Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/_lc5EbG78M9cV7w1zoVJsIwL5lo.roa
File: _lc5EbG78M9cV7w1zoVJsIwL5lo.roa (raw, json)
Hash identifier: vBBH/b9SGDJNlxQzvjoXACl23IOxIpvwJXvQXF7Me5w=
Subject key identifier: FE:57:39:11:B1:BB:F0:CF:5C:57:BC:35:CE:85:49:B0:8C:0B:E6:5A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0191BB850669CA8EB77B094F7AF49AF59744
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/_lc5EbG78M9cV7w1zoVJsIwL5lo.roa
Signing time: Wed 04 Sep 2024 05:32:22 +0000
ROA not before: Wed 04 Sep 2024 05:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 45.80.157.0/24 maxlen: 24
45.144.226.0/24 maxlen: 24
185.192.69.0/24 maxlen: 24
185.198.240.0/24 maxlen: 24
185.198.243.0/24 maxlen: 24
185.217.117.0/24 maxlen: 24
188.213.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bb:85:06:69:ca:8e:b7:7b:09:4f:7a:f4:9a:f5:97:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 4 05:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe573911b1bbf0cf5c57bc35ce8549b08c0be65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:53:81:3e:dd:00:9b:2b:dc:61:2a:a6:19:
97:30:53:f6:04:a5:76:7d:dc:c8:04:2d:ec:42:a0:
7b:32:1a:10:88:cb:93:4d:6d:88:00:e8:8a:02:72:
6f:e0:28:a1:71:17:ab:6f:13:c6:26:17:22:69:be:
fe:cb:bb:16:a2:43:78:fd:89:41:ec:61:7f:7a:f4:
43:51:0f:85:c3:21:4d:bb:54:44:28:4c:54:ae:f0:
04:3c:4e:94:72:75:ba:7a:42:24:7f:8b:a0:7b:68:
41:90:10:8f:33:9e:d0:fa:37:dd:58:0a:a0:88:ed:
6f:c1:7d:69:7d:79:e9:53:32:d3:c0:44:94:bc:5c:
2b:34:25:35:c8:89:f9:6d:f9:4e:97:92:82:fd:b7:
a2:50:7e:5a:59:85:ae:87:50:f5:2e:0a:ed:93:15:
52:2b:10:81:36:9a:e7:6e:ce:26:ad:b0:d7:4c:03:
6a:66:a7:2b:6c:70:82:01:25:82:e7:7e:21:4f:2f:
b2:a9:9d:2b:5e:5e:09:a3:a4:01:51:c0:6b:2d:4b:
a8:02:af:e7:cc:86:2e:8b:76:9d:14:90:66:84:1e:
8e:8f:a3:39:8a:f2:5a:8b:65:a1:a3:3a:91:6c:fa:
cc:24:b1:6d:b1:81:8f:34:3e:e3:1c:98:06:65:a7:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:57:39:11:B1:BB:F0:CF:5C:57:BC:35:CE:85:49:B0:8C:0B:E6:5A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/_lc5EbG78M9cV7w1zoVJsIwL5lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.157.0/24
45.144.226.0/24
185.192.69.0/24
185.198.240.0/24
185.198.243.0/24
185.217.117.0/24
188.213.203.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b4:f6:b3:c9:74:e5:cc:e5:ea:99:a7:da:ee:4a:1f:1a:b0:
1d:58:f3:ce:c3:fd:51:4c:ce:64:ac:85:e6:11:4d:37:96:c8:
b2:33:91:27:3d:d9:3b:26:62:45:1b:a6:9e:d6:2b:4b:85:f8:
f2:38:34:2d:e9:40:3e:e3:2c:06:82:e0:1a:fb:ae:59:33:61:
c5:70:a3:80:c7:58:51:70:53:08:11:ea:ba:14:52:36:eb:50:
70:c9:0c:5a:b3:72:b0:8d:d6:20:33:a5:1c:9a:88:56:9d:1f:
85:23:4a:73:44:09:24:65:ec:5b:b9:33:fe:97:73:03:a9:b1:
25:94:3c:38:2b:7d:c9:2f:0d:20:b1:83:9e:88:9b:49:8e:a3:
cb:89:51:1c:07:dc:e1:38:ca:40:07:02:24:2d:e9:c8:ee:2c:
28:fa:df:9c:2e:ca:30:e4:45:d5:d1:b0:3a:e7:8a:2b:b4:55:
e5:cd:e4:7c:c6:c7:44:ca:5b:2c:7a:22:f9:dd:3f:e2:b1:78:
9d:d2:c3:92:cb:91:4f:cb:ab:54:02:6b:eb:a5:29:4e:af:45:
7d:08:b5:59:07:81:73:95:21:fb:49:5f:23:ce:3a:7b:63:ea:
ee:62:3a:87:97:1e:e1:dd:c9:87:f9:1a:0d:ad:5d:70:0f:5f:
4d:55:9b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:48:26 2024 by rpki-client on console-fra.rpki-client.org