Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7zDqDRHZ7Xkc1kaXmmj2sKfhlIE.roa
File: 7zDqDRHZ7Xkc1kaXmmj2sKfhlIE.roa (raw, json)
Hash identifier: LiVQgrMiyOTCiO5nIcg/jaBOHjxi6hLIxKlP1LFLxmg=
Subject key identifier: EF:30:EA:0D:11:D9:ED:79:1C:D6:46:97:9A:68:F6:B0:A7:E1:94:81
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE85BD5E2B749F728CCBDB2392E67B
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7zDqDRHZ7Xkc1kaXmmj2sKfhlIE.roa
Signing time: Tue 02 Jan 2024 06:31:15 +0000
ROA not before: Tue 02 Jan 2024 06:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58110
IP address blocks: 45.88.169.0/24 maxlen: 24
45.92.162.0/24 maxlen: 24
45.15.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:85:bd:5e:2b:74:9f:72:8c:cb:db:23:92:e6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef30ea0d11d9ed791cd646979a68f6b0a7e19481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:2d:0c:80:15:fb:4a:ca:ac:fc:53:07:d5:
4d:d9:c0:12:ad:f6:62:28:88:8f:4c:52:96:91:ef:
53:b4:2c:c6:e9:20:29:ac:90:d6:48:9c:52:f3:6c:
56:6d:4b:93:57:db:ec:36:99:b1:9c:5c:0c:d9:09:
36:30:fc:c6:82:53:76:35:0d:56:1c:b6:9e:6d:37:
89:a5:fd:40:97:45:4f:78:11:50:4b:e7:00:33:77:
de:90:3e:94:ab:22:4a:a2:2f:3c:f4:47:ea:3f:ce:
12:98:8c:58:28:ac:fc:6c:aa:21:b5:9b:a3:e4:94:
d9:2c:30:f7:2f:ba:0e:18:35:69:85:c9:9a:18:8d:
34:3d:37:3c:0b:7c:67:ed:50:c4:33:16:cf:0e:8e:
84:f4:c6:2a:2d:88:3b:76:c0:8e:1d:b4:b5:00:85:
b9:bf:6e:e3:ae:49:c0:2a:56:0b:b9:6b:a6:4b:d4:
3b:c1:64:e3:9e:88:04:4a:2a:6d:09:1a:8f:93:d8:
99:13:ce:49:19:b8:36:2f:bf:fe:5a:2b:d1:f8:8c:
66:15:cf:61:3c:91:75:6b:72:3d:4d:f4:13:e3:4c:
c8:d7:d9:59:2d:9c:77:4f:a0:3c:2d:76:9f:17:dd:
8b:af:e3:ba:16:e2:67:01:13:5e:54:72:36:71:27:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:30:EA:0D:11:D9:ED:79:1C:D6:46:97:9A:68:F6:B0:A7:E1:94:81
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7zDqDRHZ7Xkc1kaXmmj2sKfhlIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.184.0/24
45.88.169.0/24
45.92.162.0/24
Signature Algorithm: sha256WithRSAEncryption
96:c9:dd:8f:2c:96:71:1a:40:86:09:89:a7:2f:fc:a3:bb:2e:
49:2b:46:0a:94:ce:6b:56:ee:14:d6:7a:d9:11:97:98:cf:36:
f6:b9:3a:b2:22:b7:14:f3:84:0f:cd:54:c6:04:e5:b1:5b:de:
fa:a3:8a:a9:b9:b7:5d:c3:69:17:a4:51:58:15:37:86:5d:f4:
09:f4:86:5f:db:20:bf:bc:20:ba:92:06:ec:5a:57:9a:39:4c:
5e:bb:5b:30:d2:ad:16:29:04:86:0c:ba:89:7b:06:20:37:72:
4e:83:4e:c3:d1:bb:06:73:c5:bc:54:c9:ad:39:93:a1:ba:0b:
20:1b:73:3c:49:f4:01:5b:48:a4:30:ab:27:2a:e8:4b:86:e3:
dc:e4:5a:59:a7:ff:d3:61:63:2a:3c:25:6a:cd:9a:ef:29:58:
66:6e:06:ed:4c:70:02:f8:a7:2d:d8:c1:89:95:7d:e4:05:48:
97:03:aa:75:c2:ca:c9:c3:6f:6b:ea:df:16:54:20:9c:f4:d0:
6e:2f:40:31:06:49:84:e0:12:ac:67:3b:75:c8:3d:bf:b7:23:
be:b5:de:1f:1d:2b:bf:bf:e7:4f:7e:84:09:32:d5:d5:e9:96:
21:04:2c:67:ec:08:d8:38:b5:d9:f2:56:7d:a2:c6:84:5a:20:
ae:cc:fd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 16:13:20 2024 by rpki-client on console-ams.rpki-client.org