Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FyZReGvikQFL3JVxjOmjkazgVKc.roa
File: FyZReGvikQFL3JVxjOmjkazgVKc.roa (raw, json)
Hash identifier: 7+yu/xG/NIqaJQShN2w9DTLfi45gmhir9aZ2+70AhAI=
Subject key identifier: 17:26:51:78:6B:E2:91:01:4B:DC:95:71:8C:E9:A3:91:AC:E0:54:A7
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018F71C1EF983C370F046A2679E8BB8175F4
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FyZReGvikQFL3JVxjOmjkazgVKc.roa
Signing time: Mon 13 May 2024 11:41:26 +0000
ROA not before: Mon 13 May 2024 11:41:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206077
IP address blocks: 45.80.81.0/24 maxlen: 24
185.226.192.0/23 maxlen: 24
201.49.191.0/24 maxlen: 24
217.26.188.0/22 maxlen: 22
217.26.188.0/23 maxlen: 23
217.26.188.0/24 maxlen: 24
217.26.189.0/24 maxlen: 24
217.76.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:71:c1:ef:98:3c:37:0f:04:6a:26:79:e8:bb:81:75:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 13 11:41:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=172651786be291014bdc95718ce9a391ace054a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:64:f9:45:ea:db:90:41:5b:52:96:e1:ff:
f8:60:94:cb:7a:f5:28:bd:80:15:ba:8f:4c:4b:92:
3a:15:87:f7:2c:7d:91:42:9c:05:d3:9b:4e:5f:16:
6d:23:05:3f:4b:0e:43:c6:05:5e:e8:13:0e:51:ed:
86:25:19:fb:d6:c7:20:ef:c8:94:30:5c:91:9b:af:
4a:25:58:28:29:9f:2c:69:f2:3b:b2:16:97:3e:e8:
ce:dc:84:f1:8f:b3:6c:36:a0:ee:c5:f4:00:fc:12:
c8:2f:75:d9:5b:60:0e:a2:af:d1:fe:60:4d:ba:d0:
c8:82:87:b6:ad:26:ac:31:36:56:97:00:1d:05:3a:
9c:d9:59:2a:2f:df:d2:75:11:d1:86:f8:6f:d5:5e:
d3:cd:c4:97:7e:3e:b7:66:32:df:e3:22:fc:f3:99:
26:1f:ee:f0:37:11:49:72:3d:44:ba:32:b0:7b:46:
4f:56:ee:f9:5b:f6:66:08:dd:c5:e2:eb:47:26:13:
55:9b:92:64:94:1f:cb:b3:b7:e0:2f:09:75:39:ee:
b3:6a:68:9d:c1:8b:96:88:44:4c:8c:6c:fa:41:52:
93:e8:26:92:1e:3c:64:80:2d:12:04:2d:99:ac:13:
92:91:df:79:84:f6:02:6f:9b:97:f2:6b:24:e2:0a:
89:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:26:51:78:6B:E2:91:01:4B:DC:95:71:8C:E9:A3:91:AC:E0:54:A7
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FyZReGvikQFL3JVxjOmjkazgVKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.81.0/24
185.226.192.0/23
201.49.191.0/24
217.26.188.0/22
217.76.252.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:34:68:34:6d:2e:84:a4:02:1d:8c:c7:7f:c3:43:3c:28:bc:
09:26:c8:ce:4f:90:74:3c:c7:d4:4c:82:f5:44:10:34:0a:74:
99:76:47:0a:bb:45:3d:77:54:de:42:94:52:38:50:7f:63:3b:
be:d1:8d:b2:ed:2d:c6:11:43:53:f5:b8:ae:d4:c0:ae:ca:b6:
37:b3:60:5d:e9:9c:ed:2b:e2:30:d1:a7:c9:17:76:40:d3:e2:
92:0f:fe:6b:4a:2b:38:90:5e:fb:b3:30:04:3c:a1:03:25:a0:
ab:3b:91:06:50:49:51:57:8d:51:38:26:f4:d8:31:91:d8:16:
86:24:f0:0e:09:c2:57:dd:08:48:3a:b4:57:6b:63:f4:20:a7:
5e:78:cb:89:d6:b9:f2:41:14:91:5b:e5:cd:2a:25:f7:1c:66:
1b:12:37:c1:e0:d3:b5:4d:5f:29:7b:f0:65:ad:6e:16:61:11:
58:33:87:53:7c:3f:04:83:93:6f:e6:f2:4f:65:3c:76:b5:4c:
b3:5a:0c:4d:c8:67:8c:51:f8:b2:69:8b:f8:db:b6:24:09:5d:
f0:62:34:d1:82:02:20:56:6a:f7:46:a0:4d:07:b7:71:0e:91:
f5:60:c5:d3:99:56:60:58:44:4f:9f:9b:bc:f3:9c:42:bc:54:
6f:1c:b8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:50:09 2024 by rpki-client on console-ams.rpki-client.org