Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/RTJ55pvu26SiZPLcCjcbm-pPC08.roa
File: RTJ55pvu26SiZPLcCjcbm-pPC08.roa (raw, json)
Hash identifier: BoDwANXSc6GfV4NpWRJyR6uqWPLgNaNplekiSmuEMZg=
Subject key identifier: 45:32:79:E6:9B:EE:DB:A4:A2:64:F2:DC:0A:37:1B:9B:EA:4F:0B:4F
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 01933ED55D4B2DADBBF69CF5CAF55CD8F019
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/RTJ55pvu26SiZPLcCjcbm-pPC08.roa
Signing time: Mon 18 Nov 2024 10:33:10 +0000
ROA not before: Mon 18 Nov 2024 10:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197540
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.5.0/24 maxlen: 24
152.53.12.0/22 maxlen: 24
152.53.16.0/22 maxlen: 24
152.53.20.0/22 maxlen: 24
152.53.32.0/22 maxlen: 24
152.53.44.0/22 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.64.0/22 maxlen: 24
152.53.100.0/22 maxlen: 22
152.53.104.0/22 maxlen: 22
152.53.108.0/22 maxlen: 22
152.53.128.0/20 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:d5:5d:4b:2d:ad:bb:f6:9c:f5:ca:f5:5c:d8:f0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Nov 18 10:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=453279e69beedba4a264f2dc0a371b9bea4f0b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0b:68:fc:1b:94:c7:df:9d:59:5c:65:f0:c1:
1f:38:87:a6:9c:38:ac:05:b4:19:60:39:c7:ff:ed:
6b:67:99:48:3c:af:ab:2c:15:e5:3c:c6:fe:2d:5a:
2c:ba:ed:68:dc:b3:78:10:d6:66:9d:a7:5c:7a:60:
af:e5:6e:26:6e:a1:7b:6b:fa:ad:3d:4e:c6:1a:fa:
0e:de:a7:fc:ee:4a:de:1b:c0:a5:4d:d8:bb:76:0c:
94:3a:c7:2f:dc:b4:9f:ed:a7:3e:9c:76:0f:ab:da:
8e:b2:6e:f2:18:4c:64:a2:4b:91:91:77:32:66:6b:
f3:e8:12:f1:43:fa:70:09:0f:fb:d5:e2:90:f3:f9:
8b:8e:62:ef:1b:c9:ac:87:6b:f1:72:96:56:c0:be:
31:4d:ff:0d:dd:58:a3:ee:63:12:83:98:39:2a:02:
9a:e7:ce:ce:1e:c9:dd:48:5f:4a:59:5f:2a:3e:67:
a4:8a:78:0f:da:3d:43:5b:ef:b6:4a:4d:3e:50:d8:
52:ce:bf:d5:af:6a:30:8e:61:b7:1b:10:c2:1b:53:
e8:c7:45:45:66:9d:69:c9:5c:64:95:72:1e:05:c6:
8a:ed:16:4a:ba:46:06:e4:27:6e:0f:fe:3c:ec:47:
5a:68:46:c3:21:21:8c:61:23:aa:a8:16:d3:2f:d5:
17:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:32:79:E6:9B:EE:DB:A4:A2:64:F2:DC:0A:37:1B:9B:EA:4F:0B:4F
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/RTJ55pvu26SiZPLcCjcbm-pPC08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:be:12:5c:53:33:66:77:7f:8c:85:c1:5b:85:93:37:af:b8:
f1:71:a1:0c:da:bd:a5:42:ad:a7:2b:10:17:85:14:f8:c3:0e:
49:9e:dd:f6:28:cf:b3:08:b4:5d:fe:2a:b4:0f:7d:92:b1:db:
91:e0:ab:0d:9e:dd:2a:22:e9:f2:59:a0:b9:a2:62:ed:b4:e7:
97:ee:a8:ad:df:a3:ea:bf:0a:27:1d:66:c9:27:be:3a:b2:b2:
21:c4:1e:0b:ba:95:6f:32:66:5d:6b:71:21:da:e3:41:e3:8d:
71:6a:e4:a9:34:fe:e8:6f:35:cd:24:cd:37:43:38:3f:38:50:
1a:17:93:cd:9a:c4:d1:ad:13:6c:81:f4:14:04:6c:db:b4:f3:
5a:59:dc:03:00:fe:46:0b:fb:e9:7e:06:6d:23:a8:e4:81:b8:
c6:a3:e8:3a:b3:46:b3:14:5b:04:d9:07:f3:13:6c:63:65:c6:
9d:b5:fc:57:4a:7a:a6:87:b3:c7:ee:67:39:e8:4c:77:4e:09:
eb:2b:b7:09:3d:12:8e:ba:db:3f:2a:c8:bd:22:3c:55:a4:77:
69:94:2d:fc:1f:cf:1b:fa:58:44:8b:ae:01:bf:31:7a:a4:94:
1b:df:c8:3e:70:58:ff:98:1b:9b:9e:02:02:7a:62:53:c7:23:
2a:0b:19:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:56:26 2024 by rpki-client on console-fra.rpki-client.org