Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1Lnbl0YmVuZHT8S7xFHquxgkqhA.roa
File: 1Lnbl0YmVuZHT8S7xFHquxgkqhA.roa (raw, json)
Hash identifier: OMTR59++ScyqoruixBHQHGnloF7bRRTKDsCaFkxakig=
Subject key identifier: D4:B9:DB:97:46:26:56:E6:47:4F:C4:BB:C4:51:EA:BB:18:24:AA:10
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019325DEFBEDB271FC7FA9DB67EAD8FA0162
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1Lnbl0YmVuZHT8S7xFHquxgkqhA.roa
Signing time: Wed 13 Nov 2024 14:13:10 +0000
ROA not before: Wed 13 Nov 2024 14:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44948
IP address blocks: 45.131.184.0/22 maxlen: 24
146.19.139.0/24 maxlen: 24
185.238.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:de:fb:ed:b2:71:fc:7f:a9:db:67:ea:d8:fa:01:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 13 14:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4b9db97462656e6474fc4bbc451eabb1824aa10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:b6:91:87:3f:1f:51:ab:8a:ad:3c:c3:4a:
8e:17:08:46:c6:19:a3:f4:99:16:10:d2:31:a7:f9:
be:ab:e9:60:ae:2b:fa:29:e1:d4:2f:7f:2d:18:48:
50:18:2d:53:45:ee:10:cc:6f:5b:e7:67:94:ff:56:
65:3e:43:ac:0e:c5:83:76:08:a7:71:ca:ac:e0:2e:
1b:9c:90:d9:a3:86:fa:c3:4a:85:1b:6c:bf:a9:1b:
94:f5:e4:9d:a5:db:93:13:18:8e:03:73:f9:73:b8:
3e:c7:0e:8f:83:67:0b:92:c4:2d:fc:32:6a:23:0f:
ab:d7:3f:a6:74:dd:63:15:25:3d:e7:09:1d:0d:c7:
2b:c3:6e:dc:ef:2e:1a:8a:f3:02:4f:90:0e:00:e6:
36:16:6b:b8:4b:46:7e:4c:8b:3f:15:64:76:59:a5:
8e:4b:44:39:70:81:f3:8f:49:53:99:4d:19:de:b0:
27:e2:f1:ce:c6:90:2c:2b:c3:0f:2e:a3:ae:6f:87:
e4:6b:f0:53:c2:0c:b3:85:cf:61:a4:29:92:e8:ce:
70:79:84:6c:0b:8b:09:19:2b:f2:a8:03:17:79:52:
0c:27:a8:61:c1:ea:74:8a:54:34:8c:5e:97:a1:3f:
84:ea:1f:75:08:a9:c9:39:50:d9:43:70:ee:b5:b8:
c2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B9:DB:97:46:26:56:E6:47:4F:C4:BB:C4:51:EA:BB:18:24:AA:10
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1Lnbl0YmVuZHT8S7xFHquxgkqhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.184.0/22
146.19.139.0/24
185.238.188.0/22
Signature Algorithm: sha256WithRSAEncryption
54:11:77:bc:95:c2:6d:94:45:05:19:f0:30:6b:c1:07:9f:e2:
30:ee:6d:cc:79:0a:94:ff:0a:01:40:1b:ed:a4:39:a8:e9:33:
96:08:7b:c6:2a:ca:3b:01:34:1c:bb:d8:24:74:fc:9c:18:0d:
9c:16:6d:91:26:e7:42:35:ce:1c:11:4a:a6:34:4e:15:75:d6:
86:c9:a5:25:89:0d:83:f3:3b:cf:a2:7e:d2:3b:cd:b8:87:40:
6e:da:d6:31:f8:26:04:fa:f0:fa:81:40:c0:15:e5:77:f6:af:
3d:0a:1f:bb:df:a6:0c:da:81:cc:6a:9b:b8:f4:24:7f:54:e5:
09:20:48:2f:ba:7e:72:29:24:cb:93:47:5e:da:33:51:ed:97:
5c:20:3e:3b:0b:c0:3d:ae:53:e3:63:71:a1:0f:ec:eb:fb:c8:
23:c2:09:b5:c8:0e:3c:e0:ca:6b:99:40:3b:3f:62:5c:aa:9e:
53:5f:1a:16:ec:90:b7:80:5e:19:64:75:4d:8d:18:dc:88:c8:
a4:62:64:21:c6:46:4a:52:a8:4a:51:ef:ec:03:74:49:fa:22:
1b:0f:c4:f8:f6:d1:c7:02:86:32:51:53:a5:ce:aa:93:9e:cf:
d5:44:e2:ba:ed:cb:11:9c:3c:5e:d6:29:d4:71:bf:c6:a1:7c:
ed:75:76:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:53 2024 by rpki-client on console-ams.rpki-client.org