Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/IatlVZ303XxJCTIZYLxELi4Jj2w.roa
File: IatlVZ303XxJCTIZYLxELi4Jj2w.roa (raw, json)
Hash identifier: 4EYgsEyy8ks7I057dNtpYHIVTP3/TcKgJUZW5XjADbg=
Subject key identifier: 21:AB:65:55:9D:F4:DD:7C:49:09:32:19:60:BC:44:2E:2E:09:8F:6C
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018CC94DACA8F0477604AE4713EE55F6428A
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/IatlVZ303XxJCTIZYLxELi4Jj2w.roa
Signing time: Tue 02 Jan 2024 08:32:39 +0000
ROA not before: Tue 02 Jan 2024 08:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48427
IP address blocks: 5.154.56.0/24 maxlen: 24
5.154.56.0/22 maxlen: 22
5.154.57.0/24 maxlen: 24
109.167.92.0/23 maxlen: 23
109.167.92.0/24 maxlen: 24
84.232.55.0/24 maxlen: 24
109.167.93.0/24 maxlen: 24
93.114.253.0/24 maxlen: 24
93.114.252.0/24 maxlen: 24
93.114.252.0/23 maxlen: 23
109.167.58.0/23 maxlen: 23
109.167.58.0/24 maxlen: 24
109.167.64.0/23 maxlen: 23
109.167.64.0/24 maxlen: 24
109.167.59.0/24 maxlen: 24
109.167.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:ac:a8:f0:47:76:04:ae:47:13:ee:55:f6:42:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 08:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21ab65559df4dd7c4909321960bc442e2e098f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:2b:c1:8c:9d:de:9f:1d:ce:d0:c2:a5:da:
57:53:3f:76:8e:f3:29:53:43:0a:0a:8a:39:7b:1c:
a4:13:0c:b5:64:ea:77:a3:15:6e:45:55:a6:57:13:
a8:d7:18:f6:4f:21:c9:ad:21:7e:bc:c7:21:8e:fc:
c8:80:fc:72:fd:5e:13:75:e7:b3:1f:14:a5:2a:f4:
30:c1:60:3f:4e:98:82:c3:4d:81:37:83:a4:d3:cc:
07:b3:b1:3c:4a:1c:f6:c5:db:85:6d:44:9b:6d:47:
fe:af:71:73:93:54:5c:c2:25:5d:72:8d:2d:93:33:
dc:5b:9a:4a:b5:f7:ac:b4:9d:64:25:7e:f8:ec:9e:
49:79:cd:54:c9:c3:75:84:34:c5:f2:b3:7b:bb:ef:
4a:77:ee:3b:e9:5d:e7:f9:0e:c6:3f:94:04:bd:71:
45:6b:fb:c5:ce:8b:ac:7f:65:7d:a4:ec:16:e7:2d:
22:e4:4d:38:c6:26:37:d5:dc:16:f7:42:4d:f7:65:
ca:05:67:1d:14:16:c7:de:0b:86:0f:1d:1c:39:24:
b0:58:ab:23:28:e5:33:f5:9f:55:d7:7d:16:15:38:
76:af:af:ef:21:8e:36:39:01:3c:ad:7b:a1:0d:5f:
8b:e9:0a:db:64:84:4d:d1:ed:27:90:83:e3:61:e6:
16:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AB:65:55:9D:F4:DD:7C:49:09:32:19:60:BC:44:2E:2E:09:8F:6C
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/IatlVZ303XxJCTIZYLxELi4Jj2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.56.0/22
84.232.55.0/24
93.114.252.0/23
109.167.58.0/23
109.167.64.0/23
109.167.92.0/23
Signature Algorithm: sha256WithRSAEncryption
81:24:a9:10:84:57:ff:00:ae:45:b8:ee:73:58:c0:45:2f:b6:
59:63:6f:a6:1b:36:4f:8c:d4:42:63:c3:68:9a:56:f5:f9:29:
f4:35:3a:26:fc:99:e7:90:ba:fe:10:4b:47:5c:4d:12:09:af:
42:8d:83:c1:c9:9c:4a:8a:bf:af:7c:d9:ce:3e:a1:32:52:c0:
03:ac:a6:89:c8:60:1a:65:32:1f:bf:ca:1d:dd:cd:d9:43:92:
9a:06:d6:92:b9:f0:69:44:93:5d:43:60:b4:7b:ff:d1:a3:a7:
b2:1a:3d:09:74:25:6f:63:b7:e3:4f:34:3b:e8:1e:3c:c2:5a:
0b:1b:78:83:72:10:44:e0:e8:9b:08:e8:bd:cc:ad:ea:2a:85:
08:ff:14:f8:3b:c1:2c:38:af:bd:6f:a8:3f:0e:d0:1d:c9:e7:
61:72:47:c7:29:ac:b8:12:24:5d:ca:66:c3:d3:6d:0d:eb:ac:
1d:05:6d:73:2e:13:ff:c3:07:38:82:46:64:52:96:76:48:a6:
2d:c5:3e:f7:28:ba:5f:79:1f:e6:90:3a:1e:1b:6e:1c:7e:be:
f4:c9:98:7a:af:64:f7:b2:ae:5f:0a:83:23:2b:97:36:72:9b:
13:97:61:60:5f:4d:df:37:69:d9:43:2f:9c:26:2d:a8:2a:43:
a8:5a:fd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:59:57 2024 by rpki-client on console-fra.rpki-client.org