Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/1QWOpYp8ecQbRgjIyI6UvvRSIwQ.roa
File: 1QWOpYp8ecQbRgjIyI6UvvRSIwQ.roa (raw, json)
Hash identifier: bdbBxpMtv81c9xvM2aQq1884HUARSpjQkD1igryGyrA=
Subject key identifier: D5:05:8E:A5:8A:7C:79:C4:1B:46:08:C8:C8:8E:94:BE:F4:52:23:04
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 0191E6DF70D7341343B2FD4B7954D0DCBFB4
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/1QWOpYp8ecQbRgjIyI6UvvRSIwQ.roa
Signing time: Thu 12 Sep 2024 15:34:48 +0000
ROA not before: Thu 12 Sep 2024 15:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215402
IP address blocks: 45.150.66.0/24 maxlen: 24
2a0e:4005:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e6:df:70:d7:34:13:43:b2:fd:4b:79:54:d0:dc:bf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Sep 12 15:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5058ea58a7c79c41b4608c8c88e94bef4522304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5c:be:4e:9c:b3:eb:bd:c9:72:92:74:87:7f:
02:15:c0:03:e4:ea:d5:e5:31:27:11:85:79:80:4c:
7e:94:8d:d6:21:66:44:95:2f:be:80:e2:ab:7f:e2:
fe:59:ea:65:af:a8:65:19:3a:c1:9f:99:06:86:41:
58:b6:be:d3:1a:11:77:15:6e:fc:38:e4:12:13:e4:
73:81:87:96:c2:85:36:19:6c:73:5d:30:a0:26:0e:
31:b2:f0:4a:4b:73:c7:a8:b9:db:7d:78:0a:53:d9:
a2:d8:14:39:ce:08:5e:b7:8f:fa:32:fa:99:ef:c5:
88:b4:a6:a5:8e:f3:93:6f:59:44:88:48:f0:b8:47:
0a:07:b8:ae:38:8d:0f:eb:7d:85:6c:7f:70:a7:02:
88:a9:cc:9a:34:d0:32:97:a4:ff:b6:9d:eb:21:6e:
02:19:d9:55:16:0d:ad:67:9e:f0:38:15:26:76:ee:
1d:28:09:71:68:24:f1:10:72:90:b7:db:bc:a6:8a:
6d:59:11:ac:5a:68:43:0c:73:05:02:b0:19:d1:9a:
c0:fe:e0:4e:12:af:73:ec:6e:0d:ff:b8:bd:c5:5b:
2a:4f:88:b4:ac:58:30:d2:aa:4e:17:89:b2:3a:85:
50:dc:8a:d6:f5:ad:5a:a5:ff:ee:b8:54:78:52:34:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:05:8E:A5:8A:7C:79:C4:1B:46:08:C8:C8:8E:94:BE:F4:52:23:04
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/1QWOpYp8ecQbRgjIyI6UvvRSIwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.66.0/24
IPv6:
2a0e:4005:1000::/48
Signature Algorithm: sha256WithRSAEncryption
46:56:e2:f6:c9:93:b7:79:11:d8:67:4c:03:0f:27:e3:ba:f5:
9b:23:bc:e1:27:94:80:3b:41:1a:8f:93:bc:28:e9:57:5a:a9:
84:3d:2b:90:41:07:e9:a6:be:41:07:51:84:1a:cf:32:87:20:
0a:cd:71:82:0c:22:5f:98:7f:6c:5c:ba:76:41:c6:dd:4b:57:
6c:98:f4:48:47:ba:69:9b:06:00:9f:b2:7e:47:c2:11:e9:93:
2c:a4:4b:2a:f1:6f:37:6f:0d:9b:0a:ff:5d:60:f3:2e:a4:93:
b8:ce:ac:9f:ae:80:36:02:20:a1:85:23:30:cf:29:14:0a:bb:
52:94:bd:8d:33:d3:47:f9:29:84:ef:1f:1e:06:fe:e0:d9:1a:
6e:dc:3a:8c:b8:3e:16:38:b5:96:c1:14:7c:f2:d2:a4:76:87:
ba:6f:c6:9b:18:0c:cc:60:1f:f3:60:82:b3:91:7b:80:e7:d3:
72:2a:18:20:6f:5b:24:fe:b4:2b:de:06:d2:f3:b1:ec:3d:c4:
eb:bd:f2:53:95:4e:66:04:86:45:ba:3d:29:19:7d:d6:dc:a1:
c2:d6:e5:68:a4:37:5e:c7:a1:4d:b7:39:5f:80:3f:6b:a2:c5:
8a:fd:a0:39:6f:45:17:d0:60:c8:18:4c:d5:6c:f4:1e:fa:c3:
8a:d8:50:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:14:36 2024 by rpki-client on console-fra.rpki-client.org