Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/E8N6ardoVhU3vyxyCbDoWBnUsVw.roa
File: E8N6ardoVhU3vyxyCbDoWBnUsVw.roa (raw, json)
Hash identifier: Pa7Eu0mc8BLN0suS5BfXQUD/dw8k4oQf2CM1rbtasDo=
Subject key identifier: 13:C3:7A:6A:B7:68:56:15:37:BF:2C:72:09:B0:E8:58:19:D4:B1:5C
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0192F34E35018B974FC8F7B68ECAE565A807
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/E8N6ardoVhU3vyxyCbDoWBnUsVw.roa
Signing time: Sun 03 Nov 2024 18:34:01 +0000
ROA not before: Sun 03 Nov 2024 18:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 45.43.137.0/24 maxlen: 24
45.43.147.0/24 maxlen: 24
45.43.152.0/24 maxlen: 24
64.137.9.0/24 maxlen: 24
64.137.54.0/24 maxlen: 24
64.137.110.0/23 maxlen: 23
104.222.191.0/24 maxlen: 24
104.233.56.0/24 maxlen: 24
104.233.58.0/24 maxlen: 24
104.238.21.0/24 maxlen: 24
104.238.24.0/24 maxlen: 24
104.238.28.0/24 maxlen: 24
104.238.30.0/24 maxlen: 24
104.239.15.0/24 maxlen: 24
104.239.47.0/24 maxlen: 24
104.239.66.0/24 maxlen: 24
104.239.74.0/24 maxlen: 24
104.239.79.0/24 maxlen: 24
104.239.83.0/24 maxlen: 24
104.239.89.0/24 maxlen: 24
104.239.100.0/24 maxlen: 24
104.239.102.0/24 maxlen: 24
104.239.109.0/24 maxlen: 24
104.239.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f3:4e:35:01:8b:97:4f:c8:f7:b6:8e:ca:e5:65:a8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Nov 3 18:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13c37a6ab768561537bf2c7209b0e85819d4b15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:8f:77:6c:33:ae:2a:73:8d:62:2d:d1:4d:
15:71:53:91:fd:68:2a:46:16:aa:ef:9e:cb:68:94:
e4:3a:af:36:ee:0a:da:a7:6d:6c:26:3d:34:6e:49:
50:d1:d0:f6:b1:bd:b8:20:f2:0d:e7:8e:e1:df:72:
75:f8:d6:81:82:c5:19:6c:e4:5b:b9:e9:08:44:5f:
76:d9:e0:39:b8:cb:6a:5d:13:31:a7:91:c7:e2:e5:
92:30:22:0d:c6:44:fb:c0:8f:c2:d5:68:b5:29:02:
15:f5:8b:99:d4:72:63:8f:51:98:0d:81:cd:cb:36:
32:7d:c8:5e:97:12:37:70:58:15:d6:31:a4:48:4d:
ce:fd:60:e3:45:ba:21:5a:fc:99:b2:62:06:10:80:
51:04:a6:93:d6:91:57:f5:84:6e:1c:43:de:a2:0f:
e1:cb:b8:c6:94:89:86:63:ed:f8:54:bc:a0:4a:80:
27:be:06:2d:4e:67:bb:15:9a:bb:33:9f:d1:ee:34:
ea:47:88:51:86:c2:4d:b4:ec:4b:93:3c:21:5b:a6:
a8:86:c9:ec:86:52:e0:7d:25:aa:64:96:26:fd:8f:
3d:6d:a5:75:ea:9d:0f:5d:0d:83:f6:dd:20:c6:d5:
67:bc:62:23:90:4c:21:d0:2e:27:d7:e2:98:61:51:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C3:7A:6A:B7:68:56:15:37:BF:2C:72:09:B0:E8:58:19:D4:B1:5C
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/E8N6ardoVhU3vyxyCbDoWBnUsVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.137.0/24
45.43.147.0/24
45.43.152.0/24
64.137.9.0/24
64.137.54.0/24
64.137.110.0/23
104.222.191.0/24
104.233.56.0/24
104.233.58.0/24
104.238.21.0/24
104.238.24.0/24
104.238.28.0/24
104.238.30.0/24
104.239.15.0/24
104.239.47.0/24
104.239.66.0/24
104.239.74.0/24
104.239.79.0/24
104.239.83.0/24
104.239.89.0/24
104.239.100.0/24
104.239.102.0/24
104.239.109.0/24
104.239.127.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b8:a7:de:1e:df:70:54:13:ee:5d:4b:b5:83:1c:2d:01:67:
c3:df:0e:67:c8:50:c1:32:18:9b:d7:03:80:3c:29:fc:b8:80:
25:80:ad:e7:04:2d:1a:67:41:6e:cb:a3:36:5d:cf:e5:0b:20:
eb:9a:8d:bc:80:4a:d4:8a:14:41:15:39:a5:df:53:ad:36:5d:
80:87:6d:25:df:c6:15:33:3e:ce:12:cb:2c:78:30:db:5d:6b:
54:da:bd:4d:95:46:74:08:81:de:cb:8a:da:3c:16:d3:52:01:
15:56:31:16:dd:1a:1f:80:df:3e:6b:b9:39:c8:b0:e8:dd:2d:
be:7d:1d:28:1b:4f:71:a3:92:21:48:55:22:d3:06:36:fc:7a:
58:dd:54:93:20:1f:a1:45:4e:6c:7f:5f:23:e6:04:db:79:be:
c8:6e:be:ea:ad:d0:4f:ed:a9:e0:db:7d:ca:40:ba:71:ee:ca:
87:0e:c6:f1:a2:84:3f:33:4f:47:5e:6a:9a:45:38:e4:c2:e2:
f0:1a:81:d1:d4:d3:f0:23:c1:56:67:ee:d1:5b:94:eb:75:30:
f1:3a:95:8a:a3:00:1a:cd:7c:95:3a:a6:06:97:a6:5b:cc:ef:
7c:e5:a1:2c:f2:93:dd:6d:66:29:b8:af:7f:20:72:e1:c0:53:
30:9f:22:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:13:16 2024 by rpki-client on console-ams.rpki-client.org