9:92:D1:B3:3F:C7:19:C2:5E:2F:4D:82:2A:4D:F4:EB:57:A3:B8:B9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192AEA451BA12707D65AB75D51FFC653EEA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yZLRsz_HGcJeL02CKk3061ejuLk.roa
Signing time: Mon 21 Oct 2024 10:34:17 +0000
ROA not before: Mon 21 Oct 2024 10:34:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214255
IP address blocks: 45.149.240.0/24 maxlen: 24
87.121.46.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:a4:51:ba:12:70:7d:65:ab:75:d5:1f:fc:65:3e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 21 10:34:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c992d1b33fc719c25e2f4d822a4df4eb57a3b8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ac:d6:d7:23:4f:3c:42:18:0a:29:7d:e2:62:
03:01:07:5d:22:46:53:7a:37:a6:24:8a:3c:b0:44:
0d:b7:22:68:2a:b9:1f:0f:54:df:85:57:b6:6b:e3:
8a:3c:46:13:45:69:e7:e8:cd:9b:f9:cc:78:d5:46:
02:79:11:89:71:81:86:5d:33:57:35:e2:09:fb:90:
07:32:7a:8e:d5:6b:84:15:84:4c:37:c4:e8:da:e9:
cd:20:26:5c:bf:98:3b:6a:a1:37:63:0a:ad:ed:5f:
ef:3a:6d:9e:81:83:2f:9e:8e:8f:e3:4e:a9:e3:f6:
cd:7e:8e:ba:54:d6:f9:a2:e4:7c:7e:4f:05:7d:1a:
65:e2:94:79:9e:30:c5:ac:d8:b2:3e:a4:9d:12:4b:
b6:6a:ad:54:27:b4:fd:a0:ae:99:a6:6b:38:cc:f9:
ac:3a:54:09:81:9b:be:16:9f:c8:10:05:08:10:d9:
8e:8b:39:c9:f3:4c:c5:7a:5f:9b:e4:80:e2:ac:f6:
aa:5b:94:d4:44:c7:52:29:df:fe:a2:65:21:d2:c7:
69:28:0f:f6:95:d1:2b:57:86:3d:ba:e4:2f:a8:f6:
c4:75:64:81:33:de:1f:50:d3:c2:aa:37:7d:70:8c:
bf:f8:d9:37:3a:a0:ff:71:f3:76:0e:b2:cd:aa:d8:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:92:D1:B3:3F:C7:19:C2:5E:2F:4D:82:2A:4D:F4:EB:57:A3:B8:B9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yZLRsz_HGcJeL02CKk3061ejuLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.240.0/24
87.121.46.0/24
93.123.116.0/24
95.214.25.0-95.214.26.255
185.218.136.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a2:09:f3:40:32:dd:88:89:45:08:78:bd:33:1e:78:a1:93:
37:7c:b8:ba:5c:01:0d:61:b4:f9:23:9b:30:37:47:dc:e8:37:
ab:c1:ae:0b:da:c4:d8:3d:e2:d4:c8:5b:09:dc:16:ec:66:33:
ec:8e:38:3a:2d:50:3e:72:dd:e3:6d:19:42:7c:89:3f:23:e7:
b8:61:22:2b:87:7f:8b:fa:87:6d:6c:8a:31:e2:91:d1:3b:82:
0c:0d:49:e8:eb:90:dd:46:89:32:c7:f3:d7:50:98:b8:27:b2:
2d:f7:8f:9a:11:4c:95:e7:b7:e1:51:ee:28:9e:7b:7e:72:ca:
45:98:ca:f5:02:7d:f8:81:4f:37:2e:c2:2e:8e:4d:6c:a0:76:
95:0e:5f:61:e1:63:8b:0e:73:ce:de:04:30:fe:d7:43:e2:1c:
aa:bf:03:70:0b:30:21:bb:13:f6:8f:54:a3:3a:c7:cd:f6:b4:
93:f4:6b:ac:ba:af:d7:ae:d8:ac:74:12:15:76:eb:c7:2f:01:
b8:cd:b9:90:12:0a:fb:b3:f3:8e:a7:f3:d1:e4:b1:7a:0d:2c:
d6:d5:7e:5d:9f:fe:5a:40:70:8d:cb:f0:19:ad:ac:e6:47:a8:
fd:b2:88:db:fd:69:74:67:f6:15:82:b4:eb:71:96:5a:8e:31:
39:65:30:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:15:20 2024 by rpki-client on console-ams.rpki-client.org