Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/tRZxBojpbdDGGV5XS2J3rJgGOu0.roa
File: tRZxBojpbdDGGV5XS2J3rJgGOu0.roa (raw, json)
Hash identifier: TSL2bYCuMHY9Y9cjVata7ZirXCJQa3BlE48g8vhHRLE=
Subject key identifier: B5:16:71:06:88:E9:6D:D0:C6:19:5E:57:4B:62:77:AC:98:06:3A:ED
Certificate issuer: /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Certificate serial: 018F19CC57AB1F34E2050316E4E42A8D7892
Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/tRZxBojpbdDGGV5XS2J3rJgGOu0.roa
Signing time: Fri 26 Apr 2024 09:46:13 +0000
ROA not before: Fri 26 Apr 2024 09:46:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57468
IP address blocks: 45.15.220.0/22 maxlen: 22
185.6.208.0/22 maxlen: 22
185.6.209.0/24 maxlen: 24
185.6.210.0/24 maxlen: 24
185.6.211.0/24 maxlen: 24
185.144.32.0/22 maxlen: 22
194.60.240.0/23 maxlen: 23
194.60.240.0/24 maxlen: 24
194.60.241.0/24 maxlen: 24
2a03:1040::/32 maxlen: 32
2a07:3a80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:cc:57:ab:1f:34:e2:05:03:16:e4:e4:2a:8d:78:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Validity
Not Before: Apr 26 09:46:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b516710688e96dd0c6195e574b6277ac98063aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:cf:0a:f6:9d:8b:65:2a:e8:dd:36:ed:ed:
da:a6:04:aa:2a:53:b6:b3:f0:39:e6:03:6d:8d:50:
5d:87:78:bf:b0:93:f5:46:fc:86:cf:07:f2:e9:09:
44:7a:a8:50:21:d4:22:17:2b:9e:cd:ce:56:01:3c:
4d:9c:85:6b:17:d0:1d:e1:c5:ce:4a:c3:eb:75:2b:
93:b4:fc:de:5e:c0:a5:2c:6d:85:a0:a8:1c:23:91:
06:16:47:74:df:75:70:ab:32:68:89:9d:43:9c:e3:
1d:eb:75:1c:f0:bb:ad:5d:d8:da:f7:96:87:c9:b4:
0c:af:42:f5:49:da:e4:1f:be:12:ea:17:ca:20:d0:
e2:f0:d4:57:21:37:32:e9:13:e9:fc:f7:f8:25:64:
6d:02:f9:e1:21:14:93:05:2e:14:89:dd:1a:77:ea:
78:d7:f8:b6:14:9d:85:bf:a0:2e:6e:b3:6d:36:84:
ed:f9:1d:8d:1c:89:cb:cb:c2:de:16:e0:10:5e:79:
c4:74:ac:d4:fe:c9:ad:8f:c7:a4:c7:b7:b5:35:8c:
77:7e:f3:b7:d2:df:47:26:0a:2f:35:bc:cd:0b:2b:
87:64:16:cf:36:d5:08:78:db:83:ab:81:6f:a5:02:
e3:15:10:98:d7:65:7d:de:58:30:d1:0e:90:d5:e7:
7a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:16:71:06:88:E9:6D:D0:C6:19:5E:57:4B:62:77:AC:98:06:3A:ED
X509v3 Authority Key Identifier:
keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/tRZxBojpbdDGGV5XS2J3rJgGOu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.220.0/22
185.6.208.0/22
185.144.32.0/22
194.60.240.0/23
IPv6:
2a03:1040::/32
2a07:3a80::/29
Signature Algorithm: sha256WithRSAEncryption
37:29:32:ea:4c:c7:3d:7e:e2:66:df:0a:79:59:57:87:27:80:
f0:42:ba:64:22:a8:ad:cf:66:16:bd:a2:25:7c:ee:d3:5e:c3:
54:7d:5e:15:5b:ba:58:c7:be:69:01:d9:ef:0f:e4:ea:ee:2d:
c6:66:fa:a9:5e:ac:11:45:9a:ae:72:42:5a:da:b2:e5:0c:56:
a9:03:2f:59:24:14:e1:82:62:7a:c5:44:14:a4:5d:ca:c2:ba:
13:b8:e3:fe:6d:29:ea:0c:27:e2:94:bf:38:0a:70:87:23:08:
f9:fb:4a:ab:4f:e8:35:af:48:f1:3b:6b:0d:c9:27:2d:6f:e1:
31:f2:c1:51:58:83:47:87:7a:35:70:9b:bd:ae:6c:08:07:57:
00:27:c2:f2:54:5e:ec:27:86:0b:43:85:74:a8:55:d8:b5:8d:
7f:16:ff:53:6d:38:bb:99:97:3b:77:3b:14:60:f7:23:00:cd:
bc:84:32:47:4f:0e:fc:97:3f:8d:b3:68:21:3f:38:4e:1f:97:
72:60:e9:f4:b2:8a:ee:e2:7a:88:58:86:89:f7:9e:5d:52:55:
28:06:0d:11:0b:ba:ae:b0:24:29:73:b2:45:82:28:27:d2:7d:
71:98:8b:db:25:a1:2a:89:d6:a4:b8:6c:f3:f3:25:b9:37:da:
38:e3:1e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:16 2024 by rpki-client on console-ams.rpki-client.org