Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EXv0gGsLbwpgkKREKKz6SeavlNU.roa
File: EXv0gGsLbwpgkKREKKz6SeavlNU.roa (raw, json)
Hash identifier: pFP3gAdVYdGF2an1pJaL7ApZ2nT2I1OgbJFzxnBQPWY=
Subject key identifier: 11:7B:F4:80:6B:0B:6F:0A:60:90:A4:44:28:AC:FA:49:E6:AF:94:D5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018E9A63592B7A3E6816F5364C297F0AA0FE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EXv0gGsLbwpgkKREKKz6SeavlNU.roa
Signing time: Mon 01 Apr 2024 15:59:45 +0000
ROA not before: Mon 01 Apr 2024 15:59:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.148.116.0/22 maxlen: 24
185.238.188.0/22 maxlen: 24
2a06:de01:d0::/44 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a0e:b107:1870::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
2a10:ccc3:ccca::/48 maxlen: 48
2a10:ccc3:cccc::/48 maxlen: 48
2a10:ccc3:ccce::/47 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9a:63:59:2b:7a:3e:68:16:f5:36:4c:29:7f:0a:a0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 1 15:59:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=117bf4806b0b6f0a6090a44428acfa49e6af94d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a4:50:1e:8c:1f:b7:03:46:5b:dd:5c:67:68:
63:5e:52:56:de:69:ef:01:bd:9f:4d:e6:3a:74:9f:
54:b2:37:8f:6c:97:40:1c:d1:71:11:92:0a:55:9f:
79:93:eb:3a:6f:ca:31:03:67:0b:fe:b6:6a:ab:5e:
f4:c8:e6:bf:b6:e6:fc:99:e6:e2:ab:ba:ed:ce:49:
2d:16:d8:cd:d4:ba:1d:c7:bd:28:85:51:58:9d:01:
99:45:05:ec:f4:1a:69:54:be:5e:ff:6f:95:3b:7f:
88:93:98:f1:1d:60:a7:7c:30:ac:8c:09:9b:72:62:
fc:cf:50:e8:11:8e:1e:b8:88:d3:ca:03:f2:4a:6e:
5a:74:9f:43:76:f0:97:ca:d8:be:de:10:88:69:97:
fb:e3:d7:19:75:55:53:15:e5:9f:19:d3:6c:87:5c:
52:97:6d:9c:9d:a0:00:3c:05:d9:8c:ae:9e:f3:07:
5d:f8:f6:b0:ee:54:b8:07:f0:87:8e:71:d6:46:6c:
64:2d:17:cb:73:ee:2c:95:e5:68:b2:e5:32:4d:31:
59:62:cd:f4:84:48:6a:d8:bd:39:5b:bc:47:4c:c3:
c8:9c:f3:c4:93:ac:34:b1:e5:31:e6:b8:aa:79:ae:
a3:32:b4:2e:6f:f4:f9:a5:05:d5:d3:b5:3b:62:f6:
ff:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7B:F4:80:6B:0B:6F:0A:60:90:A4:44:28:AC:FA:49:E6:AF:94:D5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EXv0gGsLbwpgkKREKKz6SeavlNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
185.238.188.0/22
IPv6:
2a06:de01:d0::/44
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc3:ccca::/48
2a10:ccc3:cccc::/48
2a10:ccc3:ccce::/47
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
04:05:28:58:67:65:94:fc:18:eb:df:f5:7b:b9:0f:e0:fc:16:
3a:fd:a4:35:bf:86:00:b0:75:12:9c:08:17:2c:cb:54:f9:69:
cb:a5:24:32:61:d6:82:ca:52:d3:2b:68:ab:ae:bf:f5:86:6d:
ab:bf:30:ec:1d:a8:fa:3e:7b:59:28:07:78:28:1a:e2:53:9b:
97:99:48:8e:7e:81:fd:0b:41:6a:4c:e0:96:9e:9e:de:de:b3:
22:b6:c1:87:67:a0:93:0f:34:ab:29:f0:8b:99:11:61:0a:45:
cd:d7:56:9c:44:08:66:22:13:af:90:0e:f2:05:64:7a:69:16:
3c:30:f9:80:2f:38:bc:77:51:44:c0:41:a5:d1:18:2c:0e:c8:
4f:22:f4:ff:57:51:ca:ff:eb:53:6a:d0:46:b0:b7:67:00:a9:
bf:55:fa:e5:8e:b7:45:51:11:8e:d9:76:80:8a:53:22:85:a5:
dd:f8:b4:cc:6c:87:16:b0:78:b7:3e:c8:09:f8:7e:50:75:5f:
82:ce:eb:7a:ab:fd:ae:98:ce:56:4a:dd:ce:54:e0:1d:e4:07:
70:31:2f:5e:59:bc:f7:7b:48:b2:41:a1:38:e5:fc:eb:f1:57:
5b:dd:f3:fe:c6:09:0b:1b:57:be:63:2a:c3:03:99:62:71:a8:
f3:f8:b3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 01:14:13 2024 by rpki-client on console-ams.rpki-client.org