Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/rDaLnnXQoOf0Nh1KRTZ2z9sCcdw.roa
File: rDaLnnXQoOf0Nh1KRTZ2z9sCcdw.roa (raw, json)
Hash identifier: Df/vOhQWOVGGprMZ6Rt0ucuwuWEAIdgAx05TDYtZOrQ=
Subject key identifier: AC:36:8B:9E:75:D0:A0:E7:F4:36:1D:4A:45:36:76:CF:DB:02:71:DC
Certificate issuer: /CN=48c741c9df5b2e48993b9183b79ff346b4319381
Certificate serial: 018CCA29ED45AF9729C20E5CCA381C845D1B
Authority key identifier: 48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/rDaLnnXQoOf0Nh1KRTZ2z9sCcdw.roa
Signing time: Tue 02 Jan 2024 12:33:14 +0000
ROA not before: Tue 02 Jan 2024 12:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207164
IP address blocks: 45.15.224.0/22 maxlen: 24
185.164.80.0/22 maxlen: 24
2a0e:5180::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:ed:45:af:97:29:c2:0e:5c:ca:38:1c:84:5d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c741c9df5b2e48993b9183b79ff346b4319381
Validity
Not Before: Jan 2 12:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac368b9e75d0a0e7f4361d4a453676cfdb0271dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:8e:80:5c:5a:33:a1:72:28:91:ce:de:72:
aa:04:76:7f:94:43:2f:8a:91:28:4c:31:79:79:0e:
c3:9f:c9:d6:c8:d1:5d:df:56:8a:7a:7a:ed:d2:fa:
8e:d5:7b:76:02:f5:6d:f7:7b:87:0b:d7:12:98:6c:
d0:4d:c6:88:bf:e4:22:cb:de:60:d8:a6:e3:c0:ae:
e6:12:01:b3:cb:ce:39:53:7f:23:05:1e:90:b3:9a:
29:b0:bb:fb:d0:60:7b:8e:eb:4d:91:82:65:da:12:
7d:82:24:d2:00:f0:28:af:2c:d6:27:f4:65:41:c7:
9b:fa:5e:9b:4d:67:c7:48:aa:20:5a:5c:8f:7d:f5:
d0:10:5a:22:e8:8d:dd:5b:5e:68:a2:9a:99:52:80:
f5:6c:7c:6d:ea:88:57:b5:03:90:a8:3b:d0:09:2e:
f5:85:f7:f7:32:ff:f2:76:9d:54:04:b8:07:72:a2:
d3:bc:c8:e9:b2:b7:ef:4c:96:fc:29:37:dd:db:4b:
9b:17:b1:08:a9:55:9b:f6:be:1e:a2:42:bf:db:9d:
7a:55:ee:e6:c9:be:b5:3d:cf:f9:05:37:4e:d0:cf:
e1:65:28:fc:0e:bf:b5:7c:a7:d4:64:7d:0c:c1:4d:
cc:a1:7e:34:dc:9d:cf:37:cd:f4:92:8e:26:4b:d2:
b6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:36:8B:9E:75:D0:A0:E7:F4:36:1D:4A:45:36:76:CF:DB:02:71:DC
X509v3 Authority Key Identifier:
keyid:48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/rDaLnnXQoOf0Nh1KRTZ2z9sCcdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.224.0/22
185.164.80.0/22
IPv6:
2a0e:5180::/29
Signature Algorithm: sha256WithRSAEncryption
12:00:b3:39:70:d9:a6:b3:03:50:05:08:9b:56:77:ed:ad:88:
f5:80:82:fc:42:9c:59:49:e9:92:3a:a9:ab:9a:20:0f:d5:03:
cc:c7:50:bb:bd:5a:ff:c5:29:7e:8b:bb:05:42:9a:47:dc:37:
1d:85:b5:b6:a1:1c:bd:1f:56:ec:a5:44:47:ab:10:b1:71:88:
8a:2f:d0:4b:f9:68:7a:78:f2:a6:ac:99:e5:0a:5b:d5:e9:4b:
83:1e:c0:6f:76:7a:4b:04:1a:85:03:8f:24:76:9f:59:4c:f7:
ca:27:c9:15:b2:c5:65:f1:49:60:e9:3b:64:4e:20:29:f1:4f:
34:aa:6f:a6:af:f8:fa:60:73:f0:a0:a5:a3:cd:89:c5:b1:e6:
90:10:e3:fd:b9:b8:63:51:b3:8e:17:fc:03:4f:3b:97:87:50:
bd:fc:06:9e:27:b0:98:76:ac:d4:b1:18:82:74:0e:d1:9c:21:
c9:69:26:8b:a7:50:aa:4e:28:88:1e:73:08:c4:cc:32:47:fb:
a2:91:9b:cc:07:77:17:d2:d0:11:0b:2d:e9:27:eb:0b:fa:e1:
20:d5:96:78:06:6a:06:58:d5:9d:a3:12:9d:e7:02:5d:3e:06:
53:42:70:42:95:23:86:9e:2c:ef:fd:6c:bc:f5:a3:3a:c1:db:
30:f9:07:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 01:43:19 2024 by rpki-client on console-fra.rpki-client.org