Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/tfV9lhE4FoJp16kUlc3Yu14Utjg.roa
File: tfV9lhE4FoJp16kUlc3Yu14Utjg.roa (raw, json)
Hash identifier: 3lQjoj+RVqGzeTgaqcql+GWWBcaFShf34pE91EusvHA=
Subject key identifier: B5:F5:7D:96:11:38:16:82:69:D7:A9:14:95:CD:D8:BB:5E:14:B6:38
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01936910D45B27295CE4BD779462D959C603
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/tfV9lhE4FoJp16kUlc3Yu14Utjg.roa
Signing time: Tue 26 Nov 2024 15:22:10 +0000
ROA not before: Tue 26 Nov 2024 15:22:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55933
IP address blocks: 45.153.128.0/22 maxlen: 22
45.153.128.0/23 maxlen: 23
45.153.130.0/23 maxlen: 23
193.42.24.0/22 maxlen: 22
193.42.24.0/23 maxlen: 23
193.42.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:10:d4:5b:27:29:5c:e4:bd:77:94:62:d9:59:c6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Nov 26 15:22:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5f57d961138168269d7a91495cdd8bb5e14b638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:e2:9e:f4:5b:61:19:98:06:40:33:b2:ec:
64:38:04:88:eb:88:8a:6f:be:0b:fd:26:4f:98:12:
44:8e:ed:b4:b9:7f:95:55:83:dd:53:61:18:c3:de:
52:b8:44:24:a7:f0:d2:88:b1:cf:e6:13:2e:4f:4a:
f7:e6:4f:6d:45:b2:99:60:5b:4e:bf:e1:38:cb:71:
00:73:cf:d6:e5:86:c2:a1:ea:d5:ac:85:2d:f2:ad:
c4:9d:81:e9:b2:b7:71:f5:24:c4:58:4a:fb:52:4c:
d1:cc:7b:c5:ab:95:e2:08:a3:da:13:50:b2:b8:94:
3f:a1:d7:92:06:f1:d9:a4:b0:af:de:10:e0:d2:c0:
4f:51:87:48:a4:90:36:7d:85:b0:68:b4:48:a8:6c:
69:72:b3:7d:7d:cf:29:48:89:4b:c3:b8:c2:31:06:
25:47:bc:3c:39:62:43:1d:9a:39:9a:ee:1c:54:66:
71:7a:46:2a:20:f2:7b:4c:e9:13:ca:1e:51:ae:d5:
1f:05:09:16:a5:0c:85:91:df:6f:41:cb:92:5e:27:
d4:37:ca:48:52:b9:92:ad:f6:c2:42:d4:9a:79:01:
b5:da:01:74:27:f2:20:00:b1:8b:8d:71:e2:ae:d7:
37:80:4b:dd:d2:64:02:76:34:64:be:d8:8f:ce:01:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F5:7D:96:11:38:16:82:69:D7:A9:14:95:CD:D8:BB:5E:14:B6:38
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/tfV9lhE4FoJp16kUlc3Yu14Utjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.128.0/22
193.42.24.0/22
Signature Algorithm: sha256WithRSAEncryption
85:24:5f:03:df:21:be:32:31:89:82:cd:2b:ae:60:c7:31:4a:
cd:21:c6:15:8f:9b:0f:f9:a0:5f:60:3a:66:89:6b:94:dc:ee:
bb:b2:b0:4e:94:96:ea:fc:21:02:21:3a:29:67:4b:f5:b2:31:
fa:aa:7b:6d:d7:db:5d:0f:41:55:79:6b:28:00:1b:76:c8:f6:
c6:39:e0:1b:21:f3:d8:5a:cc:40:95:3a:81:c6:b8:d0:45:b4:
7a:29:64:aa:94:2f:bb:0b:21:a6:66:00:2a:b7:9c:a6:d8:e5:
d4:22:4e:67:52:2e:66:05:68:ee:88:15:a8:7d:cf:13:ba:ca:
15:6b:4e:08:79:4c:90:53:e1:1c:e3:4e:68:43:14:cb:ff:95:
b9:f3:ec:c3:94:be:0e:7a:b7:1c:e0:83:f8:43:b3:3e:fb:e2:
ac:43:e6:02:da:47:a6:68:ea:c0:5b:30:4f:34:d7:67:f2:22:
7b:0d:54:84:d3:ec:4b:1c:c3:58:b2:eb:9f:24:1e:d5:5d:e2:
8d:a3:bd:6b:d6:e7:f4:87:1d:c9:10:c7:85:c3:3e:92:9c:d6:
50:91:be:68:c7:3c:d7:82:8c:ca:cc:fe:e5:24:0d:98:93:3c:
b7:d9:55:ee:f2:3c:34:52:44:da:45:a3:ae:01:35:86:5e:39:
60:46:74:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 18:45:20 2024 by rpki-client on console-fra.rpki-client.org