Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/L4_OEwfphYFUu2O8AamkOTy4e7E.roa
File: L4_OEwfphYFUu2O8AamkOTy4e7E.roa (raw, json)
Hash identifier: Ej1s9MyacyfWz2sIpk/8qYcq2bg6guFF18QITRc7viU=
Subject key identifier: 2F:8F:CE:13:07:E9:85:81:54:BB:63:BC:01:A9:A4:39:3C:B8:7B:B1
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018D25F1FA5849C22307190FFD5F1B2606FF
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/L4_OEwfphYFUu2O8AamkOTy4e7E.roa
Signing time: Sat 20 Jan 2024 08:17:11 +0000
ROA not before: Sat 20 Jan 2024 08:17:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 45.136.184.0/22 maxlen: 24
62.106.75.0/24 maxlen: 24
62.133.34.0/24 maxlen: 24
77.75.225.0/24 maxlen: 24
79.110.231.0/24 maxlen: 24
91.213.17.0/24 maxlen: 24
146.19.112.0/24 maxlen: 24
178.212.76.0/24 maxlen: 24
185.255.54.0/24 maxlen: 24
193.3.174.0/24 maxlen: 24
212.23.197.0/24 maxlen: 24
213.232.238.0/24 maxlen: 24
2a0b:4080::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:25:f1:fa:58:49:c2:23:07:19:0f:fd:5f:1b:26:06:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 20 08:17:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f8fce1307e9858154bb63bc01a9a4393cb87bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:80:5a:43:12:38:9d:50:f8:01:03:4d:f5:
1f:e2:92:c9:97:bf:85:27:a9:f5:61:3e:fe:82:6e:
10:b7:5e:d0:13:d1:1a:df:b9:00:fe:e7:40:6e:fc:
9b:ff:84:88:7d:0d:97:9e:2a:b4:68:89:13:02:6a:
18:7b:51:a7:3a:34:b8:94:9c:29:f3:3d:68:a5:82:
10:2a:dd:c4:f1:53:a1:39:ce:7f:f8:ba:a3:56:1b:
3e:38:df:9a:96:0a:f8:a7:b6:ba:3c:e1:ae:38:3a:
05:12:3b:9d:ac:12:bb:5b:88:ab:6f:cd:59:c0:13:
40:79:4a:21:14:ab:71:f2:fc:c4:d6:5e:55:64:b9:
b9:df:65:01:77:a4:63:25:0f:38:95:e0:a7:19:21:
64:55:17:82:5e:01:ca:dc:5b:93:5b:ec:9b:ae:c5:
8d:9a:6f:dc:c2:fe:5a:3b:4e:72:ed:02:92:80:7a:
3c:1d:f3:cd:00:14:48:fd:e0:ef:b4:1e:59:90:79:
a2:7f:b3:3a:d0:8d:aa:43:da:78:29:af:80:cf:a9:
fc:d8:3c:b0:f7:3b:3c:63:fa:53:5f:b0:39:59:2d:
bf:25:e1:1f:f0:b3:fe:8c:a1:d6:9c:75:8a:03:a5:
3c:c7:21:e1:12:70:2e:04:b5:fd:eb:01:93:83:21:
06:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8F:CE:13:07:E9:85:81:54:BB:63:BC:01:A9:A4:39:3C:B8:7B:B1
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/L4_OEwfphYFUu2O8AamkOTy4e7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.184.0/22
62.106.75.0/24
62.133.34.0/24
77.75.225.0/24
79.110.231.0/24
91.213.17.0/24
146.19.112.0/24
178.212.76.0/24
185.255.54.0/24
193.3.174.0/24
212.23.197.0/24
213.232.238.0/24
IPv6:
2a0b:4080::/32
Signature Algorithm: sha256WithRSAEncryption
2c:82:28:45:ac:de:7e:30:b7:be:94:95:75:f7:32:4e:00:08:
71:ab:90:c0:46:4b:3a:31:81:89:77:71:ff:d0:0a:0c:b6:40:
0b:cb:0f:80:32:6b:c9:52:2d:13:d5:32:50:bb:a7:bb:9c:5b:
4f:31:38:f8:99:a9:2d:31:f6:83:c7:b2:80:d0:54:81:2a:6d:
c5:5e:4f:69:71:12:f8:4c:5c:a9:8c:aa:a3:0f:85:3a:ab:5b:
de:63:f5:4f:5c:57:aa:01:37:b8:24:e8:58:fc:dd:72:c6:bc:
d2:eb:15:cd:d2:6e:d2:fc:29:aa:29:c3:bd:22:b2:73:a3:3a:
45:2c:b0:71:b1:10:c3:06:e5:16:64:10:e3:8c:b2:9d:bf:3f:
4f:c7:0a:c6:af:4f:39:3c:8d:96:ef:43:47:75:e0:ff:11:43:
0d:9a:63:99:a4:f5:e8:62:bb:57:63:a0:73:9c:74:ad:8f:95:
92:a4:1b:39:93:de:91:01:a0:95:79:6e:64:86:38:d1:a3:10:
41:57:27:52:54:d7:1a:2d:97:be:c2:bc:89:83:07:f9:9c:f3:
d9:a4:01:a0:5a:1e:6e:29:d6:a6:d7:65:69:c2:48:a7:9b:64:
12:7f:ad:7e:f1:ed:7c:41:e1:04:bc:70:33:cc:ca:e0:de:75:
51:65:fa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:28:42 2024 by rpki-client on console-ams.rpki-client.org