Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/xQwL-eBf80uk0RXidEux3rkiHl4.roa
File: xQwL-eBf80uk0RXidEux3rkiHl4.roa (raw, json)
Hash identifier: 2qdLMT+xpm4UvetEcsRfLyafD5LJFUxwFY6UndAK/MA=
Subject key identifier: C5:0C:0B:F9:E0:5F:F3:4B:A4:D1:15:E2:74:4B:B1:DE:B9:22:1E:5E
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 018CC802BC852BB963087631D2DF51A04E0D
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/xQwL-eBf80uk0RXidEux3rkiHl4.roa
Signing time: Tue 02 Jan 2024 02:31:11 +0000
ROA not before: Tue 02 Jan 2024 02:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56971
IP address blocks: 193.43.72.0/24 maxlen: 32
45.152.112.0/24 maxlen: 32
45.152.113.0/24 maxlen: 32
45.152.114.0/24 maxlen: 32
45.152.115.0/24 maxlen: 32
45.159.208.0/24 maxlen: 32
45.159.209.0/24 maxlen: 32
45.159.210.0/24 maxlen: 32
45.159.211.0/24 maxlen: 32
45.11.92.0/24 maxlen: 32
45.11.93.0/24 maxlen: 32
45.11.94.0/24 maxlen: 32
193.43.94.0/24 maxlen: 32
193.23.55.0/24 maxlen: 32
193.242.145.0/24 maxlen: 32
45.145.4.0/24 maxlen: 32
45.145.6.0/24 maxlen: 32
45.145.7.0/24 maxlen: 32
193.187.172.0/24 maxlen: 32
193.187.173.0/24 maxlen: 32
193.187.174.0/24 maxlen: 32
193.187.175.0/24 maxlen: 32
45.154.1.0/24 maxlen: 32
45.154.2.0/24 maxlen: 32
45.154.3.0/24 maxlen: 32
45.152.84.0/24 maxlen: 32
45.152.86.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:bc:85:2b:b9:63:08:76:31:d2:df:51:a0:4e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Jan 2 02:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c50c0bf9e05ff34ba4d115e2744bb1deb9221e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:82:43:62:5c:c9:1d:89:75:13:86:91:e9:2a:
87:64:f0:ea:cf:ba:7b:cc:60:64:d6:4a:e2:5c:de:
9b:d6:a4:ef:b6:54:67:69:4e:6b:60:17:9c:56:63:
56:7a:b5:96:40:46:61:88:7e:5e:ab:81:c3:ae:db:
65:34:2c:eb:d4:d9:53:72:56:24:44:14:db:b0:29:
05:ec:b9:4c:05:f2:84:3c:1a:3b:ed:46:16:4d:30:
da:5b:b3:af:4a:2c:a6:c3:c5:ac:ee:73:9e:ad:6b:
6b:b6:a3:27:9f:92:28:f6:07:cc:1c:30:39:90:63:
63:47:b2:66:74:f5:53:04:4a:ac:57:a2:e5:5b:f4:
de:75:91:8e:3a:12:b9:78:fc:71:35:28:c4:7a:50:
fa:e1:31:3e:1e:28:a5:10:a1:ea:b1:89:dc:a5:19:
65:78:57:91:21:24:fb:29:83:97:86:88:f2:74:4a:
8c:14:6e:af:96:0d:82:1a:ef:23:44:c8:94:d5:9e:
78:0f:9e:6c:9e:a3:02:93:2f:86:2e:fd:32:7d:fc:
04:5e:29:97:ed:45:d8:02:74:f1:c7:33:f2:28:ad:
d1:23:fe:13:5f:28:e6:18:d6:03:2f:c1:22:6f:47:
5f:df:8b:a8:15:8f:42:e2:a7:9d:d8:c1:1d:be:80:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0C:0B:F9:E0:5F:F3:4B:A4:D1:15:E2:74:4B:B1:DE:B9:22:1E:5E
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/xQwL-eBf80uk0RXidEux3rkiHl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.92.0-45.11.94.255
45.145.4.0/24
45.145.6.0/23
45.152.84.0/24
45.152.86.0/24
45.152.112.0/22
45.154.1.0-45.154.3.255
45.159.208.0/22
193.23.55.0/24
193.43.72.0/24
193.43.94.0/24
193.187.172.0/22
193.242.145.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1d:5a:9d:06:9e:60:57:35:ae:13:e3:38:83:e4:2b:db:6f:
c1:9d:e7:b0:61:a4:8e:04:86:ed:14:ac:6c:8a:5c:c6:98:ac:
5a:31:1a:f7:01:d9:20:f9:d5:24:6f:06:87:4e:b0:d3:d5:cb:
5f:90:6c:73:4c:13:33:45:91:46:47:5a:b1:75:5b:ca:cd:58:
41:80:a0:04:8e:bd:e8:cd:39:a9:a9:8e:e4:34:4b:2b:e9:ad:
60:f7:27:91:35:8e:59:05:08:5c:e6:9b:2e:31:29:7e:c2:e8:
9b:71:82:7f:3a:cd:b0:bb:c6:17:58:91:a9:29:2e:19:9a:a4:
d5:40:a9:55:bd:08:65:98:4a:72:0b:62:fe:68:7d:86:12:e9:
8a:17:43:a3:ab:84:c7:ad:06:ab:ea:f7:20:da:e9:ed:81:ca:
cb:80:30:68:2e:22:64:6f:9f:ba:ee:b6:31:07:6a:0f:05:a5:
1d:02:dd:de:a3:71:1b:39:9c:97:a1:14:07:66:c1:ac:39:c1:
d4:fe:e9:7e:7a:ca:40:82:0b:59:93:c5:ba:ed:ed:32:8f:6a:
97:96:8f:d8:96:06:80:11:d0:8f:42:77:45:32:b5:f6:40:55:
58:7f:aa:89:89:f3:a4:ac:22:32:a0:12:fe:2f:af:30:31:77:
0a:c2:d2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:02:12 2024 by rpki-client on console-fra.rpki-client.org