Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Vu3tpqERZfzftBRNZIJEarlq8rk.roa
File: Vu3tpqERZfzftBRNZIJEarlq8rk.roa (raw, json)
Hash identifier: rJZToYrR54Pdw9beOFXZH4H644PWDFUR/7qmkb0PawY=
Subject key identifier: 56:ED:ED:A6:A1:11:65:FC:DF:B4:14:4D:64:82:44:6A:B9:6A:F2:B9
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018D2D6E2DBFC6E2BFBFF4ABF1A7F30B1E86
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Vu3tpqERZfzftBRNZIJEarlq8rk.roa
Signing time: Sun 21 Jan 2024 19:10:11 +0000
ROA not before: Sun 21 Jan 2024 19:10:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 45.10.109.0/24 maxlen: 24
45.11.212.0/24 maxlen: 24
45.88.208.0/24 maxlen: 24
45.88.211.0/24 maxlen: 24
176.53.187.0/24 maxlen: 24
193.56.185.0/24 maxlen: 24
193.160.211.0/24 maxlen: 24
194.32.124.0/24 maxlen: 24
194.32.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2d:6e:2d:bf:c6:e2:bf:bf:f4:ab:f1:a7:f3:0b:1e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 21 19:10:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56ededa6a11165fcdfb4144d6482446ab96af2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1f:27:22:7b:d2:fb:f0:43:4a:80:d9:e6:c0:
d0:8c:dd:d6:d0:5f:60:d6:02:2f:1f:9e:af:88:f9:
58:f3:cb:f8:e9:6d:dc:48:f6:fa:61:0a:23:67:86:
38:68:dd:fd:cf:70:fc:dc:61:31:64:a3:15:fe:36:
99:82:b8:50:c4:57:79:b3:cf:c8:43:34:5a:c5:fc:
2b:d4:21:40:8a:8a:3e:e6:38:35:ea:63:8b:2a:2e:
29:b1:3d:89:30:db:f4:9f:10:97:95:0f:60:98:09:
78:e2:12:29:5a:67:28:9d:18:c7:37:dd:3a:3c:16:
7e:c8:12:54:69:1d:3d:78:08:29:eb:74:50:92:87:
26:00:8d:61:24:b0:6f:20:94:97:7d:c4:c5:17:1a:
fd:d9:c1:93:b6:da:09:31:6a:a4:2a:c3:5d:5f:c7:
44:d9:32:bb:24:43:93:3e:a5:42:61:77:cd:a7:f2:
f4:c1:45:d9:75:ef:0d:e8:a9:26:c8:69:55:15:44:
ba:83:91:22:e3:e1:62:52:39:fa:9f:60:b7:e1:83:
fe:6f:64:a9:ff:be:8c:d3:65:d2:61:93:d8:18:a5:
ee:39:d1:7c:11:52:8c:af:eb:6d:97:8e:a7:07:c2:
c2:ab:33:40:5e:41:41:cc:6d:07:b6:f1:52:93:d9:
8e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:ED:ED:A6:A1:11:65:FC:DF:B4:14:4D:64:82:44:6A:B9:6A:F2:B9
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Vu3tpqERZfzftBRNZIJEarlq8rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.109.0/24
45.11.212.0/24
45.88.208.0/24
45.88.211.0/24
176.53.187.0/24
193.56.185.0/24
193.160.211.0/24
194.32.124.0/24
194.32.126.0/24
Signature Algorithm: sha256WithRSAEncryption
29:02:09:fb:ae:80:bf:a8:15:d8:e2:a0:97:39:0c:83:23:e5:
ea:7b:99:d6:f6:ff:fb:be:c2:ea:ff:e7:af:a2:fa:f1:92:9a:
b0:4f:d4:ea:d0:31:72:f5:41:d4:ae:0d:23:39:cd:4d:5a:b9:
73:82:61:58:ab:e1:3b:62:82:b9:05:ed:a5:6f:cc:4a:87:07:
e2:ea:62:54:fc:87:6e:64:67:a0:95:d1:58:89:0e:26:c9:b6:
aa:d5:cf:15:71:48:70:df:c2:ab:69:9b:fc:c2:62:29:26:7b:
2b:dc:eb:8a:24:be:09:54:97:f7:bb:a3:69:00:72:a6:18:aa:
1d:50:32:a9:a3:36:a2:32:46:75:13:f8:e2:f7:c6:cb:88:a6:
4c:15:79:17:02:34:8a:c5:31:94:ca:15:87:8f:a0:b1:63:59:
d4:15:ce:bb:ad:db:23:01:a4:16:4e:4b:d6:6e:8b:55:da:cb:
76:cd:b3:08:e1:39:59:b1:95:6d:a2:0d:ed:00:f4:05:88:48:
ca:c6:c8:2a:ed:e4:d6:d3:d6:9f:cc:15:24:c6:77:4a:a4:58:
c2:8e:13:8b:7d:d8:45:97:79:20:c3:63:c6:76:73:60:70:1b:
c8:54:ac:56:07:5b:bf:75:c8:4f:3a:26:b6:bf:21:50:17:63:
f7:db:86:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 06:30:07 2024 by rpki-client on console-ams.rpki-client.org