Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/xEvpMw0yrghW1ID0iYc99ZLv7U8.roa
File: xEvpMw0yrghW1ID0iYc99ZLv7U8.roa (raw, json)
Hash identifier: uSzdY7P4DUx96dCsETY4ubYfzed140BQomuHnDxuVJo=
Subject key identifier: C4:4B:E9:33:0D:32:AE:08:56:D4:80:F4:89:87:3D:F5:92:EF:ED:4F
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01915F2FF007BEC1A83225D3B95AC1621EE4
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/xEvpMw0yrghW1ID0iYc99ZLv7U8.roa
Signing time: Sat 17 Aug 2024 07:14:22 +0000
ROA not before: Sat 17 Aug 2024 07:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62048
IP address blocks: 45.86.87.0/24 maxlen: 24
91.246.49.0/24 maxlen: 24
188.253.2.0/24 maxlen: 24
188.253.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5f:2f:f0:07:be:c1:a8:32:25:d3:b9:5a:c1:62:1e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 17 07:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c44be9330d32ae0856d480f489873df592efed4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:94:a0:05:20:5c:8a:2a:38:9e:5c:ee:39:
0d:c6:bb:e7:0d:5d:5f:0b:e4:af:a4:d3:55:b5:25:
db:29:3e:cb:5e:63:84:59:b7:21:91:e8:ae:75:ad:
9d:a9:e7:81:56:2e:5c:54:25:c1:bb:36:92:c1:7f:
91:ad:58:e8:7a:16:53:a5:12:cc:1a:dc:4c:e6:67:
e9:c4:46:0c:60:a0:90:04:0e:c7:6c:f3:7a:d2:9b:
f8:1c:a8:8b:cc:59:3b:45:e9:40:ea:d0:48:4c:96:
68:fc:ff:ed:c2:28:7a:2b:b5:5b:c8:6d:91:96:18:
a5:68:92:ba:35:f7:75:26:d5:71:f4:f3:1e:f2:42:
26:8d:13:d8:5f:d0:1c:cf:90:a5:82:12:cb:73:5c:
4d:ab:07:c0:a3:e1:46:30:13:b0:21:4d:c0:2e:2c:
d7:fe:8b:91:82:8e:f0:af:c5:23:29:d4:6e:8b:e4:
99:41:7e:d9:ff:e4:4c:c6:fc:cd:2b:3b:3a:17:42:
51:99:a2:60:b7:fb:57:fd:7a:87:7e:53:02:4f:50:
ad:7b:86:66:bc:6a:ea:c5:15:de:b2:1d:db:79:fc:
71:35:e1:4b:67:70:4b:97:dc:3f:f6:92:3f:05:ff:
0d:98:15:67:41:16:42:a6:a2:3f:1e:1c:f1:38:31:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4B:E9:33:0D:32:AE:08:56:D4:80:F4:89:87:3D:F5:92:EF:ED:4F
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/xEvpMw0yrghW1ID0iYc99ZLv7U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.87.0/24
91.246.49.0/24
188.253.2.0/23
Signature Algorithm: sha256WithRSAEncryption
43:19:02:ef:48:8f:56:cb:5c:8f:4f:bf:67:b9:61:c2:eb:46:
50:5b:96:db:6f:3e:24:89:58:12:21:50:ab:0f:56:e5:44:d5:
75:27:1f:b0:c3:dc:38:2d:b9:89:05:b6:03:ed:e5:ca:6a:e7:
a8:44:d4:8d:4c:b0:04:56:8a:7b:f1:eb:ed:ef:41:6a:72:75:
79:e3:79:69:55:8b:8e:79:95:60:69:c8:a6:c4:96:db:e2:06:
58:3d:15:e1:2d:af:5f:e5:30:37:53:7a:13:8a:53:be:9a:15:
00:78:0f:d0:d4:ee:98:a1:bd:19:f0:20:72:43:bb:d4:24:e0:
f4:89:95:74:01:12:b9:a4:95:24:69:23:f6:4b:59:e7:d5:cb:
9f:e2:34:51:41:70:e3:b8:4f:3b:cc:d4:7b:fd:cf:56:9c:68:
b7:4b:ee:30:7f:c3:29:04:2f:07:fe:6d:c8:77:3c:c5:2d:7e:
8c:dc:93:97:58:33:0e:65:1a:5d:f3:43:97:a7:32:78:94:fd:
29:69:db:ef:20:49:32:73:6a:06:0f:7a:ac:73:3c:03:51:dc:
ea:71:70:07:91:c2:ee:7b:9a:95:fb:c9:29:b9:10:3c:49:30:
bd:1a:44:03:6a:d0:37:83:e0:b4:e6:d0:94:88:ac:bb:20:62:
1b:0f:90:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:17:53 2024 by rpki-client on console-fra.rpki-client.org