Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/D5RQ4u8CuACW9O9NAM3xIqO_YzU.roa
File: D5RQ4u8CuACW9O9NAM3xIqO_YzU.roa (raw, json)
Hash identifier: OWUE/ksxWF+nqFfoXhORDuwQ/CowcY3mFKZe/uKSYYQ=
Subject key identifier: 0F:94:50:E2:EF:02:B8:00:96:F4:EF:4D:00:CD:F1:22:A3:BF:63:35
Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial: 018E094ACFEC0D661F9EB80D89FB01F42D72
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/D5RQ4u8CuACW9O9NAM3xIqO_YzU.roa
Signing time: Mon 04 Mar 2024 11:48:01 +0000
ROA not before: Mon 04 Mar 2024 11:48:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208594
IP address blocks: 45.94.148.0/22 maxlen: 24
45.94.148.0/24 maxlen: 24
45.94.149.0/24 maxlen: 24
45.94.150.0/24 maxlen: 24
45.94.151.0/24 maxlen: 24
2a0e:2ec0::/29 maxlen: 64
2a0e:2ec0:1::/48 maxlen: 48
2a0e:2ec0:2::/48 maxlen: 48
2a0e:2ec0:3::/48 maxlen: 48
2a0e:2ec0:4::/48 maxlen: 48
2a0e:2ec0:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:09:4a:cf:ec:0d:66:1f:9e:b8:0d:89:fb:01:f4:2d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
Validity
Not Before: Mar 4 11:48:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f9450e2ef02b80096f4ef4d00cdf122a3bf6335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:da:4e:0d:cb:e3:76:cc:0e:b7:05:e6:5c:
af:4a:0a:3d:fc:2a:e3:78:27:8e:8a:39:57:bc:18:
eb:ca:0e:d5:90:43:f8:85:e0:e7:29:db:19:35:ce:
56:a8:fe:69:e5:4d:63:87:de:6a:de:ed:06:c1:f6:
22:d1:99:31:b3:5d:1a:a0:83:be:0a:47:2e:4d:93:
11:c5:9d:47:fb:7f:1a:d8:58:9c:be:d3:69:5b:4f:
41:de:e2:29:ce:05:f5:99:56:4d:ca:b1:a5:77:72:
df:d4:8c:95:55:27:c4:39:ca:5a:c2:8f:6c:81:7e:
f4:0b:2a:9c:61:b0:b5:25:47:db:39:7e:e2:e6:6b:
1d:da:88:d5:e1:97:8c:72:d5:a4:1f:48:80:3c:c9:
c2:63:e8:be:6b:92:72:9b:77:fe:c9:37:d4:b9:53:
3a:13:35:ab:46:63:9d:35:e8:c2:c7:e8:cf:70:73:
8d:76:67:91:13:72:5f:f7:2d:7e:b9:11:73:90:82:
72:aa:a6:08:c5:0b:50:ae:9e:b9:3d:d6:3f:08:82:
9b:ff:0a:0c:de:0a:7f:1f:6c:4f:83:5c:90:4c:2a:
d3:d7:16:84:7f:a2:4b:76:7f:89:db:01:c3:f4:cd:
ea:8d:b7:2b:e9:1c:b6:88:38:7b:af:fe:98:85:39:
ca:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:94:50:E2:EF:02:B8:00:96:F4:EF:4D:00:CD:F1:22:A3:BF:63:35
X509v3 Authority Key Identifier:
keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/D5RQ4u8CuACW9O9NAM3xIqO_YzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.148.0/22
IPv6:
2a0e:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
11:8b:cb:c8:f5:bc:13:9b:30:94:5c:25:21:d5:28:2a:3d:48:
89:76:dd:d7:06:58:1b:3e:93:cb:59:a0:69:2b:48:8b:e9:b3:
a4:8a:ad:0f:c9:28:69:a8:72:55:1d:02:7a:f2:39:1f:14:ae:
28:43:ff:19:ef:f4:08:08:20:cf:f9:23:69:27:6a:f0:42:b3:
30:1a:ab:93:19:4d:e6:4a:dc:38:ce:b8:0a:2c:6a:7a:25:1a:
fd:6d:bd:ed:48:d8:73:4c:3b:cc:ce:08:12:ec:1a:7f:75:d2:
0d:3d:de:8e:83:ad:2a:cc:6e:d6:81:a0:c3:45:97:97:ab:77:
ba:e6:59:54:6f:95:37:e6:ef:a1:d8:68:c4:c6:66:b5:20:e7:
10:46:b7:64:61:20:40:34:58:97:1b:3e:6d:e3:e7:50:4c:db:
c6:70:47:cd:b8:95:80:c3:e1:a4:3c:9b:f9:bc:cd:c7:77:81:
88:87:d5:e0:db:bb:fa:9a:07:9f:37:fa:e2:d8:50:fc:27:e5:
bf:30:20:a3:15:3c:0f:20:36:02:37:db:2e:16:9b:18:f1:5c:
4a:b6:46:a5:f0:03:0e:a8:df:b2:03:71:ef:b5:d2:26:dd:b8:
9b:96:fb:ba:47:f2:21:04:6e:46:8c:a5:ef:ae:f1:9d:6c:40:
c7:1d:42:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:31:28 2024 by rpki-client on console-fra.rpki-client.org