Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/9xzZeJilaEjV38HOobGS0eXI0kQ.roa
File: 9xzZeJilaEjV38HOobGS0eXI0kQ.roa (raw, json)
Hash identifier: j5QDenV1v4SrSiC/7cdHOhhr0ExQrc8/kiPaNmYJvDc=
Subject key identifier: F7:1C:D9:78:98:A5:68:48:D5:DF:C1:CE:A1:B1:92:D1:E5:C8:D2:44
Certificate issuer: /CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Certificate serial: 018CC8010896B1839FE91AC2BDB07EC30ACE
Authority key identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/9xzZeJilaEjV38HOobGS0eXI0kQ.roa
Signing time: Tue 02 Jan 2024 02:29:20 +0000
ROA not before: Tue 02 Jan 2024 02:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41405
IP address blocks: 45.146.212.0/22 maxlen: 22
185.123.84.0/22 maxlen: 22
195.200.217.0/24 maxlen: 24
91.223.159.0/24 maxlen: 24
2a06:ac00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:08:96:b1:83:9f:e9:1a:c2:bd:b0:7e:c3:0a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f71cd97898a56848d5dfc1cea1b192d1e5c8d244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9f:d3:1a:70:41:fa:16:57:ba:29:81:97:01:
78:01:1f:d6:cb:5d:d1:48:90:9b:b3:33:61:e7:f4:
a7:f3:bb:25:ed:4e:60:c8:f4:ca:b0:0b:72:42:64:
c5:df:36:d7:c8:aa:40:10:77:01:b7:4c:93:56:b0:
fc:22:c1:15:44:37:4d:29:84:19:ba:31:b8:82:b5:
c3:68:53:f8:d7:c5:85:66:b8:12:df:5b:c5:94:99:
35:60:05:8a:c0:b6:54:62:2b:57:25:ec:41:e6:62:
d5:fd:8a:e0:bb:35:aa:e2:96:3a:e7:ba:94:36:cc:
bb:ff:c7:e8:48:06:e5:d3:bb:24:76:7a:3a:6c:04:
2f:66:57:77:91:2e:cf:5e:bc:7c:09:51:94:88:0d:
d9:54:4b:65:b7:83:f7:c8:58:2e:5b:49:bc:89:5c:
04:29:40:b1:a0:61:76:f0:73:24:f9:af:9e:6a:83:
fb:72:96:0b:44:92:50:3f:b5:0b:72:16:b3:53:2d:
43:ff:ef:c0:dd:b1:86:5a:ff:56:ee:0a:e9:d3:60:
26:0f:9e:4f:b5:58:11:bd:0c:3d:0d:4e:f4:53:ad:
8f:7c:b2:8e:59:af:eb:8e:57:77:15:73:a8:c6:ba:
ce:be:31:ac:f9:c2:68:44:d8:eb:4c:aa:7e:1b:ec:
56:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1C:D9:78:98:A5:68:48:D5:DF:C1:CE:A1:B1:92:D1:E5:C8:D2:44
X509v3 Authority Key Identifier:
keyid:2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/9xzZeJilaEjV38HOobGS0eXI0kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.212.0/22
91.223.159.0/24
185.123.84.0/22
195.200.217.0/24
IPv6:
2a06:ac00::/29
Signature Algorithm: sha256WithRSAEncryption
44:4a:3d:e6:b4:e1:70:1a:71:fc:b4:cf:ed:f5:b5:3c:f4:ba:
5e:d3:08:0f:7f:32:7c:dd:67:a5:0d:10:1e:76:f3:e6:7b:d1:
e4:48:82:75:d8:df:f0:4d:a0:8b:2d:dc:f0:f4:ad:dd:a1:dd:
ac:3c:f2:00:f4:29:4d:5d:a8:9d:3f:5c:0d:1b:a7:2a:b8:a7:
cb:e9:b4:60:6a:fb:09:9a:4c:d1:59:fd:83:ea:3e:8a:80:d4:
c0:67:89:c4:ef:c0:ec:22:6d:9e:b0:e7:15:4c:a1:ae:e9:65:
5b:d8:32:46:c8:50:4b:a4:77:1b:dc:32:07:c2:74:21:55:be:
89:7f:ee:26:29:eb:ab:d1:a2:96:43:77:5c:f2:3d:e5:ab:9d:
99:f1:36:d8:72:1e:90:f1:3b:24:6b:01:ab:81:bf:9c:14:e3:
a7:c0:80:a9:d6:31:9f:4f:87:6b:0a:dc:c6:51:00:3b:9d:99:
44:bf:f6:d3:0d:30:77:12:b5:48:5f:27:1b:38:1b:c5:0f:62:
5d:71:79:6f:e4:92:f4:59:61:dd:11:15:92:63:fa:62:f0:69:
db:7c:29:a8:20:d0:74:50:e0:0c:24:ed:fe:d2:9d:4a:4d:99:
55:87:de:60:6e:be:d9:43:55:07:1f:26:fe:0b:6b:bc:9d:de:
8a:85:58:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:50:25 2024 by rpki-client on console-fra.rpki-client.org