Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Tr220bkBkw5SpgIQXUo76esPwWI.roa
File: Tr220bkBkw5SpgIQXUo76esPwWI.roa (raw, json)
Hash identifier: jMpiZkLSRhu/gkrKA1CuufntwtgwZYKwyAVkNnZ6c7Y=
Subject key identifier: 4E:BD:B6:D1:B9:01:93:0E:52:A6:02:10:5D:4A:3B:E9:EB:0F:C1:62
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018D6A1941172B1776FEF8B1FE77CB131B4A
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Tr220bkBkw5SpgIQXUo76esPwWI.roa
Signing time: Fri 02 Feb 2024 13:54:16 +0000
ROA not before: Fri 02 Feb 2024 13:54:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 45.93.9.0/24 maxlen: 24
45.148.244.0/24 maxlen: 24
78.40.116.0/24 maxlen: 24
78.40.117.0/24 maxlen: 24
93.185.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 May 2024 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6a:19:41:17:2b:17:76:fe:f8:b1:fe:77:cb:13:1b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Feb 2 13:54:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ebdb6d1b901930e52a602105d4a3be9eb0fc162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:ed:11:36:b3:7e:af:09:19:3d:c2:02:87:
97:56:97:e0:0d:93:f6:70:54:f7:a8:ea:62:7d:ce:
60:de:65:c5:f7:31:dc:ce:7f:6c:51:b7:f2:99:7a:
00:63:98:a7:75:33:30:73:90:18:aa:73:f7:c1:9c:
2b:63:99:46:df:15:ce:b4:ad:07:ac:63:1e:13:0a:
36:a9:af:ee:4e:d7:6e:db:5b:ea:fd:ed:cc:03:3c:
8e:75:93:b0:5e:58:0a:57:f2:fa:e7:6e:28:bc:c8:
0f:f8:e1:e1:86:dc:1f:51:07:4a:6c:30:25:87:82:
2f:e8:30:a9:83:33:48:c6:39:68:d5:1e:46:f8:b4:
b9:77:ff:17:9a:ad:54:92:e5:55:aa:0c:55:f9:e4:
01:dc:ee:b7:26:d1:66:4b:f1:3b:70:1d:b1:b5:9e:
03:54:6d:43:84:33:f2:43:9e:ef:d3:96:3f:73:c7:
fb:36:c0:53:39:c3:a4:df:14:de:ff:fc:3d:4f:96:
d0:12:2d:1f:e1:ec:ba:4b:58:58:62:76:04:66:52:
d4:04:d5:7c:94:5e:ec:4e:8b:9f:62:c7:68:21:6e:
f8:06:aa:85:de:88:80:7f:3e:4b:5f:ae:f7:7f:fe:
38:c3:64:e1:db:b0:2d:be:3f:18:e4:4d:f8:78:17:
ae:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BD:B6:D1:B9:01:93:0E:52:A6:02:10:5D:4A:3B:E9:EB:0F:C1:62
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Tr220bkBkw5SpgIQXUo76esPwWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.9.0/24
45.148.244.0/24
78.40.116.0/23
93.185.167.0/24
Signature Algorithm: sha256WithRSAEncryption
42:cc:d4:cf:11:90:52:bc:17:22:32:95:88:4a:fb:ba:bb:99:
61:ef:02:29:7b:5b:32:7f:0c:62:74:21:fc:8b:7e:f8:ba:cf:
2c:82:8b:dc:e9:8c:77:b3:48:fc:d5:d0:3a:77:be:f4:be:0a:
34:b6:75:66:85:89:13:c8:fe:03:ee:c0:0c:22:f6:c5:8c:97:
de:17:bf:8f:7e:ca:6f:5a:88:19:6e:a8:bc:c8:e2:5d:26:5e:
85:59:90:b8:77:7e:50:51:5a:9c:86:9a:d8:00:4b:5f:75:77:
af:4e:0b:d6:9e:fc:2f:12:80:60:5f:f6:44:cd:3a:5f:73:63:
dd:90:42:37:af:7d:e4:39:61:7b:ee:0f:7e:b0:83:2b:f9:9a:
ce:f0:21:56:e6:14:0c:1b:22:06:ae:55:61:6e:95:37:b4:d7:
0b:ee:3e:51:55:11:16:16:40:2f:14:b3:ed:ce:45:b6:d8:32:
f4:09:9a:17:7c:f6:f5:b1:f0:1a:bb:24:c2:10:82:dc:b0:55:
7d:16:bd:b9:a3:ab:55:3c:c0:0d:f8:25:d9:95:cb:9f:d6:68:
e1:3d:c8:9c:b3:29:ad:9d:07:43:f7:50:eb:73:2e:77:25:6b:
70:61:04:3d:54:9d:94:6d:6c:03:bd:20:18:5d:18:ce:be:95:
9b:68:b3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 19:38:58 2024 by rpki-client on console-ams.rpki-client.org