Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/XFupdCNwpqEnCTJQqZIzkCEE_gw.roa
File: XFupdCNwpqEnCTJQqZIzkCEE_gw.roa (raw, json)
Hash identifier: aXb+V05PGRqV65BaIWMNIMOApG2SR/+9bAtIG1jdo1E=
Subject key identifier: 5C:5B:A9:74:23:70:A6:A1:27:09:32:50:A9:92:33:90:21:04:FE:0C
Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922
Certificate serial: 018CC9BB9B4600AC78F5970E2C4B38860AE9
Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/XFupdCNwpqEnCTJQqZIzkCEE_gw.roa
Signing time: Tue 02 Jan 2024 10:32:44 +0000
ROA not before: Tue 02 Jan 2024 10:32:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203172
IP address blocks: 45.129.144.0/22 maxlen: 24
185.249.41.0/24 maxlen: 24
185.249.42.0/24 maxlen: 24
2a0e:5b44::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:9b:46:00:ac:78:f5:97:0e:2c:4b:38:86:0a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922
Validity
Not Before: Jan 2 10:32:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c5ba9742370a6a127093250a99233902104fe0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a3:9b:ae:07:82:a6:10:b4:4e:b8:f8:69:45:
fe:96:f0:a5:38:e7:f7:a8:09:a3:5a:60:58:91:e7:
11:aa:16:c3:67:19:3b:f6:d6:b2:c7:f1:f5:eb:99:
03:34:25:e8:a7:a9:af:1a:8a:69:ee:68:a6:3d:6e:
80:cc:19:68:df:bf:1a:de:8b:72:07:7d:99:ba:e7:
f5:f3:fb:69:aa:7d:83:99:7f:78:85:70:e8:f2:8e:
b5:bb:7f:e7:21:59:1f:39:88:56:a4:b5:10:00:b5:
b1:c5:91:70:ec:aa:0d:25:07:3f:0e:4a:7b:7d:23:
04:60:2c:d7:37:31:8f:6e:ea:87:ca:13:67:19:cb:
f5:e7:4a:66:de:98:77:f3:18:78:ee:f6:10:1e:e6:
a6:9d:aa:85:05:a5:4a:8b:5c:4d:80:17:84:ed:40:
7c:7f:1e:18:a7:ed:7d:3e:08:52:00:17:c8:be:c4:
19:ed:06:fd:8f:f2:c4:e7:aa:e6:ea:27:6f:22:03:
96:bf:e8:08:b4:39:50:d3:c8:b6:86:be:92:17:17:
49:af:8f:23:da:3b:e1:af:89:54:94:70:d9:e2:94:
3a:f4:00:3d:23:4d:06:e5:83:ec:5e:56:28:f8:98:
16:39:33:ad:5a:99:85:91:18:ac:b4:44:a8:e2:95:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5B:A9:74:23:70:A6:A1:27:09:32:50:A9:92:33:90:21:04:FE:0C
X509v3 Authority Key Identifier:
keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/XFupdCNwpqEnCTJQqZIzkCEE_gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.144.0/22
185.249.41.0-185.249.42.255
IPv6:
2a0e:5b44::/30
Signature Algorithm: sha256WithRSAEncryption
ac:1f:1d:4d:ad:d0:01:5a:57:ce:01:9d:5e:63:07:88:03:bb:
9d:d2:ed:34:f6:f0:0f:40:d2:28:85:93:5c:e4:dc:ba:a5:a9:
5e:8a:db:de:28:6a:24:54:43:50:28:7b:69:a1:28:c1:fd:a1:
b3:81:0f:92:8b:3f:e9:57:ee:85:1a:ad:82:ff:03:4c:88:0e:
d4:cb:75:99:62:34:f9:32:fb:59:21:2f:42:21:0c:f5:6b:e3:
02:14:93:28:04:81:c7:33:ff:2f:fe:61:c1:3e:59:ef:9c:c4:
dc:15:00:86:ef:2c:54:c9:97:8c:80:a6:a5:b2:23:de:39:97:
8e:85:1d:5b:a3:88:11:24:8c:12:a5:f1:ff:c8:fc:2f:10:fc:
9d:0b:b9:28:00:0c:85:7f:a8:74:15:b6:42:2b:95:3b:a5:49:
ba:b7:7a:f6:7c:c5:8e:c8:85:e1:c8:16:39:11:d0:cc:bd:4a:
3d:ca:40:69:db:23:15:7e:b8:70:e8:1d:2a:6a:6b:90:10:3c:
0b:e3:14:77:f4:7a:6b:7d:e8:c8:1b:f1:e0:11:10:83:c5:d5:
ba:fd:b2:04:f3:bf:c9:05:66:d1:74:0d:2b:7b:5c:c8:48:2a:
13:21:05:bf:ee:12:81:79:69:a1:93:c5:15:9b:0a:46:f9:03:
a6:ad:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:14:03 2024 by rpki-client on console-ams.rpki-client.org