Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/hbAi6kCzl7rAJV8bYok9S9sdpMA.roa
File: hbAi6kCzl7rAJV8bYok9S9sdpMA.roa (raw, json)
Hash identifier: iyv3agVRhEWUDv+UUgBbDsY6lXENTbJN9l2wUjgZ3Qk=
Subject key identifier: 85:B0:22:EA:40:B3:97:BA:C0:25:5F:1B:62:89:3D:4B:DB:1D:A4:C0
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01936910D2DE04DB28FCB73ED7DFED324672
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/hbAi6kCzl7rAJV8bYok9S9sdpMA.roa
Signing time: Tue 26 Nov 2024 15:22:10 +0000
ROA not before: Tue 26 Nov 2024 15:22:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.81.129.0/24 maxlen: 24
45.81.130.0/23 maxlen: 23
45.128.144.0/24 maxlen: 24
45.128.145.0/24 maxlen: 24
45.131.176.0/24 maxlen: 24
45.131.177.0/24 maxlen: 24
45.132.236.0/24 maxlen: 24
45.132.237.0/24 maxlen: 24
45.133.236.0/24 maxlen: 24
45.133.237.0/24 maxlen: 24
45.134.80.0/24 maxlen: 24
45.134.81.0/24 maxlen: 24
45.137.8.0/24 maxlen: 24
45.137.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:10:d2:de:04:db:28:fc:b7:3e:d7:df:ed:32:46:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Nov 26 15:22:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85b022ea40b397bac0255f1b62893d4bdb1da4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:d8:05:0b:f0:a2:37:9e:f5:1d:ce:e0:e6:
e5:8a:bd:e7:69:d0:fa:e6:67:df:e7:14:a3:0f:2e:
66:01:e9:eb:9a:00:81:71:3f:f8:0d:66:39:79:ba:
31:ef:bf:0b:41:fb:40:44:19:45:72:d4:5b:d2:24:
da:e5:5b:4c:97:53:b3:9d:5a:07:d2:a6:dd:11:0f:
a1:26:c3:5b:6d:7c:da:90:b3:7b:b8:9e:6d:a8:fb:
58:e9:a0:90:3d:8b:13:1c:c3:b7:06:d1:6c:1d:8a:
2f:26:57:19:40:11:96:4f:0f:e2:4e:17:9a:36:d3:
ee:e4:66:ce:fd:11:fe:c5:ae:06:f5:85:10:56:bd:
6e:b3:13:91:c1:59:5f:b9:16:40:21:d4:79:d1:d1:
d2:0f:e1:28:73:56:3f:1f:71:95:3b:30:5e:52:14:
83:1e:7e:fe:1a:4d:7c:4c:ca:c1:8f:f2:98:a7:e3:
9a:a9:13:61:c8:18:bb:aa:1b:7b:c6:29:d7:c9:1c:
7d:5a:bb:c1:f5:5e:1c:17:da:1d:0a:a4:d3:cd:f0:
bb:bb:b1:65:85:a3:11:51:15:bb:0d:d3:fc:58:ec:
dd:2b:57:b6:13:47:94:36:c8:5a:e1:50:a2:b6:b7:
4d:e6:b5:d0:57:0d:1a:bf:a5:f2:3e:99:67:90:78:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B0:22:EA:40:B3:97:BA:C0:25:5F:1B:62:89:3D:4B:DB:1D:A4:C0
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/hbAi6kCzl7rAJV8bYok9S9sdpMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.129.0-45.81.131.255
45.128.144.0/23
45.131.176.0/23
45.132.236.0/23
45.133.236.0/23
45.134.80.0/23
45.137.8.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:40:4a:4b:03:8c:64:fc:87:ba:8e:49:31:61:15:a5:77:79:
b1:32:1a:2c:82:ac:7b:91:5a:a3:ab:38:c1:ec:22:53:c5:df:
aa:e8:66:c1:17:a3:09:73:01:f4:ba:14:2c:bf:25:13:18:03:
dc:ac:f6:22:20:5f:0d:2d:e3:60:be:c6:bc:29:4a:3a:c4:3e:
0f:19:d1:3b:2b:a8:d1:25:9f:74:5a:57:5a:92:34:ef:33:ca:
ac:4c:de:1c:93:77:8a:9e:30:7c:3e:d6:b3:89:fc:0f:65:51:
fa:a7:6a:16:cb:c4:80:9b:a0:1a:b9:65:fd:2e:54:3e:67:8c:
9b:89:38:58:da:17:e0:66:88:f2:eb:b5:14:4f:fb:f3:a8:4f:
54:72:38:84:b1:c6:13:0f:93:3b:1b:d5:85:c6:76:37:cd:d4:
3a:33:06:27:10:23:30:26:3a:f7:c8:94:67:19:36:ae:0f:f9:
96:4a:89:69:84:61:e1:89:0e:d3:87:3c:91:0d:39:8f:a3:c7:
db:fb:ca:14:11:21:50:3a:65:f8:ee:c3:0e:72:4e:3a:7b:00:
75:4b:be:6f:1f:53:b5:44:6b:44:bc:39:d1:76:d2:06:e2:5a:
78:c3:b3:42:19:65:63:73:68:90:6d:e1:f2:fd:04:3a:80:f1:
85:e8:8d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 18:45:20 2024 by rpki-client on console-fra.rpki-client.org