Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/dLfAm8FmEXnE9iBGtQe1N3Vh-W4.roa
File: dLfAm8FmEXnE9iBGtQe1N3Vh-W4.roa (raw, json)
Hash identifier: HNgddQ/fdz1VKx/y9STyInQb6q6e1qo8sz5NthWoy8Y=
Subject key identifier: 74:B7:C0:9B:C1:66:11:79:C4:F6:20:46:B5:07:B5:37:75:61:F9:6E
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 018CC4255A768103241F1D35E9C32652B8F4
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/dLfAm8FmEXnE9iBGtQe1N3Vh-W4.roa
Signing time: Mon 01 Jan 2024 08:30:31 +0000
ROA not before: Mon 01 Jan 2024 08:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 45.43.64.0/23 maxlen: 24
45.43.68.0/22 maxlen: 24
45.43.80.0/22 maxlen: 24
45.43.84.0/23 maxlen: 24
45.43.86.0/24 maxlen: 24
198.105.100.0/22 maxlen: 24
198.105.109.0/24 maxlen: 24
198.105.108.0/24 maxlen: 24
198.105.111.0/24 maxlen: 24
89.33.6.0/23 maxlen: 24
155.254.48.0/23 maxlen: 24
107.181.128.0/22 maxlen: 24
107.181.132.0/23 maxlen: 24
107.181.140.0/22 maxlen: 24
107.181.152.0/24 maxlen: 24
107.181.148.0/23 maxlen: 24
107.181.154.0/24 maxlen: 24
107.181.153.0/24 maxlen: 24
2a05:9f46::/32 maxlen: 48
2a05:9f47::/32 maxlen: 48
2a07:9946::/32 maxlen: 48
2a05:9f40:1f::/48 maxlen: 48
2a05:9f44:2a05::/48 maxlen: 48
2a07:9947::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5a:76:81:03:24:1f:1d:35:e9:c3:26:52:b8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74b7c09bc1661179c4f62046b507b5377561f96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:df:a6:84:54:e5:7f:b9:2e:ca:fa:8d:09:
02:6a:a1:08:df:3d:12:b9:2a:53:c4:35:99:94:98:
cf:b9:1b:a3:a6:dd:de:5f:20:b7:33:62:a0:67:45:
17:90:84:57:33:2f:2b:48:35:34:7a:fb:6f:19:da:
6a:1d:61:8a:d8:b5:09:dc:ae:1e:f5:91:68:4f:b1:
f0:1a:b8:c5:8e:79:9b:07:c4:d3:15:51:93:e6:f9:
9f:2c:58:81:2b:23:87:ba:d4:8b:a8:da:ea:b2:7d:
ed:eb:23:7d:03:9a:7c:c1:2a:b9:dd:10:9e:9f:62:
4b:e5:6e:93:d0:6c:a5:92:c7:48:e0:fb:d8:43:8b:
5c:64:66:95:64:a0:a4:15:ff:e8:9f:d2:30:17:f9:
74:4e:6d:aa:8b:8c:25:60:33:f4:95:d9:2a:17:17:
64:59:46:c6:14:07:b4:a2:8e:54:aa:f5:ae:3c:71:
c5:cd:b3:6e:60:55:e5:1b:3c:83:16:18:01:1c:37:
49:a7:ff:26:e0:d2:ce:bf:8e:cd:00:e5:8f:1f:b4:
fd:cb:55:50:fc:42:c9:e0:59:06:a3:60:1d:54:5c:
e6:45:f6:1a:79:c3:eb:7b:e3:07:82:6d:9d:be:d7:
e8:34:ce:e0:e9:d0:9c:e7:7e:bf:c4:93:29:c5:22:
6c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B7:C0:9B:C1:66:11:79:C4:F6:20:46:B5:07:B5:37:75:61:F9:6E
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/dLfAm8FmEXnE9iBGtQe1N3Vh-W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/23
45.43.68.0/22
45.43.80.0-45.43.86.255
89.33.6.0/23
107.181.128.0-107.181.133.255
107.181.140.0/22
107.181.148.0/23
107.181.152.0-107.181.154.255
155.254.48.0/23
198.105.100.0/22
198.105.108.0/23
198.105.111.0/24
IPv6:
2a05:9f40:1f::/48
2a05:9f44:2a05::/48
2a05:9f46::/31
2a07:9946::/31
Signature Algorithm: sha256WithRSAEncryption
03:dc:2f:c4:24:9d:4c:0e:a7:de:44:9a:70:85:9e:57:00:79:
89:fb:2a:c0:1b:2d:d5:a8:30:65:26:64:c3:94:55:17:fe:90:
ad:ab:31:66:a2:09:6d:41:55:55:67:7b:69:b6:d1:65:b1:3a:
65:85:4c:c1:43:9f:c3:96:d6:14:33:e0:d3:02:f9:42:ad:88:
05:5c:45:0d:fe:3a:57:a1:89:8b:16:80:f3:b1:8e:c4:76:3d:
3d:be:a0:c5:5c:65:5e:75:e4:9c:ec:f7:81:fc:2f:e0:af:7f:
16:19:41:dc:f9:c8:8a:85:16:ac:f4:d5:db:4d:84:9a:0c:84:
3f:ff:00:7d:c1:c9:0f:44:ec:a8:bf:5f:63:a4:dd:56:73:c2:
88:86:14:f6:61:67:e0:25:27:4a:57:d6:a7:26:3f:bd:e2:05:
a5:a8:a6:91:98:3b:0d:bd:0a:14:10:f4:fc:7d:c4:2c:92:9e:
5b:ab:08:07:01:c3:82:56:fd:bc:de:c4:34:e2:86:b2:9f:9f:
89:f9:a3:ba:40:80:72:4b:24:87:f9:78:fb:a4:09:33:28:85:
e4:8a:af:f7:71:b8:7f:bc:fd:62:22:7f:a5:ad:97:90:2a:e5:
1d:5f:c9:15:b4:be:1d:12:9c:8f:f3:d2:55:24:3d:e0:5a:03:
33:9f:44:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:37:29 2024 by rpki-client on console-ams.rpki-client.org