Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/s7l38BTxWc6dD2iA7St-h0YV9hM.roa
File: s7l38BTxWc6dD2iA7St-h0YV9hM.roa (raw, json)
Hash identifier: sNL9HCjpxrh3K4+hQ3jDw0HMOyn7crikQm8Ee2Kd86c=
Subject key identifier: B3:B9:77:F0:14:F1:59:CE:9D:0F:68:80:ED:2B:7E:87:46:15:F6:13
Certificate issuer: /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial: 019351381464A638FB144F1C9E8230775A91
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/s7l38BTxWc6dD2iA7St-h0YV9hM.roa
Signing time: Fri 22 Nov 2024 00:14:09 +0000
ROA not before: Fri 22 Nov 2024 00:14:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212286
IP address blocks: 45.87.128.0/23 maxlen: 23
45.91.73.0/24 maxlen: 24
45.128.80.0/22 maxlen: 22
45.131.216.0/22 maxlen: 22
45.132.164.0/22 maxlen: 22
45.138.248.0/22 maxlen: 22
45.145.136.0/22 maxlen: 22
45.153.36.0/22 maxlen: 22
45.154.148.0/22 maxlen: 22
193.17.224.0/24 maxlen: 24
193.17.231.0/24 maxlen: 24
193.17.253.0/24 maxlen: 24
193.17.255.0/24 maxlen: 24
212.102.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:38:14:64:a6:38:fb:14:4f:1c:9e:82:30:77:5a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Validity
Not Before: Nov 22 00:14:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3b977f014f159ce9d0f6880ed2b7e874615f613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:ee:92:44:6d:18:2b:15:8c:69:ca:49:b6:
bd:71:bc:ae:6e:0c:a8:fe:66:71:84:cd:52:a2:19:
0e:dc:2a:63:02:d1:e7:e9:0e:3c:00:2d:5f:2e:6f:
f5:a3:75:e0:78:36:56:0d:50:f4:93:84:29:5c:96:
9c:95:48:45:f4:44:ae:cd:70:d5:36:1d:5a:fa:d6:
87:66:86:a2:6d:dc:e7:de:ff:6a:79:7c:75:65:27:
27:ca:c6:f8:40:93:7c:90:3c:a9:81:23:c7:f3:b8:
dc:95:1d:79:b0:09:e0:aa:2d:9c:3e:5a:27:4b:38:
21:2d:e8:30:11:4b:aa:67:71:77:7e:31:77:37:7b:
b6:0e:54:f5:2a:50:df:c7:5c:31:62:8c:d4:8f:90:
97:72:72:1b:0e:15:76:0f:60:bf:53:6d:d8:f0:52:
98:82:64:74:40:1c:70:ef:c7:7e:d5:7d:b8:3b:d9:
cd:54:fd:3b:ec:cc:57:d8:4d:2a:b1:6b:31:fe:f2:
43:c7:e4:da:d4:71:df:99:c2:cc:33:c9:7d:b5:0f:
78:fc:14:74:4a:39:3b:60:8a:6a:e3:9d:6d:39:60:
e3:80:17:e1:f4:67:86:4b:90:97:c7:1d:ab:56:f7:
5a:e1:d2:90:6f:72:74:31:f7:32:2f:6d:41:87:04:
cb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B9:77:F0:14:F1:59:CE:9D:0F:68:80:ED:2B:7E:87:46:15:F6:13
X509v3 Authority Key Identifier:
keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/s7l38BTxWc6dD2iA7St-h0YV9hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.128.0/23
45.91.73.0/24
45.128.80.0/22
45.131.216.0/22
45.132.164.0/22
45.138.248.0/22
45.145.136.0/22
45.153.36.0/22
45.154.148.0/22
193.17.224.0/24
193.17.231.0/24
193.17.253.0/24
193.17.255.0/24
212.102.124.0/24
Signature Algorithm: sha256WithRSAEncryption
78:09:1e:bd:b6:c4:09:c4:a2:e4:02:3e:5b:30:a9:d0:8c:22:
fe:e3:54:33:f9:ab:bb:20:28:ab:d8:9e:b7:ab:bd:4f:89:9a:
cb:a2:e0:41:57:8e:93:95:9f:5d:02:b0:cf:6a:7e:d5:f9:c8:
e6:e3:03:55:e7:5e:a1:4b:1d:d5:8c:76:4b:bc:cf:0a:1a:37:
1f:56:56:9d:25:9c:c9:98:30:f9:1e:cf:32:09:e3:0e:ee:38:
ba:29:f5:48:41:9f:ff:30:b4:c1:6d:04:2a:9f:ea:1f:eb:fb:
81:2a:35:62:5c:b3:16:0b:1d:3a:e8:13:70:e2:ee:52:b8:04:
26:6e:09:fd:ac:b6:48:35:45:bd:d1:94:82:8b:04:17:29:9b:
1c:2f:3d:65:6e:32:4a:8f:e6:43:e8:e8:91:b4:82:ec:22:b4:
ee:c6:0f:ad:c8:d2:5b:e9:90:87:d6:f2:cd:75:a7:70:a4:40:
8b:e9:68:f7:10:dd:f0:f6:57:99:9e:c5:07:df:60:10:c8:f7:
80:cc:52:d3:95:2c:96:b3:90:2c:26:33:e2:ed:93:1d:7d:37:
ed:bd:6a:cc:a0:10:e6:22:f3:28:f4:a1:90:5d:43:eb:bf:86:
e9:f6:8a:96:95:78:6b:55:52:f0:f7:a2:e8:ca:03:5c:d3:3a:
f8:61:13:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:23 2024 by rpki-client on console-fra.rpki-client.org