Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/sLqNrzIFfqM0BQY_G2_ZW_0a_74.roa
File: sLqNrzIFfqM0BQY_G2_ZW_0a_74.roa (raw, json)
Hash identifier: 7aQ1mpBTXDawUOL1RLjXxav4bwDr0uBYLikDTGK+Gcw=
Subject key identifier: B0:BA:8D:AF:32:05:7E:A3:34:05:06:3F:1B:6F:D9:5B:FD:1A:FF:BE
Certificate issuer: /CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Certificate serial: 018E56428A1DE11241495BA65C9092FF9482
Authority key identifier: E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/sLqNrzIFfqM0BQY_G2_ZW_0a_74.roa
Signing time: Tue 19 Mar 2024 10:29:45 +0000
ROA not before: Tue 19 Mar 2024 10:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57965
IP address blocks: 45.146.194.0/23 maxlen: 24
2a13:47c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:56:42:8a:1d:e1:12:41:49:5b:a6:5c:90:92:ff:94:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Validity
Not Before: Mar 19 10:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0ba8daf32057ea33405063f1b6fd95bfd1affbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:ac:e3:2b:95:1f:d6:a8:37:dd:05:4d:4a:
2a:49:2f:1b:59:82:8c:41:87:30:a4:ff:88:e3:4d:
5c:77:0a:af:bd:04:bf:fe:2a:f4:13:23:18:97:67:
cc:02:73:1a:35:2f:d2:31:f0:29:cf:05:32:5b:32:
c3:3d:65:3d:20:a7:97:bb:71:f8:e6:c2:97:5f:4a:
af:69:2c:8e:28:2a:67:2b:84:0e:23:58:dd:c8:ce:
09:8b:de:24:e4:4f:13:d5:85:84:7c:cc:f8:33:f7:
2c:fa:3a:ce:4d:45:9a:b2:02:29:0b:ab:f4:2b:e3:
5f:17:8b:84:8d:6a:ac:99:eb:3b:ef:9a:de:2a:62:
47:b3:23:9e:16:00:ad:71:53:7a:8c:65:61:8b:66:
10:05:c8:b5:57:7a:25:f4:e3:9d:1c:cd:96:2d:80:
69:4c:33:39:a1:60:bc:42:72:7c:c0:6c:5b:2b:5a:
b7:cb:84:3a:45:11:2e:e8:80:41:b3:15:c9:62:db:
ef:f1:08:e9:8b:3d:46:a4:ed:90:76:a2:80:a8:e7:
b6:77:d0:c5:2b:6b:97:cf:0d:da:5b:f4:a9:d9:a5:
99:c3:23:4a:b4:3c:b3:0f:2e:db:22:e9:eb:41:41:
ee:54:77:0f:f9:7d:aa:3f:be:64:58:c0:e4:4e:04:
1b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BA:8D:AF:32:05:7E:A3:34:05:06:3F:1B:6F:D9:5B:FD:1A:FF:BE
X509v3 Authority Key Identifier:
keyid:E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/sLqNrzIFfqM0BQY_G2_ZW_0a_74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.194.0/23
IPv6:
2a13:47c0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:34:0e:45:ed:33:13:8f:d3:ce:c5:2f:ad:b7:7e:4e:58:f3:
cd:6a:9d:09:b5:34:e5:d4:5d:2f:c4:29:d7:85:c2:bf:48:06:
6f:f9:a3:fd:30:4c:0d:b1:3c:1d:60:cd:59:d7:99:3b:03:56:
d1:2c:4e:23:d2:46:b3:2d:61:0c:ea:45:4d:8f:14:00:95:bf:
28:c4:50:b8:36:53:13:fd:e4:b4:50:7b:4c:bf:e5:d0:56:b6:
9a:e3:5c:ea:c1:3a:65:2f:c3:d8:14:d0:9b:26:d9:d0:51:93:
2d:2a:38:f9:3e:19:d7:8d:83:ff:93:37:ba:3d:12:5a:47:38:
74:e3:bc:44:5e:a7:3c:59:b0:0d:45:97:ac:94:69:21:8e:bc:
b3:72:15:a1:49:cd:f4:17:05:d2:c8:09:70:f2:f0:5f:05:69:
cf:a1:68:0a:b5:9e:96:db:ec:a7:6a:3a:2f:e2:db:4a:34:87:
d5:78:d8:de:b5:57:ea:b1:d4:ea:41:85:b8:a9:33:0e:ff:39:
3e:44:57:6f:08:a9:66:b7:ce:18:c7:b6:ee:51:85:bf:9b:7c:
56:89:cb:b3:4a:6a:a7:11:6e:f0:4c:e9:65:ea:35:c1:e3:af:
41:1c:a4:dd:7d:69:ba:22:20:1a:30:6d:20:7a:9f:4f:8e:b6:
d3:c7:90:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:33:19 2024 by rpki-client on console-ams.rpki-client.org