Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/SrEQg-73NxeORXx-IjzzpRS8ObQ.roa
File: SrEQg-73NxeORXx-IjzzpRS8ObQ.roa (raw, json)
Hash identifier: KkN+fARZreN3FliVgp12puEw552bCwePBqYvpvVdgrQ=
Subject key identifier: 4A:B1:10:83:EE:F7:37:17:8E:45:7C:7E:22:3C:F3:A5:14:BC:39:B4
Certificate issuer: /CN=96344400396d0af4cb79e3c94666671b7b391f55
Certificate serial: 018CF5E6510AA4CAB7A785CEBAC43226BA7B
Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/SrEQg-73NxeORXx-IjzzpRS8ObQ.roa
Signing time: Thu 11 Jan 2024 00:22:41 +0000
ROA not before: Thu 11 Jan 2024 00:22:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16089
IP address blocks: 45.88.58.0/24 maxlen: 24
79.110.60.0/24 maxlen: 24
91.209.79.0/24 maxlen: 24
2a0c:3bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f5:e6:51:0a:a4:ca:b7:a7:85:ce:ba:c4:32:26:ba:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55
Validity
Not Before: Jan 11 00:22:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ab11083eef737178e457c7e223cf3a514bc39b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:e8:16:7d:28:cb:b0:89:5b:ad:fc:c2:d8:
3a:82:40:3a:eb:08:15:db:41:d9:0b:04:05:29:7f:
b6:01:89:30:a2:e6:5e:60:fb:30:45:ea:15:0a:5c:
93:c9:76:f5:49:75:6e:48:cf:88:7a:25:ba:c2:84:
17:3a:52:c0:07:25:aa:20:46:fe:19:ed:fe:8b:40:
34:16:29:4d:8a:a6:b2:2b:75:83:ba:9e:e9:61:e9:
47:b0:5b:56:e6:8e:f6:e0:9f:4f:e6:a0:e6:b1:27:
17:88:e9:7d:f3:4a:70:21:bd:9a:c4:f7:b2:ec:40:
a1:1e:79:9e:91:18:02:61:66:0f:e5:c4:e3:d3:34:
f2:e6:f9:49:c0:3c:5b:aa:c8:91:17:a8:b5:cc:f6:
13:6e:7f:0d:c6:78:0c:b8:d3:ba:d8:af:75:93:7c:
56:76:ae:ad:9a:d0:9c:10:69:70:b3:19:60:ed:3a:
8c:0e:2c:15:8f:b4:74:7e:6d:e7:04:6c:5a:01:1e:
9a:e2:2f:af:c4:7b:78:78:ec:be:a3:a8:53:fc:cf:
04:81:00:73:0b:ce:fd:c9:1d:83:be:78:06:9f:c5:
0c:15:b8:35:84:5e:d1:42:3b:62:28:cf:da:d2:f4:
93:37:ed:d1:e5:d2:03:ba:39:a3:ce:4b:c1:d4:cd:
50:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:10:83:EE:F7:37:17:8E:45:7C:7E:22:3C:F3:A5:14:BC:39:B4
X509v3 Authority Key Identifier:
keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/SrEQg-73NxeORXx-IjzzpRS8ObQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.58.0/24
79.110.60.0/24
91.209.79.0/24
IPv6:
2a0c:3bc0::/29
Signature Algorithm: sha256WithRSAEncryption
e0:f0:33:f2:e4:a5:43:81:41:4c:eb:13:04:9e:a4:5a:a0:cb:
18:80:95:96:1e:29:c5:1d:45:fc:a6:fb:80:70:d0:1b:16:90:
38:c2:65:b1:ce:b2:8c:06:ef:a8:ad:8b:dc:88:29:17:27:7d:
2a:41:19:24:e6:eb:69:da:4b:13:03:45:0a:29:c4:db:f2:04:
2a:ba:21:11:bc:8d:9f:b7:70:fa:c4:d2:3e:a9:64:a8:08:c6:
19:32:72:4b:c1:42:a5:dc:34:03:93:5f:f4:bb:e8:73:0d:01:
51:73:40:f7:27:65:9b:74:1d:c7:f6:b8:ec:e1:78:a4:e9:44:
d8:a2:b8:d3:da:0c:cf:80:93:06:2a:42:eb:1c:5f:d2:4f:2f:
0f:11:9c:bc:fd:c6:97:f7:5e:8f:d6:da:18:e1:c9:52:7b:67:
53:05:ec:d0:cb:54:03:54:5d:84:67:cc:1c:54:88:df:ab:2b:
16:5f:ba:a6:8f:4f:d3:3b:e4:56:72:8d:fa:ce:48:51:cc:17:
8d:55:e7:7c:70:bb:82:17:5b:b3:35:e5:f6:bf:bc:3c:e3:7d:
e0:a6:42:b1:c3:8b:75:85:1c:11:fa:52:72:53:13:98:89:e4:
aa:62:76:d2:4a:5e:bc:33:da:36:1a:47:01:da:46:aa:f6:33:
6c:73:35:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:30:57 2024 by rpki-client on console-fra.rpki-client.org