Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/PQgKmPJhLyrZhrp07oBKQma_SN4.roa
File: PQgKmPJhLyrZhrp07oBKQma_SN4.roa (raw, json)
Hash identifier: faMBD/eOSZjC6UTzmhk70zjKvDcKgBVUTBS9mZfuNlI=
Subject key identifier: 3D:08:0A:98:F2:61:2F:2A:D9:86:BA:74:EE:80:4A:42:66:BF:48:DE
Certificate issuer: /CN=5be979fb8e477304bb591d6b68eea73da94a815b
Certificate serial: 018CC5DC70744FF73E71F93CE8E1B2342981
Authority key identifier: 5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/PQgKmPJhLyrZhrp07oBKQma_SN4.roa
Signing time: Mon 01 Jan 2024 16:30:07 +0000
ROA not before: Mon 01 Jan 2024 16:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201290
IP address blocks: 46.231.16.0/23 maxlen: 23
46.231.18.0/23 maxlen: 23
46.231.22.0/23 maxlen: 23
46.231.20.0/23 maxlen: 23
192.145.56.0/22 maxlen: 22
46.231.244.0/22 maxlen: 22
45.128.0.0/22 maxlen: 22
185.229.54.0/23 maxlen: 23
185.229.52.0/23 maxlen: 23
185.94.246.0/23 maxlen: 23
185.94.244.0/23 maxlen: 23
185.146.104.0/22 maxlen: 22
45.153.252.0/22 maxlen: 22
185.41.36.0/23 maxlen: 23
185.41.38.0/23 maxlen: 23
194.39.40.0/22 maxlen: 22
185.214.112.0/23 maxlen: 23
185.214.114.0/23 maxlen: 23
212.115.36.0/22 maxlen: 22
2a05:3600::/29 maxlen: 29
2a0d:6e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:70:74:4f:f7:3e:71:f9:3c:e8:e1:b2:34:29:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be979fb8e477304bb591d6b68eea73da94a815b
Validity
Not Before: Jan 1 16:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d080a98f2612f2ad986ba74ee804a4266bf48de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:4f:18:6f:5c:a5:64:d6:9c:6e:ef:aa:8a:
c2:42:7d:e1:72:8d:4f:27:e1:a5:79:91:a9:29:da:
9a:e3:2d:02:52:30:21:f0:fa:42:61:95:00:7e:21:
d9:c7:84:92:1b:09:8e:20:20:f1:07:17:a5:f8:fe:
a6:ba:7f:60:01:4f:9a:58:0a:5e:aa:d2:47:ea:fc:
ee:15:b6:fa:46:1a:9c:8c:0a:b4:d6:ba:b8:8c:db:
a5:74:55:3d:46:c9:b6:13:1e:43:b4:11:9f:c4:f4:
cc:3f:13:78:35:52:80:be:9a:47:cb:75:96:e6:62:
f8:82:30:6e:3f:ed:6b:02:f8:55:3b:0b:a1:7e:54:
ce:48:34:8b:b2:50:72:f0:bf:4f:46:c3:a1:98:50:
b6:a6:e6:b6:c5:ad:ea:6f:c0:3d:23:af:47:8e:0c:
13:5d:dc:1d:fc:35:31:64:ab:95:54:aa:14:30:47:
d2:b3:2e:54:b4:ce:77:2c:0c:bd:84:de:b5:80:b6:
56:72:6a:c5:f7:40:c1:de:a8:8d:ab:1e:c9:26:1f:
94:51:ee:da:4d:95:73:0b:13:af:a5:ae:85:63:5e:
b5:ef:60:84:86:46:95:2d:96:0a:f1:eb:9d:af:67:
f4:55:26:84:db:db:e3:17:76:21:f4:c8:1a:70:7d:
45:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:08:0A:98:F2:61:2F:2A:D9:86:BA:74:EE:80:4A:42:66:BF:48:DE
X509v3 Authority Key Identifier:
keyid:5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/PQgKmPJhLyrZhrp07oBKQma_SN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.0.0/22
45.153.252.0/22
46.231.16.0/21
46.231.244.0/22
185.41.36.0/22
185.94.244.0/22
185.146.104.0/22
185.214.112.0/22
185.229.52.0/22
192.145.56.0/22
194.39.40.0/22
212.115.36.0/22
IPv6:
2a05:3600::/29
2a0d:6e00::/29
Signature Algorithm: sha256WithRSAEncryption
39:89:d7:d8:a4:13:3f:2a:e9:f3:79:af:1a:32:8a:5e:15:b7:
c9:84:c4:8e:ef:e2:4c:b3:64:da:f9:52:5d:72:a9:33:eb:5f:
87:5c:54:02:64:0d:0b:4f:71:98:90:68:79:08:2e:e8:d0:d3:
3a:80:0b:9b:66:ce:f7:69:40:0c:78:29:53:e7:98:1f:ab:65:
0b:30:9a:ca:c6:a6:9f:44:13:69:a4:74:a9:7a:a9:24:6a:57:
a6:e7:f5:76:ee:83:49:c4:bc:f2:8d:2c:fb:ad:fe:8f:a8:6e:
7f:96:06:35:c7:d2:79:50:67:df:84:89:6f:84:46:06:2c:e0:
9a:6e:d4:75:31:e8:00:75:90:7f:69:3b:5e:26:ae:88:62:7b:
2b:a6:db:81:a2:58:65:cf:b5:f9:3a:fa:9f:ca:38:bc:2a:0f:
8f:e6:d0:27:48:b1:7b:c3:8f:3e:07:a4:43:e0:35:e1:26:c0:
31:b9:c8:40:58:50:35:17:c3:00:a3:11:e3:72:08:f8:69:f8:
79:b0:14:2c:69:b9:e4:2c:ca:30:90:aa:34:74:03:81:df:fe:
1f:e0:a0:22:e7:31:9c:e7:b2:e1:1f:cb:df:60:7e:cc:a2:52:
42:d5:d0:2e:13:13:44:82:04:cc:c1:86:01:00:4d:d2:a3:93:
cf:d8:d8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:48:52 2024 by rpki-client on console-fra.rpki-client.org