Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/vWat_btL0xf5daASJE8MPs7k7Xw.roa
File: vWat_btL0xf5daASJE8MPs7k7Xw.roa (raw, json)
Hash identifier: rP2gG9gCEQF/VW6yGHKPryXSrMx1wDt412Ggfu+zXaA=
Subject key identifier: BD:66:AD:FD:BB:4B:D3:17:F9:75:A0:12:24:4F:0C:3E:CE:E4:ED:7C
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 018EE14BD415EE9108CA586052121115E187
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/vWat_btL0xf5daASJE8MPs7k7Xw.roa
Signing time: Mon 15 Apr 2024 10:27:06 +0000
ROA not before: Mon 15 Apr 2024 10:27:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1828
IP address blocks: 45.15.192.0/22 maxlen: 22
45.15.192.0/24 maxlen: 24
45.15.193.0/24 maxlen: 24
45.15.194.0/24 maxlen: 24
45.15.195.0/24 maxlen: 24
45.133.80.0/22 maxlen: 22
45.133.80.0/24 maxlen: 24
45.133.81.0/24 maxlen: 24
45.133.82.0/24 maxlen: 24
185.92.120.0/24 maxlen: 24
185.92.121.0/24 maxlen: 24
185.92.122.0/24 maxlen: 24
185.92.123.0/24 maxlen: 24
185.175.12.0/24 maxlen: 24
185.175.13.0/24 maxlen: 24
2a05:f240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:4b:d4:15:ee:91:08:ca:58:60:52:12:11:15:e1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Apr 15 10:27:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd66adfdbb4bd317f975a012244f0c3ecee4ed7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9c:15:51:13:48:08:0b:8f:39:a1:49:b5:68:
67:b0:ee:09:83:60:46:81:c0:bb:87:7c:2f:28:6b:
00:14:d4:48:b8:07:ee:4e:cf:6d:67:15:27:f4:c8:
18:d6:0b:6e:1b:4b:d7:7d:75:6f:22:65:37:49:e3:
79:3d:eb:b6:5a:df:9d:ec:1d:eb:fa:97:e8:00:ae:
38:9b:d1:d6:a7:f4:98:b4:dc:27:6f:45:0c:0f:0e:
68:64:a4:e9:86:43:da:8e:e3:32:63:4f:e1:bf:e2:
d4:5c:fb:0b:db:0c:e2:52:30:1d:06:ed:2e:27:81:
ad:dc:fa:53:54:44:27:90:58:e4:36:bd:31:47:ba:
a6:02:6e:f1:83:05:f0:6e:2d:8e:fc:92:78:f4:f2:
ec:c5:b9:aa:a1:b4:62:f4:4a:fe:4d:9e:35:56:e9:
86:7e:af:ad:bd:c8:06:e1:46:85:dd:e0:52:d3:4d:
8e:c7:a3:7e:13:99:34:9b:a0:18:40:e6:29:40:2b:
e7:8d:8d:e0:45:ac:f2:63:e8:e2:7e:94:b2:9a:dd:
87:ac:f1:7d:d7:73:bd:e8:da:fd:0e:e8:38:7b:74:
7c:a0:97:a1:5f:14:09:9e:9b:7a:f4:13:52:10:bb:
1c:4f:d0:e6:5b:08:18:b6:2a:de:d3:9e:10:12:c0:
e5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:66:AD:FD:BB:4B:D3:17:F9:75:A0:12:24:4F:0C:3E:CE:E4:ED:7C
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/vWat_btL0xf5daASJE8MPs7k7Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.192.0/22
45.133.80.0/22
185.92.120.0/22
185.175.12.0/23
IPv6:
2a05:f240::/29
Signature Algorithm: sha256WithRSAEncryption
bd:5b:c1:73:5e:94:df:7d:96:fd:ba:31:bd:18:96:39:eb:df:
6a:9a:ff:aa:36:58:5b:9a:cb:7b:31:c4:72:ee:7f:6f:69:ba:
f1:ab:e4:bf:98:db:a9:de:ec:a3:f6:5c:ef:c3:ce:90:2e:30:
ae:29:e3:f9:3a:ce:93:ee:21:95:c2:59:0e:b4:05:8c:bc:f9:
61:ae:a1:4d:f7:c6:e0:e8:fa:b8:d0:76:03:6f:f9:d2:e5:6d:
bb:28:05:d8:6c:82:ca:67:1a:80:3a:ea:45:82:33:d2:6f:59:
60:d1:cb:b9:0b:a1:60:1e:98:c9:91:c1:47:60:6b:27:68:99:
52:77:99:71:db:05:c3:c9:2e:5d:37:d0:98:85:c3:21:bb:17:
77:da:50:d9:d1:34:20:08:72:46:47:39:8d:13:f5:65:2c:6e:
4f:00:b3:f7:90:ea:19:1e:47:89:b5:92:96:30:d3:b5:60:67:
23:2f:17:ab:f2:72:86:9b:49:4b:8b:74:5f:7b:b7:fe:7f:97:
66:d2:41:0c:d0:bd:93:46:36:ab:c9:e3:1b:63:56:12:40:85:
9e:b9:03:d7:fd:94:39:f4:82:42:da:51:5b:4b:88:35:88:68:
ca:77:eb:91:65:c7:e8:6b:52:b5:0c:92:65:16:c1:83:13:3c:
40:89:2a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:30:25 2024 by rpki-client on console-fra.rpki-client.org