Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/T09axjj-H9A_PmZSP4957CDJz2I.roa
File: T09axjj-H9A_PmZSP4957CDJz2I.roa (raw, json)
Hash identifier: NgMAQHcMr3j6FdIAPjxvuruXOoAOHCn8KOjMmgPFxjE=
Subject key identifier: 4F:4F:5A:C6:38:FE:1F:D0:3F:3E:66:52:3F:8F:79:EC:20:C9:CF:62
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0192C3CE67DDD3EA7840C4642552F96F7C94
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/T09axjj-H9A_PmZSP4957CDJz2I.roa
Signing time: Fri 25 Oct 2024 13:12:17 +0000
ROA not before: Fri 25 Oct 2024 13:12:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55933
IP address blocks: 45.89.232.0/23 maxlen: 24
45.94.43.0/24 maxlen: 24
185.207.152.0/22 maxlen: 22
185.207.152.0/24 maxlen: 24
185.207.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c3:ce:67:dd:d3:ea:78:40:c4:64:25:52:f9:6f:7c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Oct 25 13:12:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f4f5ac638fe1fd03f3e66523f8f79ec20c9cf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a8:21:cb:a5:7d:32:3e:d9:f2:71:1a:0f:c2:
58:57:0b:15:a1:c4:c9:0e:df:b9:61:e0:9e:7f:d0:
6f:14:df:49:35:b8:5f:2b:29:a0:e1:bd:44:88:66:
5c:78:5f:fa:93:1a:74:bc:2b:fd:ff:4e:2b:32:c1:
9e:c1:39:73:42:41:ba:e3:c8:5d:48:24:e1:f1:6d:
1b:00:df:14:7c:26:e7:82:86:66:b9:ad:35:f7:61:
bb:42:b0:9e:b8:79:97:b5:01:2c:83:9e:8d:f6:71:
02:0d:b6:0c:fe:8d:03:b5:2b:72:88:8c:11:b1:cd:
65:fc:4a:85:7b:8e:c9:02:10:d2:1e:10:35:e0:52:
90:be:f3:90:cc:14:8a:02:c5:dc:b6:9c:4b:f4:d3:
28:6d:2d:a5:af:53:23:e0:2b:13:a2:39:9b:87:9c:
2a:3e:6e:49:f8:11:47:8d:35:de:7e:55:11:24:b7:
ce:83:20:e7:a6:89:5d:57:30:af:3a:5d:44:58:12:
e6:ca:99:a5:3c:e6:fe:5a:b7:5f:e5:da:ad:0f:23:
e5:5e:49:41:cf:a2:7d:60:cd:44:b3:67:5a:79:0a:
ae:4d:89:43:29:6d:7e:61:02:69:12:75:aa:f5:81:
46:cc:b0:73:72:24:38:ae:19:1c:f9:15:9d:d4:4d:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4F:5A:C6:38:FE:1F:D0:3F:3E:66:52:3F:8F:79:EC:20:C9:CF:62
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/T09axjj-H9A_PmZSP4957CDJz2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.232.0/23
45.94.43.0/24
185.207.152.0/22
Signature Algorithm: sha256WithRSAEncryption
63:1d:08:50:4d:2a:e1:fc:d5:e0:db:18:95:64:cc:ea:c9:47:
ae:af:c7:3d:f4:f3:01:d7:0f:9c:c5:10:6a:22:c1:dd:b7:87:
68:95:b9:f5:6c:30:0e:1f:6c:c1:7f:9a:34:60:20:2c:df:4e:
3c:07:91:3e:98:a5:49:99:64:61:6c:3f:c3:8f:42:53:4b:55:
44:e0:ec:4d:47:ab:12:cd:3c:32:bd:7f:d3:d6:56:0f:d5:7d:
9c:87:a8:44:b0:ec:1f:0c:c6:7b:bf:b9:e6:7e:c7:7c:6e:91:
41:1e:4b:0e:a9:96:4e:64:30:cd:8a:ce:c9:51:71:b0:e0:bc:
10:31:86:f8:13:24:94:75:e0:c7:51:af:7c:4f:76:ee:29:53:
bb:70:4f:18:ee:6b:9c:68:34:0b:8e:97:df:78:70:ec:3d:e3:
0e:13:3c:b2:cd:54:6f:90:e4:91:32:ee:ea:9c:39:14:81:c4:
3b:b4:98:0a:bf:cd:3e:06:83:11:79:61:43:30:31:72:26:83:
8a:fc:46:38:69:0e:f4:a6:21:10:b5:ab:bb:48:3b:17:34:e0:
99:18:1d:a1:db:8e:31:d6:81:39:26:08:8c:44:f2:89:41:41:
0c:c2:7f:73:0f:cf:8a:3d:d2:90:1c:24:8f:89:6f:d1:af:88:
51:7d:89:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:52:31 2024 by rpki-client on console-fra.rpki-client.org