Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/Sxc6oSjCwCfzdOIXuRAz02mCDTw.roa
File: Sxc6oSjCwCfzdOIXuRAz02mCDTw.roa (raw, json)
Hash identifier: nP6QXyUqXZuFCor2w0yS/DLk2R4kNHZtsqHtpQBMGlM=
Subject key identifier: 4B:17:3A:A1:28:C2:C0:27:F3:74:E2:17:B9:10:33:D3:69:82:0D:3C
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 018EF520B8B4C9DAAFEEC141166A33CB5E88
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/Sxc6oSjCwCfzdOIXuRAz02mCDTw.roa
Signing time: Fri 19 Apr 2024 06:52:25 +0000
ROA not before: Fri 19 Apr 2024 06:52:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201714
IP address blocks: 45.85.100.0/24 maxlen: 24
185.66.4.0/22 maxlen: 24
185.66.4.0/24 maxlen: 24
185.66.5.0/24 maxlen: 24
185.66.6.0/24 maxlen: 24
185.66.7.0/24 maxlen: 24
2a03:1ea0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:20:b8:b4:c9:da:af:ee:c1:41:16:6a:33:cb:5e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: Apr 19 06:52:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b173aa128c2c027f374e217b91033d369820d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:a8:06:75:e8:55:99:c8:b0:3a:8f:c3:a6:
44:59:f3:5f:cf:b5:8f:d1:ce:0e:18:e8:61:59:f4:
af:79:5f:25:86:50:6b:b8:5d:58:13:07:7d:53:45:
01:96:67:bf:c1:75:bb:a1:48:b4:7e:cf:ca:d8:bc:
ec:2d:fa:20:9c:2e:05:b6:f5:8f:72:50:e8:5b:99:
b9:ff:8d:64:23:9a:c4:15:45:0f:e5:99:5a:98:a7:
0d:2d:96:84:af:1f:04:45:6f:7d:92:bd:c6:ca:fb:
b9:ab:94:35:d2:d2:80:a8:d3:6d:56:79:5c:7c:e3:
21:bf:ff:1f:bd:fb:fd:57:b1:89:87:50:e7:23:c0:
43:34:a4:4e:f7:06:3a:02:84:04:2f:26:15:f7:85:
a9:37:02:12:06:bc:0f:45:2d:d6:7d:07:4f:c5:4b:
b8:47:8d:29:4b:38:e8:df:bc:6b:89:c8:78:db:c1:
bc:dc:02:1a:f1:3a:14:fe:8c:e5:1b:43:cf:82:9a:
3d:28:9b:4b:51:77:63:1f:5a:48:f9:29:64:c4:a9:
1b:d0:20:c0:f9:e3:9a:39:96:3b:8a:23:66:97:d8:
48:cd:eb:7b:51:8c:f5:3b:16:20:06:78:84:da:1f:
e0:94:af:14:06:41:d6:38:58:d9:88:12:b3:df:d9:
a0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:17:3A:A1:28:C2:C0:27:F3:74:E2:17:B9:10:33:D3:69:82:0D:3C
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/Sxc6oSjCwCfzdOIXuRAz02mCDTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.100.0/24
185.66.4.0/22
IPv6:
2a03:1ea0::/32
Signature Algorithm: sha256WithRSAEncryption
3e:7c:e1:ce:59:7f:aa:0d:0e:fb:28:e7:1a:bb:6c:80:46:75:
96:ab:7f:a0:cb:64:4e:a7:0b:82:2d:27:34:49:e7:a9:cb:cd:
8f:fb:ab:59:5c:72:b5:1d:cb:58:a7:58:d0:4a:0b:e4:af:c2:
e9:5b:7d:f0:fb:0e:6c:ba:3b:3c:05:7a:20:5a:57:ee:29:ea:
e6:d6:7a:c9:36:9d:3e:06:d6:e8:de:ff:09:15:56:e1:9f:7b:
d0:a8:6e:4b:40:c2:54:55:1a:3f:03:95:16:8c:a9:86:1e:aa:
1f:41:c1:18:06:d1:fc:24:97:e7:2e:3f:58:ca:04:db:5e:31:
74:4a:fb:91:67:6f:2a:08:e5:3d:f8:ee:05:28:d9:e5:de:7b:
9e:f4:17:62:ec:58:22:a3:46:c1:57:68:83:9d:5d:eb:5e:89:
76:8b:66:6f:31:7e:3e:3a:95:81:b2:2a:f4:24:c4:ad:6a:58:
0b:f7:8b:a3:8b:b4:cd:0a:fe:53:f8:44:f6:7c:a9:74:44:ae:
f6:92:b7:38:a7:0a:96:4d:a7:bd:dc:96:fe:26:f3:d6:55:31:
38:92:c2:38:8c:0e:d1:e5:e1:fe:1b:dc:21:fa:e2:1b:5d:1d:
35:e6:d8:f0:df:97:42:b4:27:00:81:ab:82:b1:be:10:23:b4:
9d:27:0a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:22:45 2024 by rpki-client on console-ams.rpki-client.org