Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/gRxTBK_W-Xtrd-qN086RL0cZq5E.roa
File: gRxTBK_W-Xtrd-qN086RL0cZq5E.roa (raw, json)
Hash identifier: B3e/1h55X427RFQ/VNvjM7IQDCXcJq1FteDnHFWW1qQ=
Subject key identifier: 81:1C:53:04:AF:D6:F9:7B:6B:77:EA:8D:D3:CE:91:2F:47:19:AB:91
Certificate issuer: /CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Certificate serial: 018CC871378B894A307107754AA3A9690504
Authority key identifier: 50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/gRxTBK_W-Xtrd-qN086RL0cZq5E.roa
Signing time: Tue 02 Jan 2024 04:31:52 +0000
ROA not before: Tue 02 Jan 2024 04:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206775
IP address blocks: 185.124.243.0/24 maxlen: 24
45.132.68.0/22 maxlen: 24
2a10:1340::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:37:8b:89:4a:30:71:07:75:4a:a3:a9:69:05:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Validity
Not Before: Jan 2 04:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=811c5304afd6f97b6b77ea8dd3ce912f4719ab91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:6a:4c:4d:d6:78:29:bb:80:65:4c:2d:6c:
b6:60:38:5c:af:5a:88:9a:92:e6:f3:51:24:fa:57:
bd:c9:36:47:10:fc:55:98:91:3a:cf:0f:bd:be:fa:
91:d0:9b:66:98:c4:15:42:60:89:dd:a0:e9:b7:c0:
3a:2e:3c:be:43:98:63:e9:a8:dd:c7:88:2c:41:de:
cd:a5:24:0d:6e:b6:1f:30:00:6d:71:46:59:e9:c2:
f8:e9:7c:1f:5f:94:4e:89:12:74:d1:39:5e:58:b1:
e2:8f:b1:66:d1:bf:24:33:f3:fc:dd:c5:96:ef:09:
06:15:2b:1e:ff:76:a8:1f:c7:de:b8:dc:31:02:c3:
f9:a4:00:de:a3:4f:b2:c2:8f:e4:6a:a8:56:2e:6d:
67:76:c0:aa:d0:28:0f:60:cd:47:65:0f:96:c9:63:
93:73:4e:cd:2c:89:7d:41:5b:05:2f:a8:fb:56:af:
03:09:a3:0b:43:0f:98:e2:dc:66:fa:7e:2e:aa:25:
49:ff:90:65:f9:49:4e:37:49:8d:11:66:a0:8d:2d:
3a:1f:13:17:16:6b:e6:b5:2b:12:c7:88:f9:e8:3a:
ad:e1:4e:a0:59:34:43:3b:55:1c:a8:96:d0:2a:bd:
8f:78:a4:92:cf:3e:a5:9a:39:53:23:7e:32:e4:86:
06:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1C:53:04:AF:D6:F9:7B:6B:77:EA:8D:D3:CE:91:2F:47:19:AB:91
X509v3 Authority Key Identifier:
keyid:50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/gRxTBK_W-Xtrd-qN086RL0cZq5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.68.0/22
185.124.243.0/24
IPv6:
2a10:1340::/29
Signature Algorithm: sha256WithRSAEncryption
a9:54:be:2b:32:4c:e2:07:eb:90:e3:60:c7:a4:97:80:78:e5:
7b:a5:b1:2c:48:56:b5:d9:24:0e:2c:95:59:a1:9b:fb:4f:2e:
a9:3a:0b:f0:19:58:7b:1c:7a:b8:37:8a:4f:3f:28:ce:55:73:
1b:f2:fe:75:0d:d5:da:37:68:fb:33:5b:75:cf:12:75:0d:9f:
ae:3b:ea:76:7e:0e:e2:d5:61:85:0d:cd:9f:77:23:11:0e:ed:
1d:ba:fe:44:19:84:e5:ae:d1:d2:2a:5a:d8:97:5d:2b:53:14:
8c:a3:74:38:ae:1a:8d:f6:7a:44:ef:bf:47:65:8a:74:38:d4:
71:92:c3:89:5e:45:bc:32:45:3f:0e:5b:4a:9e:27:8f:85:52:
32:7c:d7:07:78:ef:ef:69:09:d4:33:33:d7:9a:5d:fc:73:50:
ee:c8:03:79:ec:64:ad:c8:8d:c7:8a:0b:7e:a8:fc:53:52:d3:
59:ff:c1:86:3f:1c:91:de:08:bd:49:86:ab:7f:91:ef:a9:aa:
3e:1a:66:86:f1:9c:66:65:52:a4:c5:77:5c:9b:6f:9d:c6:e0:
ea:c7:2e:c4:8d:85:6c:ab:74:93:2f:89:27:ce:ef:cf:ba:ec:
56:78:11:97:fc:50:ba:55:cd:4d:f3:7f:1e:da:47:4b:9e:83:
4f:e0:54:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:36 2024 by rpki-client on console-ams.rpki-client.org