Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/TOiM9GkAgxqTKnzgGaK1mWQ_HN8.roa
File: TOiM9GkAgxqTKnzgGaK1mWQ_HN8.roa (raw, json)
Hash identifier: 3ykgbYpyXbdMbruyEv308riwOH+ZVQWezMxYasWJpfQ=
Subject key identifier: 4C:E8:8C:F4:69:00:83:1A:93:2A:7C:E0:19:A2:B5:99:64:3F:1C:DF
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018F62EEA02E7D5C462AA6D8FC4B1EF4F49A
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/TOiM9GkAgxqTKnzgGaK1mWQ_HN8.roa
Signing time: Fri 10 May 2024 14:35:56 +0000
ROA not before: Fri 10 May 2024 14:35:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 45.131.228.0/22 maxlen: 24
45.139.228.0/24 maxlen: 24
45.139.230.0/24 maxlen: 24
62.3.60.0/24 maxlen: 24
62.233.52.0/24 maxlen: 24
80.94.89.0/24 maxlen: 24
146.19.123.0/24 maxlen: 24
176.116.11.0/24 maxlen: 24
194.104.239.0/24 maxlen: 24
212.18.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:ee:a0:2e:7d:5c:46:2a:a6:d8:fc:4b:1e:f4:f4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: May 10 14:35:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ce88cf46900831a932a7ce019a2b599643f1cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:c5:22:f1:32:52:4d:06:f7:ca:31:95:87:
c1:12:2c:26:37:96:27:8f:e7:da:80:72:c6:0d:3a:
6e:d3:b8:1c:ce:5a:a3:32:53:55:f7:82:11:ff:84:
85:ec:ad:50:24:30:ea:56:39:42:8b:25:e6:65:3e:
fd:c7:f1:a1:b3:55:d8:38:03:8d:6b:a8:fa:cd:80:
b7:4f:8c:97:a6:96:4f:dc:d0:d7:f5:29:ef:26:1c:
21:86:2c:ca:0f:2e:54:ed:3a:f3:c4:d1:8a:b0:70:
86:cc:ea:b4:fe:ac:ec:5f:41:be:62:3a:50:12:dc:
4d:c6:5e:80:4e:20:be:b3:fb:fb:3f:93:e0:f6:79:
76:52:70:4c:ea:66:6c:b6:95:21:25:5e:b4:c4:93:
99:36:1a:ef:29:08:99:f1:3f:2d:3f:c1:59:33:4a:
1b:a5:03:fa:04:f8:99:ee:52:d0:c7:6a:d9:0a:d5:
a5:7b:2a:08:96:a3:8b:3d:91:1b:7a:72:ae:e7:9f:
2a:87:67:6c:bb:b8:f3:bc:9d:be:06:bc:94:4b:a2:
85:2d:a9:b9:38:c1:6b:70:0f:ae:9f:aa:2f:97:3c:
b7:61:4c:5f:29:d7:08:bb:d1:0b:bd:70:43:6e:36:
43:16:0c:65:d4:4b:31:bf:39:a2:52:9c:f9:0b:d2:
25:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E8:8C:F4:69:00:83:1A:93:2A:7C:E0:19:A2:B5:99:64:3F:1C:DF
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/TOiM9GkAgxqTKnzgGaK1mWQ_HN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.228.0/22
45.139.228.0/24
45.139.230.0/24
62.3.60.0/24
62.233.52.0/24
80.94.89.0/24
146.19.123.0/24
176.116.11.0/24
194.104.239.0/24
212.18.124.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:88:ee:7d:89:e8:cc:3d:6e:b0:bd:d4:a4:29:55:25:1d:e4:
3a:75:d7:be:77:a2:38:9d:7f:64:e3:2c:b0:54:d2:34:78:2b:
eb:60:ae:1c:40:10:59:0b:3e:2f:a5:6f:1b:92:2e:cd:28:c4:
ac:d1:d3:86:0e:4e:8a:04:8e:3b:90:67:db:c7:6c:25:69:29:
37:42:50:f7:db:c4:06:4f:66:cd:f2:92:3d:f6:98:f1:37:9a:
58:d3:cd:cb:d5:e6:80:97:94:c8:b7:84:6e:2e:fe:e1:cb:d8:
3c:30:65:8c:6d:ba:8d:46:b3:e6:c8:9f:9f:4b:87:de:e7:1e:
ee:d7:77:a0:77:36:0c:d7:ad:63:42:cb:e6:44:99:e7:8c:cf:
be:8d:c6:1b:f5:e9:af:fd:ff:16:32:9d:29:54:a7:45:43:ec:
ca:85:3a:ad:3b:c5:21:4c:78:f7:5b:3e:7b:e6:1f:bc:04:57:
8c:76:c3:91:43:32:31:86:26:07:15:21:40:f8:bf:49:d3:47:
02:82:e4:a6:78:68:15:93:0b:cb:d8:d2:ab:69:41:8e:12:3e:
09:c0:d1:73:e8:03:bf:d5:a8:a7:56:57:0c:4c:53:c1:15:cd:
1e:54:1f:61:63:25:c9:4b:b7:0e:82:e9:cb:31:b5:2f:51:b3:
3d:b1:9c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:37:33 2024 by rpki-client on console-ams.rpki-client.org