Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/4CyvX5Wm508_wIOKKa8rmnZjqdo.roa
File: 4CyvX5Wm508_wIOKKa8rmnZjqdo.roa (raw, json)
Hash identifier: fmwZY9ws1zlOlK0MP9MRyBNJJLvJFvOD/4xosYORdLY=
Subject key identifier: E0:2C:AF:5F:95:A6:E7:4F:3F:C0:83:8A:29:AF:2B:9A:76:63:A9:DA
Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Certificate serial: 018DD6649637E6148E7C50C10E95D2378FDA
Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/4CyvX5Wm508_wIOKKa8rmnZjqdo.roa
Signing time: Fri 23 Feb 2024 14:35:32 +0000
ROA not before: Fri 23 Feb 2024 14:35:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48314
IP address blocks: 45.10.24.0/24 maxlen: 24
45.133.9.0/24 maxlen: 24
88.218.227.0/24 maxlen: 24
91.210.224.0/24 maxlen: 24
152.89.239.0/24 maxlen: 24
185.245.96.0/24 maxlen: 24
185.248.140.0/24 maxlen: 24
193.135.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d6:64:96:37:e6:14:8e:7c:50:c1:0e:95:d2:37:8f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Validity
Not Before: Feb 23 14:35:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e02caf5f95a6e74f3fc0838a29af2b9a7663a9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:40:6a:4e:2d:f7:1c:07:12:8e:6a:46:09:
39:a1:8f:2a:e2:49:c1:c8:4c:31:99:80:0a:eb:db:
e2:ea:e4:86:e9:52:1f:18:98:bb:f3:4b:5a:08:4f:
dc:a8:1b:08:08:27:9a:d6:9b:c3:68:79:d1:12:1d:
5e:39:d9:73:c5:e9:9c:e7:a9:dd:1f:1b:29:d2:24:
c5:03:43:91:aa:c5:e0:ac:48:f6:17:91:ab:01:0a:
4d:95:88:81:2b:af:a3:28:70:bc:32:bc:e7:70:44:
5e:07:fb:c3:94:9d:d8:5f:e8:be:dc:93:29:38:63:
07:16:f9:97:d3:c2:48:3b:19:9f:d5:e9:22:d7:60:
96:94:28:65:15:31:c9:65:f6:51:8b:01:30:1e:8c:
b5:43:d6:a0:1f:47:89:05:c6:f4:f8:7f:99:43:ce:
43:df:e1:e1:6c:63:8e:c9:be:9d:a5:29:9d:e5:6e:
03:be:62:31:29:c4:db:90:55:6a:98:e1:a7:63:8b:
30:f8:3b:3b:3f:58:6f:4e:58:e9:1c:5b:4d:ec:0d:
b3:39:53:6a:6a:d9:3a:d2:dd:1c:9f:c5:f9:4f:1d:
c1:23:6a:65:3f:80:d4:9b:1b:f7:f1:3c:a9:19:01:
1b:90:6d:a3:c0:a0:03:9a:40:65:2d:ee:8f:b5:fa:
2d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2C:AF:5F:95:A6:E7:4F:3F:C0:83:8A:29:AF:2B:9A:76:63:A9:DA
X509v3 Authority Key Identifier:
keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/4CyvX5Wm508_wIOKKa8rmnZjqdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.24.0/24
45.133.9.0/24
88.218.227.0/24
91.210.224.0/24
152.89.239.0/24
185.245.96.0/24
185.248.140.0/24
193.135.10.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a4:38:2a:bf:f7:94:24:41:d8:c0:ea:38:50:8a:5d:ba:c4:
fa:36:46:57:f9:04:0f:7a:65:7c:c9:ae:21:5d:b8:f4:47:c4:
53:f2:a1:ed:73:5c:8f:b9:6a:10:c0:77:86:b6:77:62:71:12:
17:d3:15:c9:fb:5d:c6:00:87:8f:82:ee:a9:29:a4:45:58:84:
39:bf:e7:7a:be:40:fd:0d:4f:2e:01:9d:fc:7b:e7:45:0f:a0:
e1:3b:bc:8a:a0:10:f6:43:f1:27:59:c4:39:a8:ca:23:0c:b3:
45:cf:6f:2f:ec:c3:72:0f:fd:4e:44:77:ef:0c:e6:6b:d9:65:
28:0f:37:01:bb:e6:9c:2c:b4:c8:2a:b3:e0:36:c2:67:a6:cd:
dd:ce:c0:36:15:22:93:f9:34:83:5e:0d:8e:67:13:d1:2f:b6:
7c:cc:a2:b6:ca:46:dc:ba:59:b6:8b:e6:ca:31:2c:c6:bb:79:
3e:98:01:0a:df:10:be:1a:a2:60:de:dc:22:8a:89:19:91:ff:
e3:75:0b:35:1e:5e:d7:5e:b5:fa:1b:98:32:5b:34:74:4f:fe:
62:d9:2a:c2:18:38:72:ff:70:69:50:ac:b6:7e:50:97:be:8a:
87:b0:73:ad:4f:88:e1:8b:da:92:04:55:66:da:18:96:09:dd:
ac:4b:3e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 23:12:15 2024 by rpki-client on console-fra.rpki-client.org