Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/3r58Bcwhnm_XGn7iJfRQY6SZjqk.roa
File: 3r58Bcwhnm_XGn7iJfRQY6SZjqk.roa (raw, json)
Hash identifier: 6AbS/QT2PsriRSmjwLW0/L0BCEDR56uSj1fTMYuAOy0=
Subject key identifier: DE:BE:7C:05:CC:21:9E:6F:D7:1A:7E:E2:25:F4:50:63:A4:99:8E:A9
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DEBD9CDD31CD02763FD414502BE2E45FE
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/3r58Bcwhnm_XGn7iJfRQY6SZjqk.roa
Signing time: Tue 27 Feb 2024 18:35:36 +0000
ROA not before: Tue 27 Feb 2024 18:35:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35751
IP address blocks: 45.11.124.0/22 maxlen: 22
45.81.76.0/22 maxlen: 22
45.129.204.0/22 maxlen: 22
45.132.20.0/22 maxlen: 22
45.133.224.0/22 maxlen: 22
45.134.52.0/22 maxlen: 22
45.135.28.0/22 maxlen: 22
45.139.108.0/22 maxlen: 22
45.139.168.0/22 maxlen: 22
45.143.244.0/22 maxlen: 22
45.144.168.0/22 maxlen: 22
192.109.91.0/24 maxlen: 24
192.109.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:d9:cd:d3:1c:d0:27:63:fd:41:45:02:be:2e:45:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 27 18:35:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=debe7c05cc219e6fd71a7ee225f45063a4998ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d9:ae:b6:48:3c:12:08:0e:2b:8c:53:71:73:
84:19:71:eb:d2:bb:a3:73:f5:cb:64:50:e4:71:21:
af:cb:7c:e4:4f:fd:bb:04:ba:2f:31:fc:2f:f2:11:
14:92:d6:4f:6d:eb:dc:f5:0b:80:95:89:f6:01:e5:
d8:69:5c:35:f3:a1:41:59:ba:2a:14:fc:02:cc:4f:
70:19:db:76:c8:58:04:c0:2b:c6:b2:44:31:65:15:
cd:bf:22:f0:46:a4:0e:dd:21:eb:9b:b3:96:75:bf:
12:c9:36:61:e2:9f:e5:8b:5f:68:25:c0:63:73:40:
02:3b:bc:03:e7:72:ff:28:f6:35:e7:a4:16:37:c5:
f1:21:58:b5:6a:7c:8c:55:39:28:68:a1:01:33:40:
60:83:98:3b:1e:a7:d3:26:ec:b6:ad:4f:d3:f6:38:
ae:23:d7:b0:af:0a:f5:95:b0:0d:06:05:b2:5d:c8:
af:38:6f:94:47:32:9b:3a:f1:8a:10:6d:e2:d1:a1:
90:5e:87:ad:1f:31:64:50:20:e9:18:c7:93:5c:99:
bc:5e:79:ae:6d:80:5f:ac:6e:70:e0:e3:63:35:95:
48:ac:60:31:46:9e:e6:b7:f6:fb:79:30:aa:0c:97:
11:00:8b:45:36:c4:a6:f2:85:81:84:93:ba:28:3d:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BE:7C:05:CC:21:9E:6F:D7:1A:7E:E2:25:F4:50:63:A4:99:8E:A9
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/3r58Bcwhnm_XGn7iJfRQY6SZjqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.124.0/22
45.81.76.0/22
45.129.204.0/22
45.132.20.0/22
45.133.224.0/22
45.134.52.0/22
45.135.28.0/22
45.139.108.0/22
45.139.168.0/22
45.143.244.0/22
45.144.168.0/22
192.109.91.0/24
192.109.100.0/24
Signature Algorithm: sha256WithRSAEncryption
05:31:28:5f:30:33:17:5d:d3:21:40:e2:16:2b:9d:b8:61:1b:
86:b1:25:3f:a8:76:46:15:d6:78:e2:d4:4b:93:db:a7:b7:b6:
5b:ee:a8:e0:18:0f:d6:63:d0:9e:fc:e3:2c:00:ba:67:f4:07:
6c:c3:1c:0f:dc:0d:c9:6c:d6:4d:24:83:d4:85:69:77:27:b9:
8b:ce:14:c4:89:89:b5:7f:b1:a3:c6:13:87:aa:81:7a:53:1c:
b4:e4:d8:9a:d9:53:cd:dd:ab:24:e8:32:5b:ee:43:9a:23:5d:
8d:21:c8:f1:5f:8d:b5:53:58:8c:32:22:8a:f4:93:ec:74:51:
76:f3:1f:43:b4:84:88:9d:3b:d2:43:ca:3d:ed:53:34:3f:91:
e7:68:27:11:12:16:67:24:4d:4d:70:10:e3:eb:45:4c:1b:9d:
85:21:57:4d:c9:2f:7e:30:97:cd:f5:0f:2c:69:20:98:96:c6:
d5:aa:7c:84:83:39:62:4e:bb:9b:1b:87:df:ab:f3:e3:1b:93:
2a:35:43:25:7d:ee:44:2a:c4:c5:7e:2b:1e:61:f2:f5:2a:46:
ab:04:c7:a8:e7:ff:d5:8e:32:21:b3:c2:3c:81:db:0e:b0:91:
6d:c2:0f:fd:cd:da:fe:45:b8:7f:06:f2:3b:75:52:28:93:44:
94:8f:e3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:12 2024 by rpki-client on console-fra.rpki-client.org