Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Uk2AhLdGmE3g76lVRRrNRU3Fns4.roa
File: Uk2AhLdGmE3g76lVRRrNRU3Fns4.roa (raw, json)
Hash identifier: y0TB1HJaWddbh9LNR3QaFqe5HdDAxF0F/4j1+217piQ=
Subject key identifier: 52:4D:80:84:B7:46:98:4D:E0:EF:A9:55:45:1A:CD:45:4D:C5:9E:CE
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019243DCFDAA6B5C7CC692C60CC041C3BA1C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Uk2AhLdGmE3g76lVRRrNRU3Fns4.roa
Signing time: Mon 30 Sep 2024 16:56:49 +0000
ROA not before: Mon 30 Sep 2024 16:56:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214238
IP address blocks: 45.83.148.0/24 maxlen: 24
185.166.154.0/24 maxlen: 24
185.166.155.0/24 maxlen: 24
185.203.4.0/24 maxlen: 24
185.203.5.0/24 maxlen: 24
185.203.6.0/24 maxlen: 24
185.203.7.0/24 maxlen: 24
194.76.136.0/24 maxlen: 24
194.76.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:43:dc:fd:aa:6b:5c:7c:c6:92:c6:0c:c0:41:c3:ba:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 30 16:56:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=524d8084b746984de0efa955451acd454dc59ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:e8:28:76:c6:c5:f8:cf:bd:d2:ad:2b:20:
98:8d:e4:30:a5:83:f5:5a:5a:38:19:5e:a0:47:6b:
1a:eb:65:42:1e:84:29:b0:57:32:e6:7f:c1:7b:fd:
c9:bf:e3:32:62:d6:07:f4:cc:15:ae:99:52:0b:94:
a3:6d:80:43:a2:14:8f:79:7e:54:7f:c2:92:f5:21:
5a:f8:24:5a:a4:05:84:d1:f8:c7:38:c1:7b:32:5e:
c4:08:ec:1e:dd:a3:29:5e:d7:07:f7:fb:38:9b:81:
9e:d4:fb:55:e0:02:3c:34:fd:90:a2:1a:45:c1:ef:
fd:92:e4:21:2e:52:e1:d6:43:46:76:0d:a5:ff:49:
35:4f:8f:c0:da:4b:42:45:eb:0b:04:3b:88:a1:bd:
7b:4a:c8:64:37:2e:0e:26:49:17:ea:76:7d:c9:50:
82:10:2a:31:c8:83:1f:6f:8a:6f:e1:7d:b6:d2:94:
4d:7e:85:be:af:a2:cc:4f:65:94:70:bd:b3:2b:db:
b4:f6:a3:fd:a9:fa:0e:a7:2d:ee:b2:37:8e:2d:d7:
da:07:d3:fb:97:a6:2c:d1:0a:27:46:5b:4a:5f:4c:
55:6e:ea:fb:85:73:82:e4:a7:e4:6e:ee:46:f6:76:
57:5e:ad:0a:0f:67:ad:67:1c:cd:dc:7d:cb:46:cb:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4D:80:84:B7:46:98:4D:E0:EF:A9:55:45:1A:CD:45:4D:C5:9E:CE
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Uk2AhLdGmE3g76lVRRrNRU3Fns4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.148.0/24
185.166.154.0/23
185.203.4.0/22
194.76.136.0/24
194.76.138.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:10:76:15:ba:31:07:62:fe:60:69:80:1e:6d:bd:41:05:8a:
51:8d:56:01:6f:d5:44:0f:ab:8c:e8:fe:32:c9:6b:54:4c:1a:
26:9e:a3:a0:5f:dd:73:99:3f:55:d0:5d:e8:07:82:55:cb:dc:
99:bd:e0:f3:39:03:cc:72:d9:c4:aa:5f:98:df:cd:f3:05:09:
dc:4e:98:aa:8e:f7:da:82:bf:25:2b:68:01:f4:7d:fb:f6:39:
96:30:1f:f7:60:6a:d4:dd:2a:c4:29:47:1a:54:a6:fb:3a:c5:
9e:04:32:40:fa:dd:50:c5:8e:9e:8a:a8:aa:1a:59:46:d8:36:
9f:0f:c4:29:5d:13:f4:d6:38:52:4c:78:6d:db:e6:67:71:cd:
b9:35:91:0c:87:6a:06:5c:8c:52:8c:a9:d7:7e:36:15:46:29:
ff:d1:c6:67:08:e9:3d:82:f8:bf:b3:b4:41:6d:06:48:5a:d4:
65:5b:24:54:36:49:26:67:e7:ba:ac:32:29:27:ac:f4:d2:58:
fe:bf:ca:ea:24:28:8e:65:eb:9f:09:26:57:16:df:d6:6e:61:
e9:b2:58:a8:76:f9:35:9c:57:f2:c6:a6:93:68:7a:5e:83:58:
c9:fa:bf:7e:e6:24:a1:8e:e4:a5:51:95:6c:7c:fb:80:70:85:
9f:e1:f1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:28:16 2024 by rpki-client on console-fra.rpki-client.org