Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/VlWVOZwm6mT1LCDRPT_Q3wZpbtA.roa
File: VlWVOZwm6mT1LCDRPT_Q3wZpbtA.roa (raw, json)
Hash identifier: Od6nUjFmxEbO802WP4T3U3SSL6vfttZUQA720CS0Q6k=
Subject key identifier: 56:55:95:39:9C:26:EA:64:F5:2C:20:D1:3D:3F:D0:DF:06:69:6E:D0
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0191BB7CC8E54B3D636580C630313C4803CF
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/VlWVOZwm6mT1LCDRPT_Q3wZpbtA.roa
Signing time: Wed 04 Sep 2024 05:23:22 +0000
ROA not before: Wed 04 Sep 2024 05:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 262287
IP address blocks: 45.91.48.0/24 maxlen: 24
45.91.49.0/24 maxlen: 24
185.121.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bb:7c:c8:e5:4b:3d:63:65:80:c6:30:31:3c:48:03:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 4 05:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=565595399c26ea64f52c20d13d3fd0df06696ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f3:48:38:e1:79:90:4e:96:22:d5:7d:fb:ea:
13:3c:13:59:ed:58:a0:2d:ce:d3:72:bc:06:21:e7:
97:11:ca:9b:58:f7:dc:f2:16:27:c2:13:96:bd:86:
a9:ba:50:3f:06:a2:c7:b8:7b:34:68:83:11:ce:95:
1e:df:3a:0c:46:ec:3f:37:c0:f9:3a:4d:6f:25:7d:
73:90:25:90:13:c8:40:23:07:18:92:fd:7e:48:b0:
78:b2:97:a0:1c:c2:1d:23:31:6c:78:5d:04:3e:70:
38:0d:b1:ae:47:0e:52:26:30:3e:43:f9:cf:28:5f:
cc:eb:b5:19:37:84:29:4b:2f:af:59:80:c3:94:9f:
b2:67:3d:91:26:ce:70:72:a6:1f:25:18:d5:dc:9c:
e4:c4:36:c5:46:8f:56:1e:12:33:e8:e5:8b:d1:6c:
3a:0c:54:f5:18:9c:02:e8:72:62:af:6c:ab:c0:e7:
e8:fb:57:cb:9f:69:28:a0:5c:57:46:7b:f8:be:d7:
25:79:b1:6e:0d:1e:84:12:6a:13:9a:26:97:a5:b4:
e9:a1:79:36:45:99:b6:93:9d:da:a6:cc:fd:d3:1a:
b7:b1:38:2c:4c:10:17:14:34:6a:c7:00:a6:7e:76:
40:ce:4a:d5:b2:d4:e9:01:dc:e2:db:67:1b:61:3c:
21:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:55:95:39:9C:26:EA:64:F5:2C:20:D1:3D:3F:D0:DF:06:69:6E:D0
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/VlWVOZwm6mT1LCDRPT_Q3wZpbtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.48.0/23
185.121.120.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ae:7c:e0:ac:8a:a9:70:87:cf:70:e3:e8:dc:c7:1e:05:02:
0b:96:aa:f1:72:cc:7a:b3:7d:b4:d0:15:99:cc:df:e0:3c:5d:
ff:49:7b:68:4b:bc:0b:50:bf:9a:ab:db:9b:4b:7f:c2:97:ff:
8d:7b:ce:d8:d1:12:04:12:df:fa:10:16:61:f0:23:da:0d:ea:
3c:b3:e2:49:e3:e8:86:3f:61:63:9b:3d:0b:76:73:40:de:32:
4c:3c:06:20:a7:a6:47:47:b1:32:85:23:cf:15:96:81:93:9b:
52:13:1a:36:d7:f9:22:b4:72:52:53:56:95:bc:6d:11:81:94:
3f:b5:f8:34:27:65:9f:5a:2c:d7:21:5d:64:90:b0:7d:5a:13:
d9:36:3b:d3:1e:20:18:3f:26:7d:a2:3b:ce:f4:6b:5a:8f:64:
48:6c:1e:01:7c:97:70:1c:26:97:34:94:28:66:52:fa:8c:66:
6f:6d:fd:72:1f:c4:ab:ca:dc:b7:78:bc:3a:c9:03:56:b0:a9:
3f:86:ce:d5:11:94:b3:bd:cd:ca:6c:e9:1a:56:12:46:17:bf:
f8:ec:d6:3e:79:6f:f9:7b:8b:21:50:de:84:02:82:b3:bd:3f:
3b:20:9e:b3:66:1e:78:14:1c:e2:e5:f6:53:97:e7:54:51:5f:
c0:6c:23:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:08:05 2024 by rpki-client on console-fra.rpki-client.org