Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/yYp9UvHHklzwaaHLwKac1miSq-U.roa
File: yYp9UvHHklzwaaHLwKac1miSq-U.roa (raw, json)
Hash identifier: uR/Wa4QAXDeb/aYJv3wsW17x9z11u8buFYnm3R01wTI=
Subject key identifier: C9:8A:7D:52:F1:C7:92:5C:F0:69:A1:CB:C0:A6:9C:D6:68:92:AB:E5
Certificate issuer: /CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Certificate serial: 018CC801A14580472D03DC83FCD13B99B431
Authority key identifier: 48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/yYp9UvHHklzwaaHLwKac1miSq-U.roa
Signing time: Tue 02 Jan 2024 02:29:59 +0000
ROA not before: Tue 02 Jan 2024 02:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43395
IP address blocks: 185.140.232.0/24 maxlen: 24
185.140.234.0/24 maxlen: 24
185.140.235.0/24 maxlen: 24
45.9.144.0/24 maxlen: 24
45.9.145.0/24 maxlen: 24
45.9.146.0/24 maxlen: 24
45.9.147.0/24 maxlen: 24
95.130.225.0/24 maxlen: 24
45.86.6.0/24 maxlen: 24
45.86.7.0/24 maxlen: 24
45.148.251.0/24 maxlen: 24
45.148.248.0/24 maxlen: 24
45.148.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:a1:45:80:47:2d:03:dc:83:fc:d1:3b:99:b4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Validity
Not Before: Jan 2 02:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c98a7d52f1c7925cf069a1cbc0a69cd66892abe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:03:f3:b0:52:9a:de:a4:b7:9a:69:c1:cb:64:
b1:2a:ea:9c:1b:72:37:40:76:63:1f:38:f2:d2:67:
38:17:f3:37:06:63:cc:cf:8e:90:1f:65:82:5f:80:
42:0b:57:b3:91:14:d1:b2:00:44:82:ac:5c:33:44:
b7:1c:28:22:7d:3b:89:b5:da:a3:b4:50:53:f1:9c:
95:d9:69:c0:9e:67:a5:a6:90:94:a9:57:f8:70:56:
3f:b5:c4:67:89:56:4d:dc:e1:51:6d:27:d8:df:51:
50:8d:97:30:12:24:7d:6a:a9:08:ee:61:47:26:8d:
d7:19:22:32:e8:a5:3e:c1:62:a2:b1:03:d5:f6:aa:
db:e2:2a:e4:d8:4d:17:28:7e:87:5f:8b:7f:ce:2d:
a8:7f:0c:5b:3a:7b:88:ee:f7:ac:2e:58:b5:f8:66:
7d:d6:99:26:e2:2a:fc:58:df:9f:ed:e0:1d:8e:d1:
13:81:16:40:6a:6a:e6:94:91:06:c5:1d:05:aa:61:
7a:d2:16:fe:a5:92:e6:99:53:2a:10:e8:21:32:b9:
29:f0:76:59:69:67:3f:39:12:6d:40:14:a6:f1:b6:
54:49:72:0b:51:dc:7e:dd:e8:2e:0a:d4:83:0a:91:
c2:bb:75:63:da:48:43:31:9e:f6:40:b1:65:2d:42:
72:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8A:7D:52:F1:C7:92:5C:F0:69:A1:CB:C0:A6:9C:D6:68:92:AB:E5
X509v3 Authority Key Identifier:
keyid:48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/yYp9UvHHklzwaaHLwKac1miSq-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.144.0/22
45.86.6.0/23
45.148.248.0/24
45.148.250.0/23
95.130.225.0/24
185.140.232.0/24
185.140.234.0/23
Signature Algorithm: sha256WithRSAEncryption
14:e7:4f:af:98:98:4c:e2:a0:60:42:76:01:cf:92:0a:93:09:
e4:3a:3c:e8:e1:94:78:62:f7:cf:a1:cb:27:36:f6:b6:24:07:
75:60:cb:0a:6d:f5:f4:8a:03:e8:7a:85:00:10:ce:b8:e2:d5:
fa:b8:38:d2:92:27:28:eb:91:ce:46:08:9b:b1:b6:c4:3e:c6:
1f:ca:7c:66:fa:fb:fe:c5:c2:a5:8e:44:f1:17:cd:76:e3:14:
26:6f:c3:88:2a:ea:0b:f5:e5:3d:f5:ac:98:86:66:6d:be:d5:
d1:b6:9a:d2:66:eb:57:4e:1d:43:54:12:63:60:19:99:8d:aa:
d3:14:be:e3:9d:9b:47:71:7b:56:b7:a6:63:98:3d:fd:6f:67:
7e:76:06:55:8e:e7:46:f1:11:58:db:65:e4:4d:e1:5e:92:a4:
fb:d0:36:74:38:47:a3:27:b6:7f:09:1a:87:db:3f:cc:d5:be:
22:e7:d7:a4:dd:27:1f:5e:12:89:9a:e5:87:24:92:a9:7e:c2:
fb:6e:81:55:2b:f0:60:1e:b9:f1:97:46:e2:13:3e:33:05:14:
7c:91:f5:a2:6c:1d:a2:20:bc:d1:50:e0:4b:59:a0:bf:42:91:
bb:dc:f0:14:c1:ae:25:67:8e:f6:0d:dc:e8:e0:3d:9e:bb:bf:
14:ce:4a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 20:45:16 2024 by rpki-client on console-ams.rpki-client.org