Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/Xwsu2jIOyQfYshrdXrZcTrNBAAo.roa
File: Xwsu2jIOyQfYshrdXrZcTrNBAAo.roa (raw, json)
Hash identifier: bzOd5MWHjI57wobBdE+UvKowBKNDP/SKPIJK+acC7U8=
Subject key identifier: 5F:0B:2E:DA:32:0E:C9:07:D8:B2:1A:DD:5E:B6:5C:4E:B3:41:00:0A
Certificate issuer: /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial: 018E1CBB9D05B711C52FBA674E06082AECE2
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/Xwsu2jIOyQfYshrdXrZcTrNBAAo.roa
Signing time: Fri 08 Mar 2024 06:24:01 +0000
ROA not before: Fri 08 Mar 2024 06:24:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57391
IP address blocks: 45.140.28.0/23 maxlen: 23
45.140.30.0/23 maxlen: 23
89.44.112.0/23 maxlen: 24
89.44.118.0/23 maxlen: 24
89.45.68.0/23 maxlen: 24
89.45.126.0/23 maxlen: 24
185.46.0.0/23 maxlen: 23
185.46.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1c:bb:9d:05:b7:11:c5:2f:ba:67:4e:06:08:2a:ec:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Validity
Not Before: Mar 8 06:24:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f0b2eda320ec907d8b21add5eb65c4eb341000a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:15:a6:ed:c4:2c:b0:26:8e:52:b1:eb:96:
80:31:53:99:c8:4c:d4:42:43:57:b2:c5:85:5b:c2:
1f:7a:0b:20:e2:37:ed:22:35:60:4e:79:04:0a:7e:
3b:48:36:7a:a0:2b:93:96:f7:2d:16:1a:d9:e0:75:
8f:d8:c0:3c:8d:f7:c6:27:fc:4f:bb:bb:a9:da:38:
9f:90:7f:dc:c0:85:d3:4c:9b:56:86:69:8a:38:f1:
d3:84:50:2a:21:86:86:a3:71:75:ed:00:19:6e:25:
df:d9:7a:a8:29:3a:a1:a4:f7:70:9f:51:1d:9e:18:
5e:cd:0f:52:88:1a:b3:d0:30:1a:45:7f:5f:a6:af:
61:58:72:af:9e:1d:a9:76:e4:04:aa:a0:b2:be:74:
ed:f4:c6:a9:4d:a6:9a:66:e5:66:84:28:78:e7:0e:
bb:bd:f9:1e:7f:42:5c:37:d6:fa:88:da:07:e1:df:
7e:9d:75:47:cc:ca:bc:83:e7:29:15:d9:32:ff:9a:
35:c1:67:aa:4e:6f:0d:e5:15:45:e7:f0:41:bf:6d:
4c:24:64:90:9e:8c:5d:c4:1a:e0:b4:d0:a9:b7:d0:
b5:55:52:f8:76:34:73:21:c8:ba:c2:a2:a0:65:21:
bd:ca:2b:e1:4c:59:74:04:24:aa:e1:f5:cc:b5:4b:
22:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0B:2E:DA:32:0E:C9:07:D8:B2:1A:DD:5E:B6:5C:4E:B3:41:00:0A
X509v3 Authority Key Identifier:
keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/Xwsu2jIOyQfYshrdXrZcTrNBAAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.28.0/22
89.44.112.0/23
89.44.118.0/23
89.45.68.0/23
89.45.126.0/23
185.46.0.0/22
Signature Algorithm: sha256WithRSAEncryption
79:36:86:a0:0b:dd:52:8a:73:74:a0:9d:22:05:58:c4:59:d7:
bb:49:64:d7:4b:a6:00:cb:6d:6c:26:a4:0c:2b:63:79:5b:88:
c2:7a:d7:51:cf:b8:38:5c:00:e1:a5:31:67:32:9b:fb:6a:a3:
57:88:c7:21:03:f2:ed:00:65:27:18:d2:17:11:5c:42:25:dd:
bf:08:1f:a9:9c:66:d9:1c:23:cc:11:a0:a0:cb:e2:31:b3:18:
e5:61:ca:d1:93:da:09:15:52:cf:40:b3:47:c9:9a:92:df:3b:
74:e1:e9:d6:96:3f:48:fd:65:49:e2:64:15:26:a9:2e:6d:9e:
66:f2:7e:d8:db:8d:fb:d2:ca:11:31:ae:a5:aa:25:dd:f7:53:
ed:92:c6:35:f5:06:93:ac:03:d8:fe:bc:ff:51:b7:78:05:cb:
a9:7e:5f:0e:89:25:30:1d:7a:a2:b9:18:a1:ba:1d:c2:9d:d3:
34:6d:a1:75:bd:11:5b:77:c1:7a:d0:64:57:d6:06:9f:35:0a:
1c:5e:52:78:75:99:d8:73:8b:57:ea:6f:01:0e:76:23:e4:95:
28:65:ea:cb:a8:eb:ad:53:14:45:d9:80:cd:4d:f0:1a:51:ee:
41:2d:bc:ee:6a:63:44:48:b7:06:37:ab:cf:61:03:a2:6d:89:
29:df:43:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:43:39 2024 by rpki-client on console-ams.rpki-client.org