Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/1aGY_pLegLq_PpVOIxMUzW61L_Y.roa
File: 1aGY_pLegLq_PpVOIxMUzW61L_Y.roa (raw, json)
Hash identifier: AnVrlIkHv8z1gKd/1/MOiDEHuk1viVh9XlnvHYccoPA=
Subject key identifier: D5:A1:98:FE:92:DE:80:BA:BF:3E:95:4E:23:13:14:CD:6E:B5:2F:F6
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 018D615E73669F7C6FF23F28C95E59760ED9
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/1aGY_pLegLq_PpVOIxMUzW61L_Y.roa
Signing time: Wed 31 Jan 2024 21:13:16 +0000
ROA not before: Wed 31 Jan 2024 21:13:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201106
IP address blocks: 45.142.156.0/24 maxlen: 32
45.142.157.0/24 maxlen: 32
45.142.158.0/23 maxlen: 32
45.145.72.0/23 maxlen: 32
45.145.74.0/23 maxlen: 32
45.150.164.0/22 maxlen: 32
45.150.226.0/23 maxlen: 32
45.151.132.0/22 maxlen: 32
45.154.212.0/22 maxlen: 32
62.204.54.0/24 maxlen: 24
94.154.114.0/24 maxlen: 32
178.22.30.0/24 maxlen: 32
188.93.139.0/24 maxlen: 32
193.218.200.0/23 maxlen: 32
193.221.94.0/23 maxlen: 32
194.124.218.0/23 maxlen: 32
194.124.224.0/23 maxlen: 32
194.147.98.0/23 maxlen: 32
194.147.100.0/23 maxlen: 32
217.114.47.0/24 maxlen: 32
2a0e:da40:4000::/34 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:61:5e:73:66:9f:7c:6f:f2:3f:28:c9:5e:59:76:0e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Jan 31 21:13:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5a198fe92de80babf3e954e231314cd6eb52ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:27:9a:87:de:77:71:7a:1f:1e:fe:81:75:
0c:8c:0f:ae:f4:06:eb:1e:32:fb:cc:05:51:e2:8d:
dd:76:62:1f:64:cb:79:d1:98:92:cf:83:ea:10:b9:
04:8e:4b:d6:46:7f:2b:6a:a8:39:93:95:89:8f:84:
c9:11:47:0e:a7:03:6b:c0:56:c1:9b:f4:d2:d2:d4:
4a:0d:9f:16:83:6d:6c:2d:bd:df:16:9a:f6:10:ef:
78:f3:bf:94:2a:83:b2:3d:fa:a2:74:7b:63:dd:ca:
11:c4:eb:f3:85:ae:ef:e6:1a:ae:80:62:4e:0a:94:
0c:43:83:1d:ae:77:c9:0a:d8:42:7e:bf:02:e1:96:
e3:1a:4f:63:74:1a:8b:6c:f9:88:d4:80:ac:8b:e0:
2e:78:2d:0e:91:1c:2c:7d:4a:68:fa:0a:90:a1:c4:
17:d3:d8:6f:55:2f:fa:58:c5:4f:22:80:e0:7d:dd:
68:c7:74:b7:d9:da:c5:67:4d:a8:56:3a:4f:12:53:
fe:bd:3b:a3:c4:8b:bc:fc:a2:34:b8:9f:cf:dd:bb:
a5:d4:7e:cf:61:e5:ec:49:5d:b5:c1:be:43:45:26:
c2:eb:e1:ee:c2:cd:66:3c:2a:e5:cc:89:db:f0:93:
17:e8:5c:24:4a:ca:33:e4:43:8d:5b:7d:ad:19:b4:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A1:98:FE:92:DE:80:BA:BF:3E:95:4E:23:13:14:CD:6E:B5:2F:F6
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/1aGY_pLegLq_PpVOIxMUzW61L_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.156.0/22
45.145.72.0/22
45.150.164.0/22
45.150.226.0/23
45.151.132.0/22
45.154.212.0/22
62.204.54.0/24
94.154.114.0/24
178.22.30.0/24
188.93.139.0/24
193.218.200.0/23
193.221.94.0/23
194.124.218.0/23
194.124.224.0/23
194.147.98.0-194.147.101.255
217.114.47.0/24
IPv6:
2a0e:da40:4000::/34
Signature Algorithm: sha256WithRSAEncryption
0e:4b:68:96:79:a4:81:9c:51:7e:02:a3:bc:cd:86:db:df:03:
13:6e:bc:ad:53:a4:17:92:b3:13:98:69:bb:47:5b:4b:37:65:
6a:f8:c1:4b:f8:1b:8c:38:a1:74:d9:69:19:7d:40:b5:de:5c:
2d:50:31:29:12:e8:6d:ec:cb:0a:7a:84:aa:27:48:ec:ed:5f:
68:1f:7d:53:3f:cf:a8:6e:2f:af:43:d9:d0:53:cf:09:d0:17:
e8:07:00:12:0b:0f:0c:28:ed:0c:25:50:c9:27:ce:15:0b:d1:
6d:39:6d:b5:19:06:f7:e0:a8:31:40:a5:b9:80:f2:9b:ff:e8:
79:0a:f7:ce:94:a0:7e:ac:be:ac:dc:50:ec:14:68:16:03:42:
e5:80:c9:50:29:bf:bd:04:6f:f2:43:01:35:72:35:a7:a6:88:
0e:9d:61:87:76:c6:be:f3:e8:60:92:a1:1f:10:51:9b:42:2c:
f9:2b:95:d8:53:6b:f4:00:88:82:2f:2a:20:b1:60:b0:bf:14:
7a:93:94:71:d0:35:a3:bd:5f:b7:a2:10:8d:32:05:19:5b:49:
40:ed:93:77:5d:d8:2d:01:e0:ec:7f:2c:16:dd:61:cf:8f:b3:
f9:2f:ab:49:f4:c0:82:a2:2a:d5:9c:74:02:6e:a9:16:3a:f6:
d1:07:9e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:11:23 2024 by rpki-client on console-fra.rpki-client.org