Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oGnNGC95J6Q5zneYBzekZV7bmpI.roa
File: oGnNGC95J6Q5zneYBzekZV7bmpI.roa (raw, json)
Hash identifier: oEjV7yk+Aj3qUL4gji6aXis9bVyPkbrxKCigaMntI9o=
Subject key identifier: A0:69:CD:18:2F:79:27:A4:39:CE:77:98:07:37:A4:65:5E:DB:9A:92
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0191FE6309DC602F20BDDCDCFFED1A0130F2
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oGnNGC95J6Q5zneYBzekZV7bmpI.roa
Signing time: Tue 17 Sep 2024 05:09:48 +0000
ROA not before: Tue 17 Sep 2024 05:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 45.83.29.0/24 maxlen: 24
45.88.20.0/24 maxlen: 24
45.88.22.0/24 maxlen: 24
45.89.36.0/24 maxlen: 24
45.89.38.0/24 maxlen: 24
45.92.2.0/24 maxlen: 24
45.134.138.0/24 maxlen: 24
45.143.54.0/24 maxlen: 24
45.145.46.0/24 maxlen: 24
45.146.187.0/24 maxlen: 24
45.156.157.0/24 maxlen: 24
87.247.148.0/22 maxlen: 24
91.190.96.0/24 maxlen: 24
91.190.99.0/24 maxlen: 24
91.190.104.0/24 maxlen: 24
91.217.250.0/24 maxlen: 24
178.239.205.0/24 maxlen: 24
185.184.135.0/24 maxlen: 24
185.205.189.0/24 maxlen: 24
188.240.75.0/24 maxlen: 24
217.74.16.0/24 maxlen: 24
2a0b:64c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fe:63:09:dc:60:2f:20:bd:dc:dc:ff:ed:1a:01:30:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 17 05:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a069cd182f7927a439ce77980737a4655edb9a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:33:63:5d:ed:78:0b:f9:8c:21:5e:62:ad:1d:
0d:be:2b:88:95:b0:25:db:5c:fb:49:d9:be:ff:26:
6d:31:a4:27:d8:fc:f2:29:40:f9:55:40:fa:90:eb:
d1:13:01:ac:ce:a5:4e:d6:50:02:62:f8:1c:b1:92:
10:73:02:75:67:83:33:37:fd:74:54:3a:69:22:00:
35:f8:6f:96:3c:21:cd:05:1e:1c:05:03:35:fe:a7:
43:92:e4:93:72:9f:06:62:a3:bc:63:7a:e9:ae:64:
a1:0c:8c:5c:7b:7c:e7:97:a1:e2:8a:d3:3d:df:84:
db:2a:46:b3:05:5b:d5:9b:79:c4:6b:b4:6d:c7:3c:
1c:99:e7:35:78:8d:db:3f:6f:c0:3e:c4:95:1f:d6:
24:d3:98:2f:06:96:8e:c7:3c:60:7f:a1:2f:e4:58:
f2:8d:67:29:dc:0b:f4:25:5e:4c:13:57:90:cf:db:
ea:94:53:68:88:1e:dd:49:53:d0:95:83:8b:e8:74:
26:aa:88:e0:1c:eb:0c:c2:3c:8b:92:1a:e8:5e:e9:
aa:67:38:3a:e7:f0:e2:f6:77:ce:ce:77:c7:8c:6e:
be:ed:79:77:58:2c:da:67:da:7a:02:bf:4a:47:ba:
f1:d5:a6:a5:24:70:3c:6f:be:8a:a5:b1:fe:ba:60:
21:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:69:CD:18:2F:79:27:A4:39:CE:77:98:07:37:A4:65:5E:DB:9A:92
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oGnNGC95J6Q5zneYBzekZV7bmpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.29.0/24
45.88.20.0/24
45.88.22.0/24
45.89.36.0/24
45.89.38.0/24
45.92.2.0/24
45.134.138.0/24
45.143.54.0/24
45.145.46.0/24
45.146.187.0/24
45.156.157.0/24
87.247.148.0/22
91.190.96.0/24
91.190.99.0/24
91.190.104.0/24
91.217.250.0/24
178.239.205.0/24
185.184.135.0/24
185.205.189.0/24
188.240.75.0/24
217.74.16.0/24
IPv6:
2a0b:64c1::/32
Signature Algorithm: sha256WithRSAEncryption
50:64:39:77:4b:cd:1f:6e:4e:b5:77:2d:e7:a3:89:51:d1:cd:
aa:1a:1c:6e:41:40:11:57:6c:d3:e7:55:67:13:8d:28:70:12:
8e:c1:18:c5:3b:58:97:cf:78:11:b9:29:66:68:72:86:e3:7f:
eb:54:d0:54:56:a1:76:e9:43:f4:e4:dc:39:ae:43:d9:f5:a3:
47:e8:f3:9e:ef:b6:f5:b8:6f:18:52:e8:2a:b5:e6:46:70:28:
04:d5:90:04:33:97:4b:ef:59:ba:eb:f3:cd:62:63:da:6c:d5:
0d:7d:1a:d7:11:e8:6f:b3:d5:2f:c5:ef:75:42:9a:8d:61:79:
89:4b:11:99:80:80:84:95:89:57:c1:fe:ae:a5:8f:5d:6d:03:
8c:5a:c9:09:95:60:a4:51:d9:40:8b:80:e1:3e:97:a6:c1:b7:
f5:af:e0:83:41:de:bb:e0:85:27:38:23:b0:06:09:b0:85:8a:
00:84:27:a4:59:29:0b:35:c0:d8:b1:c8:3d:70:8b:41:cb:c6:
0b:41:3d:31:b8:9b:2d:bd:6f:3b:87:8d:4f:81:7d:a0:e8:7f:
bb:c3:4b:f9:b1:96:d1:f4:c2:6b:49:a9:94:7b:3a:77:9f:ce:
47:87:2b:63:9b:96:c0:7c:92:74:10:81:fa:75:01:c7:f7:03:
76:7c:95:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:02:22 2024 by rpki-client on console-ams.rpki-client.org