Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/S2KD3PWBQJFK1KPYVNfaUGWR9lw.roa
File: S2KD3PWBQJFK1KPYVNfaUGWR9lw.roa (raw, json)
Hash identifier: oDwUQMevaNxq8WAkY+pNNluhWcLITuullh2otj/0Jwg=
Subject key identifier: 4B:62:83:DC:F5:81:40:91:4A:D4:A3:D8:54:D7:DA:50:65:91:F6:5C
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018ED305F626C243C5E0E5619835E034BDF5
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/S2KD3PWBQJFK1KPYVNfaUGWR9lw.roa
Signing time: Fri 12 Apr 2024 15:56:07 +0000
ROA not before: Fri 12 Apr 2024 15:56:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 147.45.49.0/24 maxlen: 24
147.45.50.0/24 maxlen: 24
147.45.51.0/24 maxlen: 24
147.45.84.0/24 maxlen: 24
147.45.85.0/24 maxlen: 24
147.45.86.0/24 maxlen: 24
147.45.87.0/24 maxlen: 24
147.45.116.0/24 maxlen: 24
147.45.126.0/24 maxlen: 24
147.45.177.0/24 maxlen: 24
147.45.178.0/24 maxlen: 24
147.45.179.0/24 maxlen: 24
147.45.200.0/23 maxlen: 23
147.45.202.0/23 maxlen: 23
147.45.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d3:05:f6:26:c2:43:c5:e0:e5:61:98:35:e0:34:bd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 12 15:56:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b6283dcf58140914ad4a3d854d7da506591f65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:7d:dd:66:7f:81:76:70:e3:64:6a:3d:9e:
18:b8:6b:c2:79:56:2a:e7:71:4b:a3:7b:3c:3c:ec:
11:98:05:05:03:72:eb:f3:71:a5:05:3e:8e:9c:b5:
39:0b:96:d9:5f:75:6d:f5:ac:a5:63:05:32:f1:da:
60:1d:69:62:15:d4:59:63:c5:c8:2f:2f:8f:e3:d0:
d2:4a:a8:a3:30:ed:2c:9b:34:24:a5:91:5b:34:6e:
f3:3f:4d:93:d5:a1:d4:e7:d2:27:41:ab:07:6c:3d:
df:5c:1b:02:4b:2c:69:7d:2b:05:d1:a6:7d:53:1c:
72:1a:6e:f1:db:8f:f5:b8:8f:c1:9f:59:68:2f:98:
2e:0d:d1:e4:71:cd:49:a2:47:be:34:5f:3d:15:d9:
55:e1:af:6b:87:e8:c5:60:ae:f3:da:89:6f:73:93:
75:44:1a:40:4f:a4:b0:8a:9a:35:9b:e3:1b:a7:82:
53:6f:bf:96:5e:22:4f:97:f9:92:c2:41:78:23:4c:
b0:93:84:f2:81:c1:52:63:51:4e:ce:86:05:44:c3:
e7:31:67:b3:e0:11:76:2d:85:75:04:7d:d2:09:18:
27:48:5b:14:b1:93:7e:75:1c:3a:02:ae:71:62:31:
95:18:ff:01:fa:1b:07:2e:84:87:10:f9:90:50:a0:
a8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:62:83:DC:F5:81:40:91:4A:D4:A3:D8:54:D7:DA:50:65:91:F6:5C
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/S2KD3PWBQJFK1KPYVNfaUGWR9lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.49.0-147.45.51.255
147.45.84.0/22
147.45.116.0/24
147.45.126.0/24
147.45.177.0-147.45.179.255
147.45.200.0-147.45.204.255
Signature Algorithm: sha256WithRSAEncryption
7b:11:a1:f9:dd:cf:2a:06:3e:e8:d4:55:c0:5e:82:60:48:df:
fd:d3:e1:8b:de:c0:a7:55:a0:9f:ae:b7:4a:23:24:87:ec:50:
75:43:2d:12:64:cf:82:14:c6:0c:a6:05:10:33:7e:0e:dd:0b:
2b:c5:2e:b5:b3:c3:23:eb:90:d6:69:2b:e6:4a:8f:1f:98:7c:
8d:87:d8:85:8b:ce:b2:6d:08:23:0f:44:76:fc:76:58:0e:83:
36:25:1d:3a:5a:c2:2d:56:4d:52:4c:fa:4b:02:8f:d6:ea:b4:
c6:5b:7c:f6:cd:8f:16:72:bd:2b:8c:84:bc:42:6b:31:50:4e:
05:82:55:aa:f3:9c:d2:16:31:54:80:c8:81:47:1d:f6:23:91:
22:83:8d:0e:ea:39:6b:b6:79:44:e0:cf:d7:46:3c:fa:15:3c:
fb:a5:0a:2f:f8:03:93:ff:1e:3e:d2:56:8d:14:d8:08:fd:e0:
c8:f9:ff:d7:9e:34:c7:d3:45:f9:ee:7d:00:31:7a:77:d4:b6:
33:f1:ca:c6:dd:ee:29:75:83:76:fb:cb:54:44:64:75:e9:f4:
3c:35:99:fb:1f:c1:b7:d1:5a:ca:93:be:20:a5:b4:51:c6:a8:
e2:a1:1b:69:f8:d0:28:72:db:cd:e9:d6:af:8a:19:c9:cd:ae:
28:8d:d8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:45:15 2024 by rpki-client on console-fra.rpki-client.org