Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/YQfPv_HyxFDas9K-r-wTXlNkVBU.roa
File: YQfPv_HyxFDas9K-r-wTXlNkVBU.roa (raw, json)
Hash identifier: kjdFUMcexyXD7lTo+ouc8XGZv8HsBLUqaJscmr8GipA=
Subject key identifier: 61:07:CF:BF:F1:F2:C4:50:DA:B3:D2:BE:AF:EC:13:5E:53:64:54:15
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01915B6EA1ED35FDEBB2E32CF5418F6B1822
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/YQfPv_HyxFDas9K-r-wTXlNkVBU.roa
Signing time: Fri 16 Aug 2024 13:44:22 +0000
ROA not before: Fri 16 Aug 2024 13:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 45.43.92.0/24 maxlen: 24
94.177.4.0/24 maxlen: 24
113.20.156.0/24 maxlen: 24
113.20.159.0/24 maxlen: 24
155.254.32.0/24 maxlen: 24
155.254.35.0/24 maxlen: 24
198.105.120.0/24 maxlen: 24
198.105.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5b:6e:a1:ed:35:fd:eb:b2:e3:2c:f5:41:8f:6b:18:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Aug 16 13:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6107cfbff1f2c450dab3d2beafec135e53645415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:c9:1d:26:9a:2f:92:4d:26:99:c1:4d:08:
15:25:58:58:bc:e8:f2:6f:96:4e:5e:87:65:6c:d0:
d6:b4:db:5f:ba:5c:6b:d3:8f:b5:46:3e:58:95:8c:
34:f7:4c:c3:ba:5d:9b:ab:d2:40:23:b0:a1:49:73:
83:14:32:c3:24:20:05:0d:81:af:9c:a2:2a:18:f8:
0e:47:f5:2e:91:4c:a7:4c:fa:09:e7:c6:76:38:8b:
3b:6c:ce:83:c9:a9:99:08:37:5f:3b:8b:71:42:9f:
1f:cd:40:34:d8:db:aa:b9:ed:0a:d1:7a:ac:92:47:
a2:e8:66:92:b3:00:39:85:f2:87:0a:ae:f7:63:e5:
aa:62:be:93:db:8f:66:16:bf:54:65:83:aa:14:1a:
fa:3f:dc:db:cd:1e:b8:6e:dd:fa:ec:42:74:62:e8:
9a:ec:cf:1d:f0:fe:31:10:d6:90:c5:bb:19:6d:bb:
7a:d4:a9:60:52:48:fd:c0:71:be:a9:2b:52:c2:5f:
33:72:79:1e:2d:c6:3f:1a:2d:c7:dc:7e:00:72:2b:
66:bc:a9:b7:66:48:79:73:a6:d6:83:1d:d7:99:5f:
b7:45:10:83:34:ba:a5:4d:e3:9f:ce:de:42:f0:0b:
9c:0c:ee:44:9d:0f:82:a3:7e:65:cb:16:14:c4:7c:
67:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:07:CF:BF:F1:F2:C4:50:DA:B3:D2:BE:AF:EC:13:5E:53:64:54:15
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/YQfPv_HyxFDas9K-r-wTXlNkVBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.92.0/24
94.177.4.0/24
113.20.156.0/24
113.20.159.0/24
155.254.32.0/24
155.254.35.0/24
198.105.120.0/24
198.105.123.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ae:59:f8:67:79:67:d7:ac:24:b4:24:5f:89:1d:8f:db:0b:
94:c5:16:7e:0f:20:26:b1:e0:f2:6e:3c:bc:e5:ef:af:b2:e6:
21:95:0e:6d:12:86:b4:39:75:29:bd:3d:60:27:ba:ee:40:2b:
57:3f:94:ed:6d:57:f1:5a:82:e0:c5:95:07:fe:1e:74:38:28:
72:0a:6f:4f:a0:06:d8:67:a8:df:68:ab:29:63:99:85:ea:78:
5f:9d:dd:af:da:dd:26:70:64:ae:e2:c5:03:1e:df:12:5a:c7:
01:51:b2:b3:d9:da:41:f4:69:a0:dd:99:30:82:b1:4e:7a:0d:
76:f9:29:84:ce:c0:a2:f5:5f:69:6e:0d:d1:ff:c5:49:0b:32:
85:3b:06:8f:ed:d7:5c:d2:1a:01:61:60:d2:59:b0:89:61:26:
6e:bb:4e:83:bd:58:28:f2:aa:1a:cd:ef:f4:3a:fb:29:78:e4:
c2:10:37:3e:51:d0:ff:de:10:80:e1:41:24:6d:10:d8:36:86:
bd:31:70:95:b6:d8:e9:8f:60:82:ed:09:43:10:90:cf:89:33:
5c:95:ec:af:fa:e0:90:07:ce:25:51:cc:6f:26:22:98:4b:e0:
7c:0c:50:a5:7d:1d:7e:14:ee:ec:32:62:8c:ee:54:a2:bc:32:
d3:48:12:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:27:50 2024 by rpki-client on console-fra.rpki-client.org