Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/XwB_Ca9nI1saYwg65fPD69WCzno.roa
File: XwB_Ca9nI1saYwg65fPD69WCzno.roa (raw, json)
Hash identifier: ymp8JzYgoyrmrFp+3lX4SuhWOApOPWhMtBuvq8EoHgc=
Subject key identifier: 5F:00:7F:09:AF:67:23:5B:1A:63:08:3A:E5:F3:C3:EB:D5:82:CE:7A
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 018D650C86DA535748A34BE7FC0C59F40596
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/XwB_Ca9nI1saYwg65fPD69WCzno.roa
Signing time: Thu 01 Feb 2024 14:22:16 +0000
ROA not before: Thu 01 Feb 2024 14:22:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 45.132.112.0/24 maxlen: 24
45.152.34.0/23 maxlen: 24
62.68.81.0/24 maxlen: 24
79.143.128.0/24 maxlen: 24
79.143.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:0c:86:da:53:57:48:a3:4b:e7:fc:0c:59:f4:05:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Feb 1 14:22:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f007f09af67235b1a63083ae5f3c3ebd582ce7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:10:63:65:1c:59:61:af:e1:e1:fa:6e:9e:72:
f2:89:1c:3b:d9:bd:43:96:5e:c3:3a:6d:a8:59:0e:
a5:aa:bb:2b:c0:ee:89:bf:7d:02:dd:79:f2:af:af:
bf:0e:49:56:dd:43:a1:12:35:85:80:ac:63:24:35:
89:ac:68:57:36:74:d0:46:9e:a5:c9:e2:e1:a2:9e:
1e:e6:8c:0e:8f:03:00:fa:9f:96:60:24:43:cc:dc:
66:e4:08:7e:14:7d:5e:4d:06:a8:1b:34:5a:ae:29:
cd:f6:a9:69:9e:0e:18:6f:e9:d4:3a:78:5b:17:9a:
99:59:92:fa:79:6a:39:41:a3:af:f8:89:03:58:63:
60:aa:5d:02:ad:55:51:da:e3:6f:b8:fd:9c:6e:99:
f9:74:22:1b:21:36:05:3f:b0:f9:d1:37:97:b3:75:
65:ba:4b:1e:e3:3b:31:15:94:90:4a:50:84:fa:6b:
ae:18:02:3e:82:be:8a:1b:34:d5:43:af:c7:12:78:
02:05:7d:66:38:98:6e:ef:79:45:86:81:57:c5:19:
ad:12:97:17:79:99:e3:2c:65:03:00:46:7c:d4:3e:
05:71:dd:cb:8c:37:1b:0c:72:17:48:2b:b1:18:a5:
56:67:da:8d:8f:c4:23:49:28:c8:bc:d7:6b:0b:cb:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:00:7F:09:AF:67:23:5B:1A:63:08:3A:E5:F3:C3:EB:D5:82:CE:7A
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/XwB_Ca9nI1saYwg65fPD69WCzno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.112.0/24
45.152.34.0/23
62.68.81.0/24
79.143.128.0/24
79.143.130.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d4:5f:95:85:3f:ba:21:45:8d:27:f4:b7:20:b1:39:1b:39:
a4:a4:62:54:8e:17:3f:01:e2:7b:31:69:8c:d8:00:fd:42:01:
d7:38:b9:2d:65:5a:bb:5b:41:c5:95:ac:7c:63:b2:91:10:f8:
9b:fa:92:f1:43:9a:4f:13:fd:45:dc:26:d0:42:dc:17:4d:3e:
ef:6c:cf:3e:e2:fc:06:7b:f7:05:d4:bf:64:ae:60:b6:b3:a8:
32:14:11:7e:35:39:76:a7:e1:62:ae:af:1a:60:70:d8:00:04:
94:81:90:d1:a5:50:1c:ff:bf:3b:2b:46:3d:c9:52:9b:86:02:
4e:2a:50:e8:ae:05:38:67:b6:00:a0:a3:f7:91:d5:92:3e:d2:
b1:7e:eb:5c:31:b7:b5:bb:f9:0a:c8:66:e6:0b:52:35:8c:de:
96:05:88:83:5b:4f:0a:cb:54:a2:4f:18:35:bb:14:8d:8d:7b:
d8:0c:2a:b6:db:89:db:cf:53:44:aa:c6:2e:8e:4e:b2:36:94:
74:dc:01:0c:a9:1f:27:1c:68:1f:a6:e1:a1:6b:39:ef:56:6a:
c1:85:ce:35:fc:ff:da:a4:95:b9:5d:a3:74:4b:1f:45:c9:52:
70:99:6f:47:ce:1b:65:53:b6:d6:a6:c8:44:8c:87:dd:26:4b:
00:86:2e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:48:19 2024 by rpki-client on console-fra.rpki-client.org