Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/OcPASLve17pcRr2o2Wg6clZ8fvc.roa
File: OcPASLve17pcRr2o2Wg6clZ8fvc.roa (raw, json)
Hash identifier: sJ8V4nQ1fFPbz5+vkuUttvgCxnOyVtgaA7o+zgDv9Ao=
Subject key identifier: 39:C3:C0:48:BB:DE:D7:BA:5C:46:BD:A8:D9:68:3A:72:56:7C:7E:F7
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 0192DEA8DD6A6885EC9F3D938EF406DBF3DB
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/OcPASLve17pcRr2o2Wg6clZ8fvc.roa
Signing time: Wed 30 Oct 2024 18:21:01 +0000
ROA not before: Wed 30 Oct 2024 18:21:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211381
IP address blocks: 45.66.10.0/24 maxlen: 24
45.88.76.0/24 maxlen: 24
45.88.105.0/24 maxlen: 24
45.91.200.0/24 maxlen: 24
45.91.201.0/24 maxlen: 24
45.91.202.0/24 maxlen: 24
45.132.107.0/24 maxlen: 24
77.83.175.0/24 maxlen: 24
91.211.248.0/24 maxlen: 24
91.211.249.0/24 maxlen: 24
92.119.114.0/24 maxlen: 24
95.215.204.0/24 maxlen: 24
95.215.207.0/24 maxlen: 24
185.203.241.0/24 maxlen: 24
185.209.20.0/24 maxlen: 24
185.209.21.0/24 maxlen: 24
185.219.81.0/24 maxlen: 24
185.219.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:de:a8:dd:6a:68:85:ec:9f:3d:93:8e:f4:06:db:f3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: Oct 30 18:21:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39c3c048bbded7ba5c46bda8d9683a72567c7ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7e:29:08:b0:cb:ac:44:76:d3:5a:27:e9:0b:
24:5e:4a:5c:33:47:ab:de:07:c5:51:17:0d:95:ba:
f7:c6:20:56:39:de:77:cf:61:6e:3d:53:99:f3:9e:
92:96:78:57:91:b2:12:ab:82:02:77:a9:c9:2c:04:
ed:f2:e6:b1:70:5a:2d:2a:12:65:b5:4c:e1:86:5e:
22:ae:6d:4b:34:14:0e:2e:bd:eb:63:45:5e:ef:2d:
75:c6:c6:06:fb:72:c6:b7:13:41:13:2e:9b:29:c4:
cc:e2:49:68:1e:f6:57:7c:77:08:ec:cc:6d:cc:de:
39:9b:2e:06:5f:e7:af:e6:a5:9e:bd:d4:e8:c6:65:
36:25:6f:c0:f9:d4:9f:c6:6c:1a:ee:fe:72:5f:f4:
f6:03:55:10:27:65:6e:3b:5d:80:d7:5b:97:3f:41:
ec:8e:f4:01:84:ba:03:f4:1a:ef:49:07:52:36:cf:
6d:fc:f1:cb:1c:bd:fb:50:63:43:67:eb:05:60:b6:
db:6f:a0:41:11:9f:f4:0d:ca:27:0b:08:83:e8:c5:
f2:6c:72:1d:0f:ac:a7:bb:39:37:fa:5f:ce:e1:59:
bd:12:6f:29:f6:45:cb:1c:02:90:dd:40:16:8d:26:
c7:de:5b:d3:f6:b9:65:55:0f:56:34:eb:c4:7e:4c:
ee:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C3:C0:48:BB:DE:D7:BA:5C:46:BD:A8:D9:68:3A:72:56:7C:7E:F7
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/OcPASLve17pcRr2o2Wg6clZ8fvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.10.0/24
45.88.76.0/24
45.88.105.0/24
45.91.200.0-45.91.202.255
45.132.107.0/24
77.83.175.0/24
91.211.248.0/23
92.119.114.0/24
95.215.204.0/24
95.215.207.0/24
185.203.241.0/24
185.209.20.0/23
185.219.81.0/24
185.219.83.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ac:05:30:ac:92:52:62:34:b4:30:a7:18:61:92:b3:6c:d3:
47:ea:35:4c:64:a9:f0:ea:85:2c:d3:75:fa:eb:4a:7a:56:c1:
ab:83:c7:6b:70:84:1e:5b:cd:93:f6:38:41:dd:a4:7c:7f:0c:
26:d9:6b:7b:8e:94:86:56:8e:b9:0a:25:b9:03:dd:23:5c:42:
e9:f8:65:b7:27:51:07:ca:94:7e:78:91:64:81:3c:2e:ad:94:
7e:f0:dc:05:d9:e7:f0:ef:cb:d4:2a:ac:11:92:55:ea:c9:f2:
d1:54:a9:73:53:cc:47:94:e0:76:bb:81:38:2b:e9:3b:8d:aa:
07:93:c2:22:f3:1f:b2:7f:bd:4c:e6:8e:1f:9c:ff:4a:88:e3:
7d:d2:f0:a8:10:1b:3d:7c:83:85:3b:06:a8:f3:d2:35:28:36:
d8:70:11:35:94:a5:65:b1:a8:a5:4f:9b:e0:9f:71:a0:06:ed:
d0:30:da:99:48:29:a7:b4:b3:72:27:e4:bd:ce:d4:de:ce:9f:
5b:bd:9f:63:fa:fb:ce:c2:32:27:08:c7:b5:5f:d8:45:aa:d0:
09:61:2f:ee:1a:c8:34:f6:c0:53:f3:08:6a:7a:4e:4f:cc:f0:
65:56:a1:94:f0:0a:47:59:fb:96:e6:06:f4:fd:5f:2a:b6:85:
b2:27:3f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:20 2024 by rpki-client on console-ams.rpki-client.org