Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/pBUImblS5yyhXgiTrJtdcng-NUo.roa
File: pBUImblS5yyhXgiTrJtdcng-NUo.roa (raw, json)
Hash identifier: e1YVXqd1bfUxp+qzdCBgp+sO9HaHc9reb+Q3jUUWUV4=
Subject key identifier: A4:15:08:99:B9:52:E7:2C:A1:5E:08:93:AC:9B:5D:72:78:3E:35:4A
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 019294A6CB074DDD0B4D740D8B04F7D2E8DD
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/pBUImblS5yyhXgiTrJtdcng-NUo.roa
Signing time: Wed 16 Oct 2024 09:26:51 +0000
ROA not before: Wed 16 Oct 2024 09:26:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 45.87.44.0/22 maxlen: 24
91.227.184.0/24 maxlen: 24
91.234.192.0/24 maxlen: 24
178.239.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:a6:cb:07:4d:dd:0b:4d:74:0d:8b:04:f7:d2:e8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Oct 16 09:26:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4150899b952e72ca15e0893ac9b5d72783e354a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:98:01:3b:13:fd:44:a8:b5:b6:89:c3:1e:
50:b7:35:36:8f:f5:8d:99:09:28:d6:85:92:8f:f7:
d5:42:86:3d:42:4b:5b:10:bf:4d:11:cb:73:c2:f1:
94:a6:a4:21:dc:3d:2a:9c:85:56:b8:b6:78:c2:c8:
66:a4:81:78:e8:11:1f:57:08:14:7a:08:e9:3b:95:
05:8e:ef:9c:f9:d0:93:8b:e7:33:7d:30:41:86:3f:
57:d2:a1:e9:b6:0e:4d:70:90:ab:43:5b:ef:23:77:
6f:94:19:a5:8f:20:76:43:24:86:f3:05:ca:c4:e9:
8f:b7:61:4d:53:be:31:df:8e:af:ac:0c:fa:21:3d:
2b:ab:12:b2:e0:e3:12:44:69:62:5e:d4:ca:c3:30:
e9:c5:c6:c0:9b:50:6f:9e:a4:fc:17:cb:2b:47:e6:
d4:13:ae:38:b8:a6:72:3f:40:e8:fc:6f:38:e1:a5:
cc:aa:d2:4f:be:f3:dd:4c:60:db:0d:c8:cb:42:66:
76:3b:e3:54:62:ae:77:1f:7a:24:e3:5d:2d:0b:ac:
d5:54:fa:7a:8e:f1:9b:75:e0:72:00:43:1c:83:03:
ad:1e:6e:82:64:f1:ce:19:ab:47:55:36:2b:6b:d8:
87:d4:ff:75:b9:de:36:61:2b:39:c8:79:1f:ba:1f:
c1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:15:08:99:B9:52:E7:2C:A1:5E:08:93:AC:9B:5D:72:78:3E:35:4A
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/pBUImblS5yyhXgiTrJtdcng-NUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.44.0/22
91.227.184.0/24
91.234.192.0/24
178.239.28.0/23
Signature Algorithm: sha256WithRSAEncryption
34:9e:99:c5:89:bf:1d:52:d3:13:b0:34:3e:f4:3d:91:15:ff:
18:2b:57:f8:9a:6b:48:2d:dd:47:96:10:4d:6b:38:13:e6:67:
88:3c:53:2c:4b:01:e7:9b:02:79:b2:59:06:55:cb:85:60:02:
e4:52:79:ef:5d:b3:61:ea:2b:a6:de:03:49:79:3b:55:68:65:
fd:0e:43:63:13:14:17:49:42:a7:ca:06:36:84:81:cc:e6:54:
9f:0a:fe:fe:36:a0:d9:eb:c0:8a:53:2c:a2:81:bc:aa:17:25:
90:51:4b:eb:7b:25:5e:50:b5:30:eb:ef:f8:d4:4b:c2:c9:c5:
fb:1f:a3:5b:42:11:08:8b:05:46:db:4d:15:f3:ad:a0:f7:23:
6d:54:49:96:b0:e6:e9:9c:08:96:83:35:30:91:ae:02:30:69:
89:16:dd:67:35:15:89:f9:39:da:8a:c5:8d:f4:af:d4:46:bd:
bd:3c:2a:88:fa:50:13:e4:06:0c:2e:da:c4:7e:4e:4c:66:be:
06:08:fd:7f:80:3f:69:b8:67:61:34:3d:73:9a:27:68:9d:d0:
c9:89:49:1a:69:c5:61:37:a7:53:07:31:d7:7a:ea:ee:4d:aa:
7e:46:bd:7a:50:12:9c:5e:eb:6f:8d:83:aa:30:d2:9b:76:52:
b1:9d:d7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:04 2024 by rpki-client on console-ams.rpki-client.org