Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/dCBzYuOMeJtZl0r3WmVQir9QD5U.roa
File: dCBzYuOMeJtZl0r3WmVQir9QD5U.roa (raw, json)
Hash identifier: Y/PQ5jZELnlIbAfugQHFqGhx/USckhiyCA0LyVwKNH0=
Subject key identifier: 74:20:73:62:E3:8C:78:9B:59:97:4A:F7:5A:65:50:8A:BF:50:0F:95
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0192842506FFAFF73303E49410252126A321
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/dCBzYuOMeJtZl0r3WmVQir9QD5U.roa
Signing time: Sun 13 Oct 2024 04:31:12 +0000
ROA not before: Sun 13 Oct 2024 04:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211056
IP address blocks: 45.11.186.0/24 maxlen: 24
45.81.16.0/24 maxlen: 24
45.81.17.0/24 maxlen: 24
45.81.18.0/24 maxlen: 24
45.81.19.0/24 maxlen: 24
185.201.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:84:25:06:ff:af:f7:33:03:e4:94:10:25:21:26:a3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Oct 13 04:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74207362e38c789b59974af75a65508abf500f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:77:76:ca:a4:6b:50:a1:fb:4d:cf:ef:c5:
c5:82:62:c3:f7:6d:4c:31:30:06:2f:d6:02:6a:00:
f0:32:50:e9:74:1b:c7:56:f4:f7:18:71:f1:dc:78:
29:b1:91:ae:79:bf:0d:78:e0:e9:d7:55:f0:ee:86:
93:37:c9:b8:65:0d:ca:07:39:c9:3d:e6:48:bc:73:
9b:3c:9c:8d:ff:0c:d1:0f:2b:ba:e6:4f:e4:48:72:
2c:68:04:e9:11:7d:e5:16:20:57:8f:a9:7f:61:a3:
12:65:eb:bc:e1:d5:a1:d5:6c:98:f1:33:20:93:6c:
3d:fa:fd:43:6f:f8:5d:f7:88:e8:91:78:59:fd:b3:
13:40:d8:49:ec:70:c3:94:5e:4a:47:37:df:43:ef:
5c:ad:f0:ad:9c:be:ae:0e:07:77:84:ba:ce:b2:91:
d7:18:eb:20:54:5f:56:45:7f:43:de:7f:1b:86:12:
43:26:9b:29:4c:0e:8f:c2:c0:c1:0b:46:7a:1d:ab:
99:53:48:b2:1e:58:9e:68:38:ad:d2:e5:0f:83:0f:
65:85:27:c1:20:1c:32:fe:c0:ad:04:e2:b5:8a:80:
8a:aa:d3:c2:d8:61:6c:47:8c:72:fc:bd:eb:63:54:
b3:77:c0:10:b2:23:3d:b6:09:65:35:97:4a:03:75:
26:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:20:73:62:E3:8C:78:9B:59:97:4A:F7:5A:65:50:8A:BF:50:0F:95
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/dCBzYuOMeJtZl0r3WmVQir9QD5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.186.0/24
45.81.16.0/22
185.201.49.0/24
Signature Algorithm: sha256WithRSAEncryption
13:6e:96:29:33:eb:54:78:7a:a9:82:e7:64:b1:90:6a:09:86:
93:04:da:ac:1d:11:a4:bd:64:c7:3a:94:68:a6:fa:70:e0:86:
8f:b8:44:fd:18:ba:b0:47:86:e2:86:35:47:28:91:35:aa:eb:
db:05:6f:a2:0f:e7:d1:e5:4c:82:e3:28:73:72:12:49:ee:0e:
92:af:1e:83:e7:31:10:5b:24:35:80:15:0c:cd:a4:b6:ab:4a:
ab:64:34:22:f1:88:e4:b0:38:1c:4d:dc:b8:58:a8:75:5f:07:
4a:9f:a4:ce:f3:55:68:55:30:28:61:ce:76:a6:9e:f8:ce:cb:
80:ef:bc:24:43:2a:bb:75:f2:d4:66:2d:5c:d6:7f:70:03:a4:
d8:2c:92:f9:da:33:7a:c6:31:7a:fd:28:59:a1:57:b9:0c:67:
1c:be:7e:fa:76:b2:36:10:cb:bd:32:ff:4a:b0:cc:2a:1b:d4:
90:af:73:f6:27:ac:23:f2:d0:de:1f:92:48:bf:e4:0d:df:6a:
20:4d:bb:d7:ad:58:65:b2:3f:76:f0:3d:b8:dc:d1:9b:7c:88:
0d:3a:3b:69:14:b9:91:56:28:f0:aa:a9:62:66:58:88:cf:9c:
05:d8:52:d7:e3:5c:34:ad:c0:82:b6:c1:1d:af:20:4a:9b:6a:
64:e4:0e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:57:46 2024 by rpki-client on console-fra.rpki-client.org