Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Cerqt-GI8BPOLxe6IlrkYrpPUuI.roa
File: Cerqt-GI8BPOLxe6IlrkYrpPUuI.roa (raw, json)
Hash identifier: jf36O+Ty6O5VrejcdI7xN+l8Gm7xKuq7Nqz+54GU/5Y=
Subject key identifier: 09:EA:EA:B7:E1:88:F0:13:CE:2F:17:BA:22:5A:E4:62:BA:4F:52:E2
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019040BA6116DDDB7DECADC71BE8B1227360
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Cerqt-GI8BPOLxe6IlrkYrpPUuI.roa
Signing time: Sat 22 Jun 2024 16:14:34 +0000
ROA not before: Sat 22 Jun 2024 16:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208621
IP address blocks: 45.157.34.0/24 maxlen: 24
80.64.216.0/23 maxlen: 24
80.64.218.0/23 maxlen: 24
185.232.86.0/23 maxlen: 24
194.146.44.0/24 maxlen: 24
194.146.49.0/24 maxlen: 24
194.156.177.0/24 maxlen: 24
195.22.156.0/24 maxlen: 24
195.22.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:ba:61:16:dd:db:7d:ec:ad:c7:1b:e8:b1:22:73:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jun 22 16:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09eaeab7e188f013ce2f17ba225ae462ba4f52e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:69:5f:ee:50:42:49:ef:df:ac:80:f3:38:a3:
1c:aa:fc:31:af:eb:54:a9:a3:dd:fb:61:34:48:9b:
8b:13:13:c7:1d:1d:32:a5:03:0c:43:c6:5c:03:8c:
b7:68:ed:d7:60:54:48:67:0b:5d:1f:94:5a:73:37:
6e:c6:7f:08:59:b8:47:42:81:1f:89:c9:1f:b9:1b:
90:cf:7e:c8:b2:b7:26:72:2e:b7:37:61:96:53:29:
f0:30:c4:06:77:f7:0b:1f:d9:58:da:87:17:ab:95:
2d:a5:dd:f6:29:bb:de:29:6f:d6:a1:1e:cc:55:8e:
6c:7f:75:0c:e2:19:2d:bc:b2:60:9f:88:00:cb:74:
c1:8d:a6:c7:49:45:4a:2c:0d:ca:c8:e9:44:f9:7d:
7a:5f:b2:00:64:b9:b2:3b:9f:d4:af:86:fa:98:86:
6d:40:cd:2d:4c:45:17:f1:f0:92:22:db:c5:2b:f9:
60:d3:13:f2:dd:ca:ba:c5:b2:16:3f:05:7e:59:6c:
0e:94:56:61:a2:9a:74:74:ae:31:09:07:9a:08:5d:
32:44:6c:ff:08:21:7e:bc:32:e8:ee:e8:7d:f0:56:
10:2a:a1:e0:15:4d:a1:a5:d8:1a:c1:1d:fb:40:42:
16:2b:0b:33:14:ef:0c:00:e5:2d:a5:87:e5:3b:95:
0e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EA:EA:B7:E1:88:F0:13:CE:2F:17:BA:22:5A:E4:62:BA:4F:52:E2
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Cerqt-GI8BPOLxe6IlrkYrpPUuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.34.0/24
80.64.216.0/22
185.232.86.0/23
194.146.44.0/24
194.146.49.0/24
194.156.177.0/24
195.22.156.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:68:7d:4b:68:2a:51:66:6a:57:f1:08:b3:06:63:a1:1d:ee:
85:63:13:b4:eb:8c:d8:b4:f4:20:62:4b:2c:1d:3e:68:64:29:
ad:4e:0d:03:90:e2:55:fd:aa:f9:e5:3e:4e:6e:d6:45:3d:fb:
49:2e:a3:d8:03:89:3b:ce:b1:cb:5c:5a:56:12:21:22:19:e4:
9d:5c:0d:a1:92:12:d3:db:53:7b:61:96:02:ba:70:ce:f3:b5:
c4:ba:df:20:3b:83:b7:37:85:f7:3a:74:85:89:2c:21:54:28:
61:45:4f:b5:9a:06:25:e3:dd:fe:48:be:ce:1a:c7:8b:b0:6f:
e1:fa:0a:78:42:c5:eb:ea:16:d3:2e:97:08:4a:b6:83:eb:b3:
94:ba:f0:18:7e:24:ad:de:0a:80:36:bf:b3:5f:0d:18:d2:79:
e8:3e:9a:fa:90:40:9c:30:83:f6:fd:80:15:45:c6:27:08:2c:
61:27:66:27:b4:8c:73:57:78:b4:07:4f:24:00:82:12:0d:0d:
72:cc:d3:7e:28:8a:a9:b5:e4:e3:ae:d8:ec:46:92:23:3a:15:
c2:c1:1c:a3:3b:ad:38:de:b0:50:a5:4f:57:18:76:02:c6:97:
50:7e:5d:ad:da:ab:5c:95:85:46:3a:e6:9f:1a:36:64:07:23:
29:5c:ac:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:23:07 2024 by rpki-client on console-fra.rpki-client.org