Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/Rc0cAVwIlr9asH_7w3r0Ai-j8-k.roa
File: Rc0cAVwIlr9asH_7w3r0Ai-j8-k.roa (raw, json)
Hash identifier: uv8RlbLfXyp/CH4IbslSzBuVLY3R4YrNag3krfKxT30=
Subject key identifier: 45:CD:1C:01:5C:08:96:BF:5A:B0:7F:FB:C3:7A:F4:02:2F:A3:F3:E9
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 01932A5166C54671218E4D32A164973A1201
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/Rc0cAVwIlr9asH_7w3r0Ai-j8-k.roa
Signing time: Thu 14 Nov 2024 10:56:37 +0000
ROA not before: Thu 14 Nov 2024 10:56:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56582
IP address blocks: 46.235.10.0/24 maxlen: 32
46.235.11.0/24 maxlen: 32
178.210.160.0/24 maxlen: 24
178.210.161.0/24 maxlen: 24
178.210.162.0/24 maxlen: 24
178.210.163.0/24 maxlen: 24
178.210.164.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.166.0/24 maxlen: 24
178.210.168.0/24 maxlen: 24
178.210.169.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
178.210.177.0/24 maxlen: 24
178.210.178.0/24 maxlen: 32
178.210.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:51:66:c5:46:71:21:8e:4d:32:a1:64:97:3a:12:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Nov 14 10:56:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45cd1c015c0896bf5ab07ffbc37af4022fa3f3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:dc:ec:0b:d4:16:25:b3:79:bf:1c:e6:a5:
28:c4:56:5c:cc:fd:ef:32:8f:01:50:fe:9e:c6:8f:
bd:a6:4d:96:7b:c1:a7:c9:ba:14:72:11:67:06:ce:
95:c6:dc:d9:ca:2e:99:ee:ce:df:39:bd:f6:24:7a:
02:11:65:71:e1:0b:49:8a:74:73:77:b6:80:57:06:
ff:c9:52:53:c3:cc:2f:f4:9e:96:5a:91:d5:06:c2:
b6:c6:68:1e:f6:01:3b:a7:ea:25:c0:aa:54:cc:69:
25:e0:21:f7:f3:e0:5d:d7:5d:14:be:bd:be:02:44:
f3:56:d7:af:ef:45:46:6a:ac:e9:88:64:eb:4f:35:
d9:82:c6:71:41:bf:85:39:7e:bc:4d:60:35:8c:96:
6d:e0:7f:3c:78:52:94:f2:1c:aa:d8:32:a6:ee:d1:
57:3e:c9:f6:08:ab:db:64:5b:c2:f1:35:0d:60:5f:
6e:01:f6:c4:0a:ec:a4:9b:35:f3:05:94:2a:4e:4c:
f9:d9:4c:03:e6:4e:02:87:37:37:02:65:b7:06:7b:
91:61:d0:c5:41:e2:d5:7b:41:af:4c:2b:d0:12:ff:
20:d3:74:4c:f8:f2:7f:ab:08:2c:cf:b3:d5:4b:95:
e7:f2:94:d5:8e:0f:53:22:30:2f:89:f4:5d:5f:b0:
ea:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CD:1C:01:5C:08:96:BF:5A:B0:7F:FB:C3:7A:F4:02:2F:A3:F3:E9
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/Rc0cAVwIlr9asH_7w3r0Ai-j8-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.10.0/23
178.210.160.0-178.210.166.255
178.210.168.0-178.210.178.255
178.210.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e5:2b:cf:39:77:d1:33:f6:7c:de:4b:7e:8b:7a:80:ce:fc:
05:9a:e9:b3:eb:cf:5d:c1:a8:a5:ff:af:22:cc:59:ad:b8:78:
cd:64:90:09:ef:77:82:b7:94:11:85:9a:b8:ad:e7:19:72:98:
48:e4:87:58:a7:e9:08:84:f0:aa:03:0f:16:39:38:1a:d9:6c:
cf:ad:e7:f9:f0:69:a6:81:b9:c5:fb:a1:2e:c2:c1:9a:40:a8:
e9:bc:6b:92:ac:41:a4:5c:18:85:a8:70:ab:c3:75:fe:2b:f9:
1a:14:44:74:5c:8b:fa:a8:7c:40:75:67:41:db:d0:3b:c5:30:
e6:e5:3d:98:57:20:ed:41:1c:3d:f1:66:6c:9d:38:dc:89:78:
79:1c:35:dd:ca:19:10:9c:a2:2b:19:1c:20:65:ed:24:f5:81:
e0:85:70:94:c2:e1:7e:68:a1:36:ff:aa:33:88:87:5c:f6:6e:
07:bd:00:bb:c7:71:d3:f2:fe:e9:38:83:1e:4f:ef:a1:4d:7a:
f4:65:c3:ce:14:1b:2f:10:e1:7e:58:48:d3:c2:e8:35:35:b5:
f5:8d:6d:1a:4a:54:f0:80:24:f0:4f:1b:38:98:02:a9:2d:0e:
81:04:38:29:72:5b:02:62:7d:9f:2e:7b:4f:32:87:29:6c:b4:
c0:e5:c4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:11:06 2024 by rpki-client on console-fra.rpki-client.org