Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/ztVuKc_8su3bfh296gf_J7hzmzE.roa
File: ztVuKc_8su3bfh296gf_J7hzmzE.roa (raw, json)
Hash identifier: RM8qkVF2YamdazQnKIiyPCimsiGN4/bY0eXZgamyKIU=
Subject key identifier: CE:D5:6E:29:CF:FC:B2:ED:DB:7E:1D:BD:EA:07:FF:27:B8:73:9B:31
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0190F04DBCF57ED0FDE1DC1A921F92DF561B
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/ztVuKc_8su3bfh296gf_J7hzmzE.roa
Signing time: Fri 26 Jul 2024 18:29:04 +0000
ROA not before: Fri 26 Jul 2024 18:29:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214466
IP address blocks: 45.139.198.0/24 maxlen: 24
45.139.199.0/24 maxlen: 24
95.214.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f0:4d:bc:f5:7e:d0:fd:e1:dc:1a:92:1f:92:df:56:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jul 26 18:29:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ced56e29cffcb2eddb7e1dbdea07ff27b8739b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:30:01:e5:fa:90:d2:62:0b:0d:1a:28:3c:
7e:3b:78:f3:c6:0d:ea:8e:f1:c9:74:f5:32:7e:d3:
42:10:4f:96:54:59:3c:b5:49:f9:e7:b5:82:2b:15:
f3:57:d7:69:39:07:31:a8:e8:08:31:14:34:ad:0c:
6e:58:8f:f3:84:87:d4:42:fe:ae:e4:d9:7b:9d:54:
ae:20:c3:64:60:97:9e:b4:ac:fa:af:a6:1e:69:18:
63:85:31:9d:50:38:79:07:53:c4:c6:1b:8e:b5:b5:
60:12:fe:b3:64:7f:0f:44:90:cc:ed:1f:2f:0d:6b:
ad:f2:4c:fc:ca:6e:e0:23:6d:2e:cc:60:52:6b:35:
61:23:1d:c1:71:12:c1:b5:ab:2d:d8:c8:c3:4f:3d:
50:a7:dd:e4:40:80:60:c4:4e:2d:79:8f:d5:28:0f:
a2:1a:51:ad:00:c1:5e:70:4f:2a:99:8f:5c:fa:11:
2d:8b:83:f9:a6:ac:fe:8e:71:f4:bc:11:02:01:f6:
18:36:80:84:94:dd:00:95:2e:40:05:2a:03:4b:7e:
92:57:f8:b6:16:c8:a0:5a:70:e2:3d:39:b5:80:c4:
0d:33:eb:dd:84:0b:c2:d1:31:13:ff:65:5c:78:11:
09:b1:1f:cb:29:65:31:8c:fe:a0:02:82:2e:b4:0d:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D5:6E:29:CF:FC:B2:ED:DB:7E:1D:BD:EA:07:FF:27:B8:73:9B:31
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/ztVuKc_8su3bfh296gf_J7hzmzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.198.0/23
95.214.174.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f3:e0:2d:5b:8e:a5:71:da:d6:dc:1e:b6:b4:4a:1f:eb:76:
5e:af:bc:ea:b0:d8:9b:14:74:06:62:de:b4:25:bf:44:25:2f:
ce:21:5f:2b:95:47:6f:59:90:b7:67:5a:c6:24:bb:5b:a7:4b:
1c:29:46:f3:17:b7:fb:43:2e:a9:34:d0:c7:49:ff:c4:49:93:
20:74:52:0c:ff:aa:fd:7d:89:3c:10:c2:35:89:97:d6:20:0f:
91:e4:1d:b1:6a:06:1f:8e:3e:3e:3a:b6:df:ef:e3:97:86:02:
e9:7b:9a:d5:23:74:cf:2f:1e:b8:1f:65:fb:fc:b6:08:42:57:
e2:72:d3:04:93:88:b7:1d:f6:c8:4d:1b:7b:32:12:ba:a8:63:
b0:ec:b4:18:f4:f8:f3:fe:22:3e:06:28:7f:1f:72:a8:3c:c6:
aa:0c:dd:6a:15:19:3c:98:15:8d:29:57:22:75:f7:b1:05:d0:
67:7f:df:58:4e:f7:1f:0e:ed:be:ca:1b:f6:19:2c:71:e4:a1:
95:4b:b2:ed:2f:cc:b9:54:2a:5f:22:90:c4:91:37:64:c6:97:
ec:05:5e:fe:70:c4:c1:4c:6c:0d:f0:93:78:31:5f:c0:49:f8:
64:5a:21:1b:83:d5:1a:1e:6e:4e:eb:d1:13:b7:91:7e:ff:27:
c0:3a:cf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:20:32 2024 by rpki-client on console-ams.rpki-client.org