Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UzrGQWrS4KMr4BL6BIDIAg7ALYQ.roa
File: UzrGQWrS4KMr4BL6BIDIAg7ALYQ.roa (raw, json)
Hash identifier: XzDxZJ/DpI63rXSS+A4ZkvG7Omqwp1ypFuPwLnVW9o0=
Subject key identifier: 53:3A:C6:41:6A:D2:E0:A3:2B:E0:12:FA:04:80:C8:02:0E:C0:2D:84
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01920527379277BEDA10588156686A2DCEE5
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UzrGQWrS4KMr4BL6BIDIAg7ALYQ.roa
Signing time: Wed 18 Sep 2024 12:41:48 +0000
ROA not before: Wed 18 Sep 2024 12:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55410
IP address blocks: 45.156.159.0/24 maxlen: 24
185.112.64.0/22 maxlen: 24
185.255.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:05:27:37:92:77:be:da:10:58:81:56:68:6a:2d:ce:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 18 12:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=533ac6416ad2e0a32be012fa0480c8020ec02d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:c0:47:81:c6:fe:38:ad:0d:71:9b:24:45:
5e:f5:0d:34:fe:85:de:f8:c3:30:47:c7:71:1a:93:
78:d1:91:80:57:c6:81:b1:0a:8f:bc:44:f1:6c:ab:
7f:2d:a8:3c:43:ee:28:a2:c9:b8:db:72:c3:bf:15:
18:14:5d:6e:55:49:9d:da:84:bb:90:84:e6:a4:35:
b6:8e:0e:59:bd:92:b5:fd:25:99:22:7c:00:8e:82:
db:2b:e0:e7:5c:62:60:79:20:e1:fa:25:2c:d6:67:
1b:99:7a:73:c5:2a:e0:65:fd:66:c7:e1:50:65:14:
f8:35:74:29:2e:f6:d2:a5:f1:61:7d:4b:00:16:16:
e1:f5:fa:5e:9b:72:31:e2:80:01:2e:fc:1d:86:55:
70:d2:e8:93:c1:1e:d0:a7:ff:bf:f6:dd:f6:ff:8a:
5f:64:f2:68:42:a2:7f:64:88:b0:c0:d2:0d:d9:e0:
df:62:96:bb:c7:e5:43:ef:04:15:2d:81:ea:69:e6:
37:12:26:3e:02:35:61:39:14:1b:9b:d2:09:e3:36:
38:d4:b6:96:d2:27:a7:69:21:dd:20:f7:e9:44:42:
4f:8a:c9:90:a0:97:04:3f:3c:7d:00:6c:86:0e:ee:
93:0c:88:dd:6a:60:c0:30:09:58:bf:59:81:41:a4:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3A:C6:41:6A:D2:E0:A3:2B:E0:12:FA:04:80:C8:02:0E:C0:2D:84
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UzrGQWrS4KMr4BL6BIDIAg7ALYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.159.0/24
185.112.64.0/22
185.255.168.0/22
Signature Algorithm: sha256WithRSAEncryption
67:20:24:da:a9:5c:fd:7f:33:1e:95:c3:a2:1f:a0:be:84:a7:
ed:1f:eb:98:f4:c2:51:c8:eb:ee:0f:19:bb:80:60:45:5f:7e:
88:e0:86:36:77:44:80:1b:bb:7a:b3:39:6e:ef:93:8a:31:d2:
7b:db:2b:16:18:e0:46:f2:3f:8a:1e:66:c2:97:d1:89:bf:af:
63:30:24:27:8b:91:97:5d:d0:6c:69:02:90:9e:3a:6a:0e:85:
54:e9:4e:c0:85:82:ef:80:28:02:66:22:6f:ac:de:76:b8:1e:
92:6d:40:83:22:53:9b:80:72:d5:20:09:3f:91:a6:e4:bb:28:
44:3f:68:8d:bb:55:11:d4:7c:b9:a1:70:55:16:b6:0c:d6:a4:
f9:37:6c:33:59:67:3a:71:a8:4f:f3:7c:09:a1:41:ea:00:a7:
c6:92:78:b7:d3:fc:11:10:06:f4:01:56:f2:08:55:62:9a:50:
fe:1d:4b:17:2d:f2:0e:72:30:44:7c:89:c1:0c:9d:de:27:fa:
95:6f:76:2a:a5:c5:69:f9:08:28:64:1e:7a:8d:8d:52:9a:1b:
a4:9e:f2:0f:73:2e:26:13:e1:16:ec:ce:8c:0a:67:39:0d:bd:
94:8f:e4:08:51:39:69:8a:e0:de:89:d7:ad:1f:1e:f1:2b:ac:
d7:97:48:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:41:10 2024 by rpki-client on console-ams.rpki-client.org