Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/0-_GiMrQ_kBCiqs9PT60fUJStkA.roa
File: 0-_GiMrQ_kBCiqs9PT60fUJStkA.roa (raw, json)
Hash identifier: zvp0vIvPuKyFs2aQvx6tqP6/dRw1a9wXc9uIkbzwx0o=
Subject key identifier: D3:EF:C6:88:CA:D0:FE:40:42:8A:AB:3D:3D:3E:B4:7D:42:52:B6:40
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018F158E8998C7AA4F9A2F6213C311C006A2
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/0-_GiMrQ_kBCiqs9PT60fUJStkA.roa
Signing time: Thu 25 Apr 2024 14:00:13 +0000
ROA not before: Thu 25 Apr 2024 14:00:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23858
IP address blocks: 45.14.105.0/24 maxlen: 32
45.14.107.0/24 maxlen: 32
45.87.92.0/24 maxlen: 32
45.87.93.0/24 maxlen: 32
45.87.95.0/24 maxlen: 32
45.135.40.0/22 maxlen: 32
45.139.192.0/24 maxlen: 32
45.139.195.0/24 maxlen: 32
92.118.188.0/24 maxlen: 32
185.194.54.0/24 maxlen: 32
185.248.87.0/24 maxlen: 32
195.245.219.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:15:8e:89:98:c7:aa:4f:9a:2f:62:13:c3:11:c0:06:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Apr 25 14:00:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3efc688cad0fe40428aab3d3d3eb47d4252b640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a6:8e:1f:bc:f0:a9:35:ac:1c:43:ad:d5:f1:
de:ed:85:c6:72:64:5b:15:d2:00:cc:28:ab:12:be:
ab:ab:43:67:ea:fb:3e:bd:bc:6b:9e:6a:68:f4:af:
6a:22:10:ca:24:81:51:ec:9b:2c:9b:7b:b5:ee:d1:
9c:9f:e0:e8:db:54:22:df:4a:d9:8c:ab:e6:28:ce:
93:66:7d:70:89:96:de:1f:37:0a:33:98:95:03:e8:
a7:6e:7d:69:3e:60:9c:af:8c:dc:ef:8e:34:33:ae:
30:8b:2a:96:e3:eb:5a:24:cf:85:6a:3a:08:ee:03:
61:46:22:16:22:e9:8d:7a:ee:32:2a:9e:82:ea:16:
d1:8f:00:e4:07:b6:f6:11:72:05:07:72:f5:e1:0c:
93:52:b5:54:6b:93:fc:d1:df:e8:48:a7:87:3e:0d:
d2:ec:8d:68:63:f7:e8:8b:48:3b:62:dc:1c:d8:ff:
fb:ce:6f:1f:dd:15:4a:a6:bf:7c:10:73:7e:fa:16:
49:5f:12:dd:dc:57:e7:58:5f:c7:cb:7f:8b:e5:84:
ef:b1:d9:9b:9e:2b:ae:52:44:75:a9:e0:84:5a:fa:
b2:32:22:e2:2a:37:e4:3a:1b:4d:81:b8:92:fe:9e:
80:a4:d4:a2:9f:49:43:2f:5b:ff:b3:43:8c:8e:d4:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EF:C6:88:CA:D0:FE:40:42:8A:AB:3D:3D:3E:B4:7D:42:52:B6:40
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/0-_GiMrQ_kBCiqs9PT60fUJStkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.105.0/24
45.14.107.0/24
45.87.92.0/23
45.87.95.0/24
45.135.40.0/22
45.139.192.0/24
45.139.195.0/24
92.118.188.0/24
185.194.54.0/24
185.248.87.0/24
195.245.219.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:9d:57:93:02:1e:98:8b:8b:87:d0:27:da:ce:46:69:68:56:
fa:61:eb:68:85:d0:14:93:d9:29:48:1e:f7:10:cd:5e:a5:34:
fb:61:de:eb:f7:f3:38:bf:1f:df:ee:05:11:c6:2b:a1:a8:a5:
92:04:3c:a5:0d:0c:52:d8:d8:5d:09:2f:65:85:e5:b7:af:ae:
8f:ae:5d:1c:f4:61:a2:2b:44:e6:3e:27:51:f1:be:bd:3e:a0:
2c:d4:eb:ca:ec:b9:c0:1e:7d:a8:8c:d3:27:46:d2:da:81:1c:
8e:bc:de:b8:ab:bd:fd:7a:c1:9f:84:b2:f2:6e:e1:94:e1:0a:
3c:32:13:7a:45:d4:d3:20:32:20:72:76:b2:80:a5:e2:6a:22:
04:a6:f8:0c:df:1b:85:17:06:e3:1b:5d:00:f2:e2:ab:6a:f9:
11:15:aa:78:9c:a3:c7:b3:89:1b:af:0c:e3:d4:43:a3:4f:7e:
39:a7:e3:1f:75:cd:ba:cc:60:cf:e7:b4:5a:48:ac:c7:46:e3:
1c:14:fa:5a:6e:ab:7c:45:1d:ba:18:3f:e4:f5:89:c1:59:50:
f8:ef:ea:08:75:91:97:fa:6e:56:fe:a7:38:a3:03:b6:3b:ab:
f5:72:81:fb:ff:f9:75:b2:51:96:cd:0b:52:68:63:de:de:89:
25:a9:0e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:29:03 2024 by rpki-client on console-fra.rpki-client.org