Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZqWJxifBF3CWa8VYgVTmfEdb-qw.roa
File: ZqWJxifBF3CWa8VYgVTmfEdb-qw.roa (raw, json)
Hash identifier: nKUUpRQPmQpasDsS5xkikvzfEcwhP6cqGIW3nYZdd2o=
Subject key identifier: 66:A5:89:C6:27:C1:17:70:96:6B:C5:58:81:54:E6:7C:47:5B:FA:AC
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018EBCA8FC5CD6DC3ABCC68ED58D820296BD
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZqWJxifBF3CWa8VYgVTmfEdb-qw.roa
Signing time: Mon 08 Apr 2024 07:42:54 +0000
ROA not before: Mon 08 Apr 2024 07:42:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 45.67.96.0/24 maxlen: 24
45.130.80.0/24 maxlen: 24
45.130.81.0/24 maxlen: 24
45.130.83.0/24 maxlen: 24
45.135.186.0/24 maxlen: 24
45.135.187.0/24 maxlen: 24
45.140.135.0/24 maxlen: 24
89.38.70.0/24 maxlen: 24
89.47.15.0/24 maxlen: 24
91.217.249.0/24 maxlen: 24
185.192.16.0/24 maxlen: 24
185.192.71.0/24 maxlen: 24
188.212.135.0/24 maxlen: 24
193.19.109.0/24 maxlen: 24
203.26.81.0/24 maxlen: 24
203.159.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:a8:fc:5c:d6:dc:3a:bc:c6:8e:d5:8d:82:02:96:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 8 07:42:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66a589c627c11770966bc5588154e67c475bfaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:c2:58:f5:73:ba:3a:a3:46:ac:37:a1:20:
92:a9:74:d9:47:6b:8b:a2:05:3b:a6:d2:62:69:15:
07:70:8e:e7:e0:9a:36:e2:ca:39:47:3f:44:1e:77:
1b:73:08:c5:c0:ee:95:38:5f:0b:ca:22:30:2d:85:
04:70:0c:64:be:0a:76:7c:ae:d7:9b:6b:f4:b3:7f:
78:2c:83:e8:8b:d7:32:27:18:35:7a:07:fd:d5:95:
17:6d:ee:b4:a5:9b:c1:3f:c1:07:61:8d:7f:95:a5:
11:68:a3:c8:72:a1:63:46:92:5d:a5:25:70:1a:eb:
a8:23:5b:b0:20:fb:7c:c0:17:ed:94:45:81:15:e4:
63:a6:4c:5c:d2:dd:e4:22:a3:77:f6:82:a5:5f:c5:
b5:35:86:04:fa:44:79:70:a2:5a:4c:48:a6:30:d1:
c8:09:5f:98:22:9a:9d:cc:44:44:58:e0:06:64:db:
3e:65:94:03:86:34:e6:5a:9e:41:ac:26:36:24:d0:
02:9a:ef:76:cb:91:08:a5:bd:bb:0f:bf:81:de:45:
1b:4f:10:e7:6c:e0:86:5f:25:6e:8a:ed:c8:a1:d2:
f7:99:66:21:a9:48:0f:d8:c7:ac:82:06:e5:d9:33:
ff:35:0f:d4:cd:d3:39:ff:12:49:69:ba:cb:c8:84:
b6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A5:89:C6:27:C1:17:70:96:6B:C5:58:81:54:E6:7C:47:5B:FA:AC
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZqWJxifBF3CWa8VYgVTmfEdb-qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.96.0/24
45.130.80.0/23
45.130.83.0/24
45.135.186.0/23
45.140.135.0/24
89.38.70.0/24
89.47.15.0/24
91.217.249.0/24
185.192.16.0/24
185.192.71.0/24
188.212.135.0/24
193.19.109.0/24
203.26.81.0/24
203.159.81.0/24
Signature Algorithm: sha256WithRSAEncryption
29:bd:5e:ed:3c:14:5c:0c:11:c6:7f:8b:88:53:1a:19:89:5e:
aa:28:a0:e9:1d:ec:4f:0d:6a:17:1c:fd:4f:f5:ae:0d:6c:5d:
3a:c0:4f:3b:d7:cd:72:97:dd:00:99:5a:b8:d3:98:b4:0b:50:
a7:b1:48:75:6b:69:30:18:bf:5e:61:f3:82:42:79:03:0b:86:
6d:3b:db:c5:54:27:6c:bf:c2:65:4e:89:4f:f3:b8:ca:5e:73:
cc:60:ec:d5:ae:20:a4:ec:9e:01:31:36:67:fc:1a:e2:52:1b:
c2:e5:23:14:22:22:b1:5f:a1:48:c4:41:d7:d4:a3:99:d1:53:
95:15:17:62:3e:67:cd:1f:c5:08:8b:1c:f4:37:91:9c:7d:82:
a6:70:64:72:4e:64:6c:6c:24:b8:78:10:ed:fc:bb:61:6e:24:
d6:ee:7e:9a:c7:1a:bb:71:c4:ae:4d:81:7b:3f:53:f7:13:31:
6c:3e:3c:70:7a:c2:89:e1:a0:a9:e7:6b:8b:fd:de:68:e1:50:
e5:ba:42:b3:b5:f1:d3:30:f9:de:26:f9:43:06:9b:07:96:03:
88:ff:33:78:35:8a:63:45:6e:5b:df:5a:5e:7f:94:52:59:d2:
5d:c1:74:07:eb:79:da:4d:dd:ce:f8:28:4b:3c:d2:a8:c3:1a:
0c:7c:5c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:08:55 2024 by rpki-client on console-fra.rpki-client.org