Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/dPTd3p9KMf4R-_jJOih7sM1149k.roa
File: dPTd3p9KMf4R-_jJOih7sM1149k.roa (raw, json)
Hash identifier: 0tbKnznFjv0Madv4i/cDvAijN7SgVKtH8AXlIcdKPBc=
Subject key identifier: 74:F4:DD:DE:9F:4A:31:FE:11:FB:F8:C9:3A:28:7B:B0:CD:75:E3:D9
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 0192B8FFAEDFC743BFAF09247BA779842A6A
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/dPTd3p9KMf4R-_jJOih7sM1149k.roa
Signing time: Wed 23 Oct 2024 10:50:16 +0000
ROA not before: Wed 23 Oct 2024 10:50:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd00::/29 maxlen: 48
2a0f:fd03::/32 maxlen: 32
2a0f:fd04::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b8:ff:ae:df:c7:43:bf:af:09:24:7b:a7:79:84:2a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 23 10:50:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74f4ddde9f4a31fe11fbf8c93a287bb0cd75e3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:0a:e5:b6:fa:f9:c8:27:1f:5b:60:3c:da:
04:e8:96:a3:6c:42:db:37:50:14:4a:28:d9:bb:8e:
80:a5:4e:75:b6:82:9b:a8:dc:8d:a4:52:3a:73:16:
8d:c6:ae:97:32:fe:82:7b:2a:d4:97:71:b6:e6:76:
20:89:52:5b:7f:fe:a2:0d:96:83:a3:ed:2b:de:cd:
d9:ab:08:19:5c:ee:6d:1e:9d:0d:b9:3b:e3:17:ff:
c1:bf:9e:e3:9d:fd:06:9b:a3:bc:a5:93:d7:7f:b3:
7f:21:79:4d:7b:57:99:94:61:bc:67:3b:75:27:ea:
7b:15:93:88:d4:3f:00:b7:31:65:73:de:8e:9c:29:
e6:7b:0a:62:7b:8a:33:4f:8e:08:3f:ee:de:b4:2b:
24:a1:fe:52:96:ab:1d:e8:0c:5b:a1:3a:4e:78:d1:
e9:2d:1c:56:a1:e0:a0:2b:49:b5:7b:d7:5e:5e:27:
21:59:20:18:3e:49:36:fc:45:e5:d0:80:b1:e7:70:
1f:ce:f3:3e:e5:41:66:aa:04:d5:af:a5:82:3d:35:
af:b3:e6:10:e4:b0:88:c6:51:40:f5:4f:f4:e7:13:
03:dd:f8:c4:b6:43:7f:c7:68:22:3e:19:a9:b8:5c:
a3:86:e9:f9:fb:f8:8d:b9:09:28:b9:f7:84:70:5c:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F4:DD:DE:9F:4A:31:FE:11:FB:F8:C9:3A:28:7B:B0:CD:75:E3:D9
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/dPTd3p9KMf4R-_jJOih7sM1149k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
53:70:d5:c1:08:33:53:e5:f1:2e:dc:bb:ac:f7:b5:d5:8e:2f:
3d:f2:af:6e:3b:11:61:63:bd:5b:7d:f3:d1:5a:2c:f3:da:e8:
ce:46:b9:5c:b3:74:b2:10:28:77:91:ca:27:a7:ae:fe:30:d1:
1f:ee:7d:e6:75:ff:db:b3:e5:cb:73:aa:3e:83:da:bb:cf:0a:
91:04:a0:0d:f1:44:f4:9c:18:31:2e:0e:58:b2:ef:20:22:de:
db:82:26:9b:43:d3:91:7e:d0:fb:b7:8d:72:c0:2e:b4:bc:d0:
77:4c:92:10:04:70:ea:4a:f1:ae:07:f7:d4:87:a9:dd:78:03:
07:eb:88:31:cb:ae:4c:79:59:c8:20:8d:d9:89:37:62:1b:ab:
30:52:7d:89:57:c5:54:45:d7:c8:2d:dd:18:bf:37:92:a8:46:
e3:a4:a7:de:27:4f:be:4d:ac:5a:f9:7f:97:f8:e1:c4:30:8d:
21:35:99:6e:95:fa:49:d5:98:da:ee:4c:47:17:2a:c0:6b:e9:
cf:f1:a1:70:0a:e3:a7:35:a6:ab:63:e0:93:08:b9:01:89:0f:
31:ee:23:ce:f9:f6:d6:f0:56:d2:54:3a:6c:e9:98:93:c4:19:
83:01:5e:c0:56:2f:d3:06:a7:18:9a:34:63:ef:9a:9f:c7:eb:
d2:63:46:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:53 2024 by rpki-client on console-fra.rpki-client.org