Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/SwxxPt5PZvIMHPOPp3FRpWoPh9Q.roa
File: SwxxPt5PZvIMHPOPp3FRpWoPh9Q.roa (raw, json)
Hash identifier: AdYY7m1WNPb9l9/DIWdM3egYrbUI4Qo/0booMdzEWcI=
Subject key identifier: 4B:0C:71:3E:DE:4F:66:F2:0C:1C:F3:8F:A7:71:51:A5:6A:0F:87:D4
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 019368EEF324A7CAB6EE32A031729362EE3F
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/SwxxPt5PZvIMHPOPp3FRpWoPh9Q.roa
Signing time: Tue 26 Nov 2024 14:45:10 +0000
ROA not before: Tue 26 Nov 2024 14:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138195
IP address blocks: 45.93.28.0/24 maxlen: 24
45.93.29.0/24 maxlen: 24
45.93.30.0/24 maxlen: 24
45.93.31.0/24 maxlen: 24
45.94.68.0/24 maxlen: 24
45.94.69.0/24 maxlen: 24
45.94.70.0/24 maxlen: 24
45.141.136.0/24 maxlen: 24
45.141.137.0/24 maxlen: 24
45.141.138.0/24 maxlen: 24
45.141.139.0/24 maxlen: 24
45.154.12.0/24 maxlen: 24
45.154.13.0/24 maxlen: 24
45.154.14.0/24 maxlen: 24
45.154.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ee:f3:24:a7:ca:b6:ee:32:a0:31:72:93:62:ee:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Nov 26 14:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b0c713ede4f66f20c1cf38fa77151a56a0f87d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8c:99:7a:87:73:80:10:4f:d7:55:37:00:ca:
74:7e:b6:21:6c:28:80:3a:b8:c7:f6:61:46:7e:ea:
bc:16:83:5a:c0:99:eb:33:91:51:c4:ab:eb:2e:f0:
43:9c:34:1c:4c:e7:6f:94:81:3b:4e:4a:09:23:fd:
b2:8d:c8:af:bf:1e:0f:4b:63:26:97:e8:b4:be:e4:
d2:b0:ae:46:08:e8:52:4c:7b:3e:df:aa:6d:c1:d1:
45:df:e7:71:0f:39:35:5c:16:a7:30:34:bd:89:59:
ee:f5:16:ac:17:06:0d:68:65:72:ad:94:2e:ef:1c:
a1:05:57:59:9f:cd:21:6c:6c:b8:eb:ba:3e:df:00:
b7:4d:42:59:85:7a:65:20:ae:e6:c2:60:a9:46:17:
b6:04:83:80:78:79:f8:da:2e:f1:78:58:20:dd:d6:
2d:27:61:d6:13:5c:6d:ed:fc:22:06:f2:cd:7e:92:
13:1d:2e:5e:ea:4d:fb:22:03:25:c2:98:45:81:7a:
51:3c:c9:08:85:17:76:2e:7e:51:38:60:82:e3:c8:
25:69:10:4a:4a:47:ae:6b:57:c5:0d:ac:2c:ba:09:
14:29:e3:f8:46:b9:83:b9:d8:64:77:6a:0b:ff:13:
bb:b9:21:6a:44:22:87:89:19:da:f8:65:8e:3b:97:
41:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0C:71:3E:DE:4F:66:F2:0C:1C:F3:8F:A7:71:51:A5:6A:0F:87:D4
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/SwxxPt5PZvIMHPOPp3FRpWoPh9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.28.0/22
45.94.68.0-45.94.70.255
45.141.136.0/22
45.154.12.0/22
Signature Algorithm: sha256WithRSAEncryption
58:42:8e:f6:82:68:5b:85:b2:d7:4b:34:08:e4:86:a3:8c:49:
30:04:15:a7:97:ca:91:3b:0d:2d:88:d7:b2:77:4f:72:3c:31:
8b:ed:44:66:cb:43:1b:ff:e2:c1:19:e5:04:51:f5:fd:55:23:
85:a9:fa:0c:dc:00:fe:72:3e:11:7f:5e:32:f5:ca:79:de:63:
af:7b:4e:f1:9d:62:c4:72:b0:23:3d:6c:f0:da:e1:45:69:d6:
38:71:87:d9:d4:4e:ed:ca:61:20:f0:55:60:cd:6b:af:a0:f5:
56:43:b0:e8:25:12:11:f3:61:c2:9b:df:2b:6f:73:14:08:e4:
dd:0c:a2:c7:3f:54:9a:3d:10:40:e4:00:1a:1d:ee:40:ab:04:
9f:9b:30:e6:f9:7f:27:84:64:57:6e:00:4d:6d:49:7c:f0:62:
6d:ec:28:72:d2:c2:cf:a0:08:91:af:e2:ab:e0:4e:ef:7a:fa:
a6:62:31:46:61:60:21:78:91:49:a0:98:5c:a5:e0:30:ef:90:
d6:7d:28:e3:61:9b:c9:8a:3d:ba:74:6c:e8:d7:a4:e8:bc:fa:
66:5d:7d:21:eb:76:ff:38:58:c5:85:ff:35:5a:6b:0f:55:f8:
2f:0f:ec:fa:02:0e:76:be:42:cc:e2:60:20:31:24:9a:3d:e2:
91:e5:0a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 17:53:49 2024 by rpki-client on console-ams.rpki-client.org