Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/VEdRSElFRAO9dfSPjaeWQU3D9TQ.roa
File: VEdRSElFRAO9dfSPjaeWQU3D9TQ.roa (raw, json)
Hash identifier: bZV3zhYu7ZxqBBr5XIL44OU4+yMqpWkvfL25RBxY9ds=
Subject key identifier: 54:47:51:48:49:45:44:03:BD:75:F4:8F:8D:A7:96:41:4D:C3:F5:34
Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial: 0191DB3A7C33269B0FE05B1FF92372A60D69
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/VEdRSElFRAO9dfSPjaeWQU3D9TQ.roa
Signing time: Tue 10 Sep 2024 09:18:48 +0000
ROA not before: Tue 10 Sep 2024 09:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203726
IP address blocks: 45.84.168.0/23 maxlen: 23
45.84.170.0/24 maxlen: 24
45.84.171.0/24 maxlen: 24
185.124.180.0/22 maxlen: 24
2a06:c880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:3a:7c:33:26:9b:0f:e0:5b:1f:f9:23:72:a6:0d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Validity
Not Before: Sep 10 09:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5447514849454403bd75f48f8da796414dc3f534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:a3:55:7e:77:8c:9e:3e:16:c6:b3:ef:be:
de:20:b6:24:33:ac:57:aa:a5:b7:9c:53:96:0b:75:
d8:b3:27:3c:12:ff:e2:4f:26:4e:e6:35:32:03:10:
89:f3:74:97:21:a3:1d:01:d8:c9:ec:ae:c9:fb:2a:
50:02:cd:a4:4a:50:27:f8:00:af:0f:73:ef:8a:9a:
4e:77:bc:fb:b9:73:58:56:9a:c8:f0:3d:60:c7:07:
c4:84:9f:91:a6:5d:88:45:52:fd:63:5b:1a:5c:c6:
1b:70:d6:95:d5:a8:81:7a:01:aa:ca:1e:2c:14:fc:
7c:91:e2:57:0a:ed:7e:bb:c3:2e:c0:3f:ee:71:56:
01:d8:eb:24:14:40:76:43:7a:c4:7f:37:d7:b3:50:
86:0e:a2:44:9e:53:83:3c:94:06:d6:c9:75:8b:1f:
e9:91:85:eb:eb:2b:4f:9f:f5:b5:c8:c6:80:c9:80:
d2:d2:2f:1e:63:d4:a0:96:74:7d:ae:b6:d0:45:d1:
17:ec:00:da:48:63:fa:5d:06:d8:5c:0b:b2:ec:46:
71:30:f2:6f:c2:d1:93:0e:79:01:6a:f9:24:1a:24:
7e:50:05:0f:90:51:e4:1c:5f:73:58:d5:a7:d6:8e:
fb:39:89:bb:6d:ae:99:64:51:29:01:05:c4:b0:7d:
4c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:47:51:48:49:45:44:03:BD:75:F4:8F:8D:A7:96:41:4D:C3:F5:34
X509v3 Authority Key Identifier:
keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/VEdRSElFRAO9dfSPjaeWQU3D9TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.168.0/22
185.124.180.0/22
IPv6:
2a06:c880::/29
Signature Algorithm: sha256WithRSAEncryption
6b:89:32:e2:fd:26:2d:b3:18:18:77:45:3d:1b:7b:e4:76:4c:
55:30:4c:1f:35:34:46:90:e0:85:98:83:2e:16:e4:3c:4a:57:
ef:cd:fb:db:3a:e4:30:9d:30:b2:da:dd:a0:c0:ff:bd:6b:3f:
a3:b6:75:ff:ce:2b:ab:d3:63:35:23:44:99:f5:96:bb:69:2c:
de:6b:0a:2c:c5:e5:3d:3e:25:c3:ae:5d:7a:6f:9f:f9:38:36:
26:d1:f4:c5:8d:4d:f8:72:6d:9c:fd:55:02:5f:3f:e8:cf:c1:
58:f2:ac:28:10:6e:d2:49:41:83:84:80:3c:ad:bc:5d:2b:67:
53:41:c6:ed:74:d4:91:3f:bc:cc:00:c9:6e:45:f6:93:81:54:
57:c1:52:ce:d5:2f:c9:4e:f7:ab:a2:8a:7c:fc:e4:9d:39:de:
a5:0c:19:d1:ae:11:15:00:e6:1e:4e:f1:d6:e8:2c:95:46:43:
67:b9:88:b2:d4:c8:c9:cf:15:79:10:48:58:8e:fb:9b:05:3b:
47:72:a5:3d:2b:2c:bf:5b:c9:6a:06:02:62:0a:18:78:b6:d0:
4a:7f:20:39:1a:c1:91:38:48:3b:dd:35:68:a5:fd:84:d6:25:
c6:be:85:49:1a:e3:c0:43:e6:e5:4c:9b:11:13:bc:cd:64:7b:
b4:ba:54:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:19:45 2024 by rpki-client on console-ams.rpki-client.org