Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/kV5ZdBp-fYx7xzX9cP1ykmbbz7o.roa
File: kV5ZdBp-fYx7xzX9cP1ykmbbz7o.roa (raw, json)
Hash identifier: 9Z3cv8EBvr8mVbkOsFP1Sj7g9wXF3kDxzBnC6dNiHxo=
Subject key identifier: 91:5E:59:74:1A:7E:7D:8C:7B:C7:35:FD:70:FD:72:92:66:DB:CF:BA
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 018F7E1C28A54B314018F1BE18E6C2211754
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/kV5ZdBp-fYx7xzX9cP1ykmbbz7o.roa
Signing time: Wed 15 May 2024 21:15:25 +0000
ROA not before: Wed 15 May 2024 21:15:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41155
IP address blocks: 45.91.151.0/24 maxlen: 24
45.156.72.0/24 maxlen: 24
45.156.73.0/24 maxlen: 24
45.156.74.0/24 maxlen: 24
45.156.75.0/24 maxlen: 24
45.158.136.0/24 maxlen: 24
45.158.137.0/24 maxlen: 24
45.158.138.0/24 maxlen: 24
45.158.139.0/24 maxlen: 24
77.75.231.0/24 maxlen: 24
109.107.134.0/24 maxlen: 24
185.34.103.0/24 maxlen: 24
185.89.23.0/24 maxlen: 24
185.222.215.0/24 maxlen: 24
188.244.116.0/24 maxlen: 24
194.0.193.0/24 maxlen: 24
194.0.221.0/24 maxlen: 24
194.0.223.0/24 maxlen: 24
194.1.200.0/24 maxlen: 24
2a0d:8e80:2659::/48 maxlen: 48
2a0d:8e80:8080::/48 maxlen: 48
2a0d:8e80:8a80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7e:1c:28:a5:4b:31:40:18:f1:be:18:e6:c2:21:17:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: May 15 21:15:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=915e59741a7e7d8c7bc735fd70fd729266dbcfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:ee:01:53:2f:3a:37:2a:cb:d8:a0:d9:56:
3b:bb:0e:10:17:5f:5e:9e:5a:a2:dd:71:94:7d:80:
22:cf:5a:bd:2d:43:ec:eb:74:70:c7:05:bc:1b:a0:
1f:e9:99:d1:0c:d0:25:44:c8:57:4c:51:bb:fc:8f:
c2:a4:b4:f3:a7:c6:ba:b3:00:b7:28:c7:21:c0:3a:
26:6d:ce:fe:cb:83:7a:0d:64:fb:ff:34:27:ee:92:
2d:28:50:c9:18:a5:d2:e2:40:91:3e:d4:9d:6f:17:
a2:ea:b4:92:78:0e:18:24:61:65:59:ac:bb:93:34:
7e:1c:da:bc:39:22:25:c4:70:a5:87:1e:80:84:46:
3d:94:95:43:4e:70:a9:25:70:7f:e1:7a:52:d6:d0:
00:7e:d7:35:9b:37:ce:c2:7b:f9:3d:ca:14:9e:23:
94:32:8f:a4:9f:db:fd:ac:ba:c8:75:fb:ee:d5:4c:
8e:8a:0c:a6:d8:6d:2e:5a:42:8e:03:1e:16:7e:c4:
b0:b7:9c:91:88:f8:56:f1:51:a0:ae:96:00:6a:ee:
6b:ce:4d:32:7f:5e:57:8d:53:cc:32:5f:1a:cc:f7:
b1:a3:da:4a:38:cb:54:f8:69:d1:29:26:1d:fe:61:
e5:9e:c0:c5:ae:e3:3d:91:45:8d:66:02:fd:0e:97:
39:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5E:59:74:1A:7E:7D:8C:7B:C7:35:FD:70:FD:72:92:66:DB:CF:BA
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/kV5ZdBp-fYx7xzX9cP1ykmbbz7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.151.0/24
45.156.72.0/22
45.158.136.0/22
77.75.231.0/24
109.107.134.0/24
185.34.103.0/24
185.89.23.0/24
185.222.215.0/24
188.244.116.0/24
194.0.193.0/24
194.0.221.0/24
194.0.223.0/24
194.1.200.0/24
IPv6:
2a0d:8e80:2659::/48
2a0d:8e80:8080::/48
2a0d:8e80:8a80::/48
Signature Algorithm: sha256WithRSAEncryption
3f:17:56:d1:45:7c:19:ee:25:de:c8:19:0c:4e:7d:ea:e9:f7:
4c:71:21:d4:70:f3:9f:f2:70:f1:0e:0c:5a:00:92:a4:e7:e6:
16:3d:09:0b:11:90:85:18:a8:60:53:7a:1a:eb:e6:45:3b:f0:
6f:21:93:b1:fc:6f:6e:34:67:aa:ad:0d:f2:4b:72:3b:64:72:
ee:95:47:f6:78:6e:7c:9b:70:1b:57:ae:4f:f2:59:fe:45:81:
46:c6:95:5e:e7:9d:dc:f7:86:b1:80:dc:65:19:26:92:eb:e8:
d6:86:d0:a4:1e:63:86:ed:23:77:b3:9d:22:f3:52:1b:31:07:
36:57:df:10:84:71:3f:d9:66:84:57:9a:3c:31:66:9d:21:ec:
3d:ab:cb:65:98:41:36:58:e0:a8:42:07:71:64:2d:35:33:c5:
73:22:dd:7b:ba:22:e3:fb:52:c9:b0:bf:c7:06:16:e8:28:0c:
5c:5e:40:64:f6:d7:af:3d:3a:0d:7c:b0:47:fb:2f:c4:2a:10:
cd:08:41:c8:00:03:5a:5a:8d:07:cf:87:f5:27:5c:49:e7:ba:
45:5d:48:42:3b:6f:f4:82:46:c0:f9:c4:b2:39:19:88:c2:b5:
51:31:07:9a:bd:b0:72:f6:80:aa:75:14:db:f7:87:fb:8b:ce:
7e:bc:37:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:45:11 2024 by rpki-client on console-fra.rpki-client.org