Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/i1Q2lQ6tlRs2uloEd_NEey6HfHg.roa
File: i1Q2lQ6tlRs2uloEd_NEey6HfHg.roa (raw, json)
Hash identifier: lpEtCO8tbnr/ECw1GOaQkZ2Q+ukL8n28yYKv38HMnf0=
Subject key identifier: 8B:54:36:95:0E:AD:95:1B:36:BA:5A:04:77:F3:44:7B:2E:87:7C:78
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 01916F6605B6CC081FDC9B44ECE9DB276ECD
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/i1Q2lQ6tlRs2uloEd_NEey6HfHg.roa
Signing time: Tue 20 Aug 2024 10:47:22 +0000
ROA not before: Tue 20 Aug 2024 10:47:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35277
IP address blocks: 5.181.202.0/23 maxlen: 24
45.85.117.0/24 maxlen: 24
45.155.120.0/23 maxlen: 24
185.36.141.0/24 maxlen: 24
185.36.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:66:05:b6:cc:08:1f:dc:9b:44:ec:e9:db:27:6e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Aug 20 10:47:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b5436950ead951b36ba5a0477f3447b2e877c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:b8:c5:25:0b:d4:40:02:e1:58:60:df:dc:
07:22:6f:ef:49:55:28:80:77:ef:4b:2f:3f:df:8a:
d3:4b:67:22:5b:d1:5e:75:de:a9:48:8a:bf:8b:1e:
a5:c9:9a:4d:2b:0f:19:64:db:5c:94:d0:97:95:13:
8f:b2:5e:68:35:37:6e:c8:64:10:ce:30:f9:9e:8d:
d5:11:61:3c:21:a3:4e:9c:01:4e:54:7d:5b:87:11:
a5:38:ab:f2:2a:63:d1:50:9f:ae:d1:36:bf:93:93:
1e:bf:50:7b:de:44:13:9d:a0:35:f6:18:57:80:d5:
8c:a0:4f:62:a8:1f:62:bb:d8:93:c6:56:11:35:96:
6b:39:b8:c0:2b:93:df:66:85:9c:24:77:21:e0:5e:
02:29:45:c0:da:bb:9b:72:18:0a:7d:3d:78:de:a5:
c5:46:c3:88:a9:26:ab:4d:04:15:cd:89:b8:81:06:
2e:e1:6b:5a:1c:e1:b5:ac:08:cd:ee:bc:47:3e:bf:
3b:5c:65:c1:94:ab:d5:2b:75:60:f5:32:ec:ce:63:
7c:6d:2f:59:fb:99:5a:ab:99:7d:89:7e:c3:68:56:
9b:70:dd:88:2b:87:75:6b:81:fb:0c:bd:b1:54:1a:
e4:0a:21:bd:2b:e3:93:86:f6:a5:26:83:df:a4:4c:
0d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:54:36:95:0E:AD:95:1B:36:BA:5A:04:77:F3:44:7B:2E:87:7C:78
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/i1Q2lQ6tlRs2uloEd_NEey6HfHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.202.0/23
45.85.117.0/24
45.155.120.0/23
185.36.141.0-185.36.143.255
Signature Algorithm: sha256WithRSAEncryption
38:23:e5:65:10:24:fb:7e:41:43:d4:79:2f:76:b6:08:8c:4d:
46:76:a1:9d:2f:81:8a:b5:68:15:14:af:9c:b2:0f:99:9a:aa:
65:b5:89:3c:a2:22:9f:27:b0:30:9c:c0:94:9b:93:1c:d1:5b:
c4:71:46:b0:34:1a:c9:ef:ba:ff:a3:2c:5b:eb:7d:5d:cb:f5:
91:15:80:ef:85:9e:32:26:75:e6:f0:9f:a9:c4:4c:0c:7a:de:
0a:82:8a:5a:9e:f8:ca:ec:97:62:cf:34:22:7c:b8:dd:63:70:
f8:f5:c8:3c:65:64:d5:2f:c6:d2:32:6e:dd:a1:74:8c:2a:b8:
5e:71:83:85:af:12:78:da:02:67:73:39:70:5b:b2:19:a6:a6:
9a:8b:fc:34:28:b5:90:74:47:11:27:1f:99:f8:42:5a:fa:56:
85:1b:2a:04:53:33:4d:7e:86:74:ec:fc:56:fd:e8:3f:89:cd:
7a:45:d2:ad:25:fa:e9:6e:cb:28:d1:ff:7f:f7:ef:9a:05:9c:
70:7e:11:05:34:fc:21:ee:e7:7a:89:8d:5f:51:25:82:a8:df:
75:fe:70:b8:2b:ad:da:21:51:58:d7:bd:e5:be:31:8a:45:e1:
93:31:d5:ae:b1:ab:7d:aa:2b:35:d3:6e:d5:fc:c2:93:75:fa:
e5:8e:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:12:57 2024 by rpki-client on console-ams.rpki-client.org