Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/u0lxInzTm6wQoMAeMAacOsCrojY.roa
File: u0lxInzTm6wQoMAeMAacOsCrojY.roa (raw, json)
Hash identifier: jr0P023QwWzsuhbWudk8vfBOw4tX51qTNv5CZA6l5eg=
Subject key identifier: BB:49:71:22:7C:D3:9B:AC:10:A0:C0:1E:30:06:9C:3A:C0:AB:A2:36
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0191D52FC30A1B38C4BB7896710D59585484
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/u0lxInzTm6wQoMAeMAacOsCrojY.roa
Signing time: Mon 09 Sep 2024 05:09:22 +0000
ROA not before: Mon 09 Sep 2024 05:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 45.67.96.0/24 maxlen: 24
45.130.80.0/24 maxlen: 24
45.130.81.0/24 maxlen: 24
45.130.83.0/24 maxlen: 24
45.135.186.0/24 maxlen: 24
45.140.135.0/24 maxlen: 24
89.38.70.0/24 maxlen: 24
89.47.15.0/24 maxlen: 24
91.217.249.0/24 maxlen: 24
185.192.16.0/24 maxlen: 24
185.192.71.0/24 maxlen: 24
188.212.135.0/24 maxlen: 24
193.19.109.0/24 maxlen: 24
203.26.81.0/24 maxlen: 24
203.159.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d5:2f:c3:0a:1b:38:c4:bb:78:96:71:0d:59:58:54:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 9 05:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb4971227cd39bac10a0c01e30069c3ac0aba236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:1f:ab:a4:8f:2a:b9:a4:d5:fe:fb:cd:c9:
19:29:17:dd:d2:91:0a:8d:ed:1e:4f:9d:8c:b5:d2:
3c:7d:3b:05:40:2d:ed:2a:36:97:a4:e4:c6:73:c4:
1e:15:19:35:01:90:8d:b7:94:b2:35:e2:cb:4d:af:
19:6b:64:ce:25:95:f3:65:29:c8:3b:2b:ae:e8:b6:
d0:c0:5c:1a:3e:cb:e7:63:66:31:f0:c4:0b:2e:f7:
5a:fd:34:7c:8a:72:87:49:bd:a7:ce:0d:4b:99:78:
c2:d1:6f:de:9e:cb:97:cb:07:5a:d2:39:55:69:24:
c1:6d:c3:80:f7:25:59:01:67:70:84:f0:20:0a:34:
98:39:87:e0:e3:3f:25:7a:e9:9a:57:d6:c5:ef:f7:
ce:fc:6e:55:ac:63:7d:f0:18:89:d3:5c:68:68:ff:
a3:f4:30:19:37:11:90:df:29:bf:f5:1d:87:83:38:
34:05:8d:12:cd:b0:26:66:9a:58:3e:16:41:c2:7b:
fd:f6:8e:61:3d:e9:5f:04:52:f2:8c:4b:6b:fc:5a:
b5:75:5e:54:40:90:b2:c1:19:59:fa:57:82:8f:68:
41:57:06:b9:be:ed:7d:81:04:10:12:69:66:d5:79:
49:3e:4d:7f:20:d9:dd:8f:b7:af:6a:61:12:4d:f8:
2b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:49:71:22:7C:D3:9B:AC:10:A0:C0:1E:30:06:9C:3A:C0:AB:A2:36
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/u0lxInzTm6wQoMAeMAacOsCrojY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.96.0/24
45.130.80.0/23
45.130.83.0/24
45.135.186.0/24
45.140.135.0/24
89.38.70.0/24
89.47.15.0/24
91.217.249.0/24
185.192.16.0/24
185.192.71.0/24
188.212.135.0/24
193.19.109.0/24
203.26.81.0/24
203.159.81.0/24
Signature Algorithm: sha256WithRSAEncryption
83:2d:8a:a5:5d:e1:7f:5f:e1:e3:fe:fd:14:cb:7e:6b:16:65:
92:ad:7f:54:08:a0:98:ff:b3:b7:54:8d:b9:9b:c0:25:67:b4:
6e:67:31:a0:7c:a7:30:5e:78:8a:ca:c0:ef:39:ad:5f:14:42:
5c:8b:47:7a:d4:99:f4:3f:79:23:a0:92:3d:4b:da:62:38:e7:
bb:ad:76:6f:d8:32:a8:ba:ee:6d:ba:c6:32:39:96:23:49:f6:
49:4b:68:a0:cf:49:1d:13:1c:8f:55:ce:7b:cc:d2:62:4d:95:
63:0f:d6:82:93:e5:cb:78:61:06:82:fb:0c:59:1d:09:e0:b6:
1a:1a:76:b4:cc:c8:cf:59:57:06:e9:81:39:2b:c2:6c:db:d0:
60:4d:8e:b9:93:34:a9:14:fb:d4:38:ab:fd:08:d8:d6:a6:56:
b5:79:e0:2d:0d:03:68:ae:a1:e6:da:50:0c:ea:00:00:7a:d1:
a4:e4:19:96:f4:7d:20:15:26:e6:18:30:d5:65:60:84:4c:40:
7e:17:18:77:ce:39:c5:79:2b:94:a5:cd:ee:15:90:cb:51:1d:
f6:62:dd:6d:e7:6b:94:84:1b:13:8a:36:55:82:44:75:54:65:
c1:b2:6d:ea:36:d2:0c:37:a7:3a:51:16:8f:f4:1c:01:17:8f:
cd:7e:c3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:52 2024 by rpki-client on console-fra.rpki-client.org