Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/l-l-a5PsWdlNkErmVKfPkDVYaHg.roa
File: l-l-a5PsWdlNkErmVKfPkDVYaHg.roa (raw, json)
Hash identifier: OVC4/xNBCw+wEr/e1oWjexY12494CqBICyzEDbUwnZc=
Subject key identifier: 97:E9:7E:6B:93:EC:59:D9:4D:90:4A:E6:54:A7:CF:90:35:58:68:78
Certificate issuer: /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial: 018CC4253E52FB8E5DBBEAE374C72EF6E46E
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/l-l-a5PsWdlNkErmVKfPkDVYaHg.roa
Signing time: Mon 01 Jan 2024 08:30:24 +0000
ROA not before: Mon 01 Jan 2024 08:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206375
IP address blocks: 45.135.204.0/24 maxlen: 32
45.135.206.0/24 maxlen: 32
45.135.205.0/24 maxlen: 32
45.135.207.0/24 maxlen: 32
139.28.106.0/24 maxlen: 32
139.28.107.0/24 maxlen: 32
185.188.131.0/24 maxlen: 32
185.188.130.0/24 maxlen: 32
185.188.129.0/24 maxlen: 32
185.188.128.0/24 maxlen: 32
185.219.179.0/24 maxlen: 32
185.219.178.0/24 maxlen: 32
185.219.177.0/24 maxlen: 32
185.219.176.0/24 maxlen: 32
139.28.105.0/24 maxlen: 32
139.28.104.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:3e:52:fb:8e:5d:bb:ea:e3:74:c7:2e:f6:e4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Validity
Not Before: Jan 1 08:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97e97e6b93ec59d94d904ae654a7cf9035586878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:36:6e:05:4e:61:6b:49:8b:1a:b1:2c:5c:dd:
95:55:c0:37:90:a2:89:be:72:aa:a1:7f:cf:b9:22:
81:ad:ee:91:53:cb:c8:ac:2d:f5:13:85:ca:13:c3:
bb:0c:66:4e:13:51:fa:86:06:b2:04:bd:cb:88:6b:
64:6b:87:e9:f3:23:53:0f:02:6e:52:68:54:f6:52:
07:f1:83:d9:c4:6a:66:60:9b:64:7e:46:ff:b0:67:
4d:19:8e:a5:f1:5d:c0:c3:8d:c2:f1:34:ba:68:ff:
3f:8b:0e:91:83:13:9d:c1:11:bb:ac:fe:50:99:c6:
0b:03:0d:92:7e:83:7e:6a:b9:e2:88:76:30:d9:01:
c2:14:13:dc:78:73:8d:6a:81:3e:cd:e6:41:ae:4d:
47:a8:63:46:bb:1f:b0:52:14:fd:bc:13:7c:6d:77:
0d:b4:19:05:15:64:16:75:66:a3:28:59:a7:c6:88:
bd:7b:c9:4c:f7:39:a9:aa:76:ba:db:59:e9:38:00:
13:a7:30:cf:2d:2b:e8:16:73:66:38:2d:07:ec:cf:
86:02:a8:38:f8:10:fb:cd:f3:c8:72:d6:c9:d7:2c:
d0:0e:1b:f2:52:2e:eb:09:00:f5:98:b4:4c:7d:e0:
1c:4a:53:61:fc:10:15:bb:ae:85:8d:bd:50:0c:df:
b2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E9:7E:6B:93:EC:59:D9:4D:90:4A:E6:54:A7:CF:90:35:58:68:78
X509v3 Authority Key Identifier:
keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/l-l-a5PsWdlNkErmVKfPkDVYaHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.204.0/22
139.28.104.0/22
185.188.128.0/22
185.219.176.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:c3:f0:2c:92:27:75:cc:9a:61:d2:81:f0:40:d4:72:ad:5f:
a7:c2:fc:52:c5:0b:d7:0a:4e:06:27:76:66:27:c9:2c:d5:de:
c0:4e:a7:d3:30:8b:57:26:24:af:18:6c:05:a8:af:0d:02:c7:
5d:15:b3:51:f4:77:49:0a:1f:5b:19:d0:07:2d:be:d4:eb:b7:
08:6f:9a:25:50:db:3c:db:31:f1:74:ab:ea:75:52:ac:bd:95:
ab:06:f0:52:c2:1c:31:52:ab:55:a3:10:d4:33:7a:f3:11:23:
e2:01:4e:5d:4e:26:12:cd:a1:11:ec:c1:81:8d:4e:73:23:62:
6d:ac:de:fc:be:ad:30:32:66:16:d2:07:bf:c7:69:bd:ad:4a:
ae:7f:71:ac:fa:9a:b6:d4:dc:aa:9c:e5:d4:f0:80:b4:94:a7:
44:bf:bd:06:d1:d8:32:6b:52:1b:ec:c6:9f:c5:f0:8d:d4:46:
03:32:1a:16:c7:08:74:b8:8a:08:75:19:b8:44:f9:01:3a:cf:
1c:ce:51:c2:d2:e1:70:a7:8d:3b:8a:ee:28:0a:fc:24:6c:7b:
16:2a:e5:01:4b:74:a9:77:95:e6:fb:19:19:91:d9:21:dd:e4:
01:e4:6e:af:b9:97:24:2d:fd:be:4f:58:09:c9:c5:4d:1b:a7:
44:f9:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:19:30 2024 by rpki-client on console-fra.rpki-client.org