Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Fdt1iGaS23g14pn-1Cg1vzeWNIY.roa
File: Fdt1iGaS23g14pn-1Cg1vzeWNIY.roa (raw, json)
Hash identifier: cK90/pxbp63PTFvUDTxqoOKcauShCoVef34xPQt4LRI=
Subject key identifier: 15:DB:75:88:66:92:DB:78:35:E2:99:FE:D4:28:35:BF:37:96:34:86
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019006FC45A730A2CE8C85FABF572FEB0D34
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Fdt1iGaS23g14pn-1Cg1vzeWNIY.roa
Signing time: Tue 11 Jun 2024 11:08:34 +0000
ROA not before: Tue 11 Jun 2024 11:08:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35277
IP address blocks: 5.181.202.0/23 maxlen: 24
45.85.117.0/24 maxlen: 24
45.155.120.0/23 maxlen: 24
185.36.141.0/24 maxlen: 24
185.36.142.0/23 maxlen: 24
185.225.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:fc:45:a7:30:a2:ce:8c:85:fa:bf:57:2f:eb:0d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jun 11 11:08:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15db75886692db7835e299fed42835bf37963486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:c1:13:ca:fd:24:44:c0:28:b6:f5:d8:a9:
2b:b2:6a:62:7c:40:4b:46:74:e0:0a:d6:44:c2:68:
c5:aa:53:b7:1b:c0:01:b1:80:fb:3f:8b:c7:cd:26:
33:0b:74:42:1e:46:5a:b2:57:98:70:27:27:9e:56:
ca:30:a1:de:dd:b7:77:76:08:ca:4c:2b:05:98:25:
49:8b:3d:7e:f9:7d:26:2c:36:d9:1a:34:17:76:8d:
d4:40:45:6a:0e:9e:bd:ec:a3:1e:5a:01:30:ff:9e:
56:8b:71:e6:98:3f:d8:fd:59:89:6a:7b:31:71:b2:
11:c3:f1:a8:1f:57:be:6f:29:1b:87:43:d2:c9:11:
55:9f:62:fa:1d:a6:56:61:e5:4c:40:10:74:ee:67:
08:0d:a3:d6:8a:83:61:e1:d8:25:f4:1f:80:9e:04:
5d:9a:8f:4b:ce:72:4d:b8:9b:dd:39:b4:0a:6a:f0:
07:a9:8e:40:8b:c3:78:63:41:d3:7c:5c:ef:65:a7:
a9:62:ce:ca:61:84:c4:79:e4:5f:69:91:b9:c4:93:
06:d9:86:ed:0f:f6:87:1f:50:1d:94:ab:c0:aa:05:
97:8b:19:eb:39:8b:69:a9:58:a3:c6:3d:f6:34:df:
f3:7d:96:a0:c2:b8:cd:0d:3f:66:77:d6:0c:a5:3b:
3a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DB:75:88:66:92:DB:78:35:E2:99:FE:D4:28:35:BF:37:96:34:86
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Fdt1iGaS23g14pn-1Cg1vzeWNIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.202.0/23
45.85.117.0/24
45.155.120.0/23
185.36.141.0-185.36.143.255
185.225.205.0/24
Signature Algorithm: sha256WithRSAEncryption
55:2a:ec:b5:ab:b9:02:4b:a4:2e:b9:57:18:0a:f8:8e:96:ee:
5c:20:a1:42:70:d3:75:bb:22:b0:81:74:44:1b:10:b2:49:39:
ee:7b:52:96:a3:68:39:6e:43:fb:d0:85:a5:de:39:1b:a0:87:
76:f9:89:82:5b:e5:50:c7:59:01:99:f6:27:62:c9:97:9f:5e:
1b:c2:a4:ba:33:72:a7:40:01:07:31:f1:8e:5c:e4:47:64:02:
c9:a1:b0:db:f8:21:f8:78:bf:b3:cf:55:26:58:b8:dd:c6:6c:
ca:73:e9:24:cd:99:12:00:45:98:61:af:68:17:29:c4:69:f1:
e8:72:b4:73:61:d6:dd:e4:71:2c:7f:f5:85:7e:36:f0:a7:eb:
a2:98:0b:10:b3:f2:0c:91:55:e5:44:88:80:d4:66:c7:3c:e8:
2d:25:af:a9:9c:0e:a4:f5:7b:41:95:a0:58:38:cb:d0:d1:b5:
f9:c5:02:24:3d:fc:22:53:f2:72:42:73:d7:01:24:a8:00:55:
b4:68:81:a3:37:9e:d2:20:b5:5c:8c:1c:04:da:7f:84:42:38:
0c:78:22:30:de:9d:e7:df:27:9c:37:9f:3f:b8:9f:c3:85:b4:
28:dc:b4:0a:4a:13:4a:f3:e4:96:ab:d8:bb:44:10:32:bd:0c:
7e:ea:8f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:37:14 2024 by rpki-client on console-ams.rpki-client.org