Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/0fxd1fGSflzAiDMBGk5TnuwKK9E.roa
File: 0fxd1fGSflzAiDMBGk5TnuwKK9E.roa (raw, json)
Hash identifier: 9zcdDSmnKaZgpKeJlUXiriC+vkAnG5hfvoJB+40ubwE=
Subject key identifier: D1:FC:5D:D5:F1:92:7E:5C:C0:88:33:01:1A:4E:53:9E:EC:0A:2B:D1
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01931F1D8D3122AE4864F118A571C8095802
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/0fxd1fGSflzAiDMBGk5TnuwKK9E.roa
Signing time: Tue 12 Nov 2024 06:44:10 +0000
ROA not before: Tue 12 Nov 2024 06:44:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
45.147.45.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440:8::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1f:1d:8d:31:22:ae:48:64:f1:18:a5:71:c8:09:58:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Nov 12 06:44:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1fc5dd5f1927e5cc08833011a4e539eec0a2bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8e:50:93:03:f7:a3:97:d2:2e:6a:df:42:3a:
44:0d:8d:b4:39:e1:61:99:c1:2c:06:ca:90:86:cd:
09:14:eb:de:e8:c3:1e:c4:df:c0:55:bd:16:cc:38:
42:3b:7c:eb:de:2c:3a:2e:11:67:76:4b:71:33:d8:
a8:31:db:d5:e5:87:82:26:74:7f:eb:63:46:78:e5:
bc:8b:c9:8d:ed:4f:68:c4:af:e4:9f:10:59:d6:9c:
80:ff:3f:19:57:1b:b6:57:30:b7:25:13:38:84:82:
79:68:5b:92:96:a2:36:ce:9f:b7:7f:92:3a:52:a4:
29:6b:82:a4:bd:0f:24:d5:19:20:4e:0f:51:4c:f4:
bb:44:13:50:71:58:51:05:de:7f:eb:ab:4b:d2:7e:
ec:66:3a:ba:32:a2:35:5d:f3:d0:ec:02:7f:db:08:
52:33:c7:dc:41:c0:44:4b:3d:23:95:cb:37:7e:5a:
96:f9:4a:b9:9a:c0:46:56:13:fe:f4:d9:6e:5b:e4:
42:b4:b3:56:f9:40:69:e7:d6:bc:8d:be:f1:9f:2c:
44:c1:39:d6:3c:5e:76:71:59:8a:4d:ac:f5:c1:d3:
ef:e4:40:b4:ea:af:6a:a6:29:c1:51:fb:35:0f:3b:
75:a7:29:50:b6:fa:96:66:3d:70:2b:66:39:54:a1:
54:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FC:5D:D5:F1:92:7E:5C:C0:88:33:01:1A:4E:53:9E:EC:0A:2B:D1
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/0fxd1fGSflzAiDMBGk5TnuwKK9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/23
45.131.3.0/24
45.136.4.0/24
45.147.44.0/23
77.83.200.0-77.83.202.255
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb07::/32
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:8::/48
2a13:a441::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
9e:f8:42:78:5a:dd:60:f4:98:ed:19:8e:1c:bd:7f:03:25:4f:
ea:a2:d8:27:70:87:49:e2:4f:5d:08:8b:ae:4c:40:e3:a5:22:
18:1b:bb:0d:49:46:ce:e6:f0:52:4c:bd:e9:aa:8a:b9:b8:0d:
a4:98:7c:7d:5e:eb:c9:7a:6a:71:ff:0c:c2:63:22:4f:bc:9f:
df:89:9f:cb:7b:5f:9f:e4:96:77:7e:2f:59:51:57:aa:fa:a6:
55:04:df:06:4d:db:67:96:90:f2:f1:75:cb:e0:ff:c1:1b:a2:
2c:52:af:60:ed:df:7b:8a:ff:ea:db:aa:c0:69:37:5a:03:94:
6c:37:bc:4c:46:32:45:dd:e4:b9:be:d7:e5:6f:c0:bc:12:c5:
23:3b:af:31:ac:09:b8:d7:be:e2:ed:80:e5:36:7a:7f:df:57:
2c:f3:2e:f2:f0:7a:69:3d:e5:d3:b5:dc:f5:ae:41:af:3e:ea:
29:29:c2:78:41:45:5b:c1:d3:6a:7c:da:2d:6a:a8:c8:b7:8a:
41:d9:94:0d:3b:53:84:47:2e:ea:54:8f:c6:5c:59:b3:4c:4c:
b6:cf:60:5e:18:47:a2:b7:22:af:e0:c9:0a:75:b2:09:b4:09:
e3:6e:55:09:d8:2f:fd:02:07:ab:f9:4a:8f:b7:c8:9c:63:37:
8f:e7:8b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:32:15 2024 by rpki-client on console-ams.rpki-client.org