Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-AC1q_5bgsPmROAB20L2UcteE8g.roa
File: 1-AC1q_5bgsPmROAB20L2UcteE8g.roa (raw, json)
Hash identifier: KCd5dSAmkg3NSbIZraJVGiZwCgWBnzCFp+FCSCQYGnw=
Subject key identifier: F8:00:B5:AB:FE:5B:82:C3:E6:44:E0:01:DB:42:F6:51:CB:5E:13:C8
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018CC801D8E51953F8E336AD3D49ED2ABF93
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-AC1q_5bgsPmROAB20L2UcteE8g.roa
Signing time: Tue 02 Jan 2024 02:30:13 +0000
ROA not before: Tue 02 Jan 2024 02:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43959
IP address blocks: 45.14.64.0/24 maxlen: 24
45.14.66.0/24 maxlen: 24
92.60.43.0/24 maxlen: 24
45.14.65.0/24 maxlen: 24
45.14.67.0/24 maxlen: 24
2a0d:c7c1::/32 maxlen: 48
2a09:7::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d8:e5:19:53:f8:e3:36:ad:3d:49:ed:2a:bf:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 2 02:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f800b5abfe5b82c3e644e001db42f651cb5e13c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2c:11:79:e0:db:80:d7:0a:9b:ae:a4:32:c3:
f9:aa:5d:e6:87:18:a0:55:50:59:2a:35:af:68:30:
5e:61:02:a3:a5:6f:11:b0:92:d6:38:6b:4e:3b:76:
98:85:0f:43:2d:0a:e6:e9:52:49:8b:16:88:04:28:
99:59:40:fd:34:a6:9d:de:fc:8e:93:02:9f:7a:d4:
e2:ee:93:e7:d8:d8:bd:c5:30:27:de:09:2b:11:0d:
0c:08:e8:84:43:c3:a1:10:09:46:58:bc:68:c7:4d:
53:04:fa:fa:69:3c:68:f6:ae:78:de:4c:67:ed:d2:
41:80:0c:f4:53:2c:9d:7c:0a:a5:d2:71:22:4d:38:
0d:c3:ea:07:9a:1f:21:22:b9:1a:ef:76:6a:ea:4b:
47:97:c6:6b:c4:73:d1:94:08:fb:d0:5b:16:bf:10:
fd:ac:0b:4b:1d:b2:5b:f8:7c:9d:9b:eb:4a:31:1c:
e4:bc:5a:00:46:29:eb:54:42:0c:cc:57:ff:89:d9:
9d:ed:f9:b8:96:45:bb:0e:17:20:18:70:5a:46:f5:
94:78:6b:f7:ab:fd:1b:b7:50:a2:6a:34:e7:27:d6:
2b:c1:28:7e:0a:0c:69:8d:ca:5c:7d:b4:20:7c:8e:
7d:53:c4:1e:c9:6d:62:91:18:7b:f1:69:0f:1e:82:
7a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:00:B5:AB:FE:5B:82:C3:E6:44:E0:01:DB:42:F6:51:CB:5E:13:C8
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-AC1q_5bgsPmROAB20L2UcteE8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.64.0/22
92.60.43.0/24
IPv6:
2a09:7::/36
2a0d:c7c1::/32
Signature Algorithm: sha256WithRSAEncryption
52:a5:59:48:6a:fd:0b:22:b9:97:ae:1d:32:f8:63:1f:87:72:
99:71:f0:33:ce:18:e0:80:a1:00:0d:d6:02:3b:0e:30:14:81:
60:06:3f:58:d6:01:d3:cb:95:6d:b0:8a:e5:64:8a:ca:7c:c6:
7a:9d:0e:c1:c3:8b:e1:25:4d:34:09:86:38:1d:50:36:85:40:
a4:17:07:0e:8c:db:78:cd:e1:63:d1:35:74:6e:a7:6f:4d:1f:
52:1d:d2:8d:b0:30:d2:d7:dc:65:56:3b:b0:8a:7d:c1:0d:c3:
e7:15:2a:d8:d6:96:b0:40:0b:6f:53:55:b3:76:0d:c0:25:e0:
9c:01:09:0f:09:0e:bb:df:58:f2:c4:0c:5d:b1:97:ae:2b:cd:
8a:22:ba:ed:57:a5:73:d5:db:e6:42:2f:8b:03:a7:6c:49:0d:
7c:fa:d2:a6:3c:ba:45:67:dd:f6:52:94:30:a9:61:68:54:5e:
df:53:a5:66:28:35:13:9c:5b:99:ca:8c:d6:55:1d:02:74:c7:
89:89:8d:ed:e1:62:73:ca:03:6f:b9:d9:81:33:c7:d2:fd:0e:
06:ad:4d:a4:08:2d:50:15:3d:a1:c5:ec:bc:39:05:ac:64:6b:
47:1c:08:70:60:40:3a:11:e8:18:51:d7:7c:78:63:5f:90:b6:
0f:58:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 03:57:08 2024 by rpki-client on console-ams.rpki-client.org