Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/LTwF_6qZqDavew-YW8lV_jkc7KI.roa
File: LTwF_6qZqDavew-YW8lV_jkc7KI.roa (raw, json)
Hash identifier: 4bd9EqUD0B3POIISVoIpn08Tvqb8+CcwRSSziXKmUxg=
Subject key identifier: 2D:3C:05:FF:AA:99:A8:36:AF:7B:0F:98:5B:C9:55:FE:39:1C:EC:A2
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0190C55F4940742EE9DF93FEA8306907B3BB
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/LTwF_6qZqDavew-YW8lV_jkc7KI.roa
Signing time: Thu 18 Jul 2024 10:24:34 +0000
ROA not before: Thu 18 Jul 2024 10:24:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213257
IP address blocks: 5.180.107.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c5:5f:49:40:74:2e:e9:df:93:fe:a8:30:69:07:b3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 18 10:24:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d3c05ffaa99a836af7b0f985bc955fe391ceca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:9b:ed:41:0e:80:59:31:03:f0:55:19:65:
72:80:c3:81:3f:37:26:02:ed:20:25:07:a0:c7:af:
d1:a5:1a:d5:57:17:6b:3f:44:d1:33:f9:64:5a:a6:
08:ef:ab:ad:9e:cb:31:1e:9c:ec:83:66:29:58:24:
51:fe:07:4e:23:5a:a6:4f:16:6d:d6:1f:d3:54:75:
63:9f:b4:1d:c4:e4:c3:0c:18:31:ef:35:f8:9f:89:
0f:93:a9:40:bf:16:94:f9:16:15:94:65:ef:00:96:
10:db:43:3a:fd:12:5a:a5:26:3a:86:26:e3:2a:b6:
5e:a4:a0:19:d6:89:31:b6:9e:f4:fb:54:90:7f:0e:
f2:5a:9b:73:f0:16:56:b5:77:3b:08:4c:44:3b:d5:
81:fe:5d:09:d1:24:c4:0f:ee:7a:94:c9:4b:92:87:
33:a4:7a:25:e0:ed:9d:14:fd:cd:aa:9a:6e:4e:fa:
9b:e6:ef:b7:ed:dc:d4:dc:8f:a0:f5:e7:57:ba:10:
44:be:c7:ed:4f:40:ba:77:25:dc:d7:9a:6f:70:0d:
ff:00:34:35:61:06:d8:77:61:12:d2:c4:6a:58:b0:
03:55:52:57:a3:db:eb:48:3a:cb:2e:54:6e:6b:b3:
60:40:96:c7:dc:d3:50:5d:b1:48:35:b8:f2:93:9d:
47:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3C:05:FF:AA:99:A8:36:AF:7B:0F:98:5B:C9:55:FE:39:1C:EC:A2
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/LTwF_6qZqDavew-YW8lV_jkc7KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
45.131.1.0/24
45.147.44.0/24
77.83.202.0/24
194.116.228.0/24
194.146.26.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ca:5c:68:31:ec:4f:ac:cf:50:d3:be:e2:4f:e3:b6:96:cc:
78:1f:d8:d5:72:ad:80:95:a5:6a:c5:f2:8f:30:19:8e:f5:dc:
8b:10:14:b5:b1:41:a9:21:43:4c:19:8b:cd:0e:9e:8e:80:b6:
53:b9:1a:23:fd:25:8f:30:52:28:7f:65:9d:42:91:4d:9b:90:
62:b3:dd:4d:1b:96:9e:c3:40:9e:41:03:d5:27:59:f9:86:73:
4f:2f:36:b4:5a:08:8a:f6:e7:c5:4a:84:fb:e7:2f:1d:7a:40:
77:6c:17:ed:25:bf:70:a0:72:14:fa:f3:92:39:30:19:8d:63:
97:cb:eb:75:18:52:3f:ea:bf:b1:e9:e7:9b:7b:67:8b:e0:aa:
b9:b9:4f:dc:4f:cc:b8:f2:ce:ca:a9:73:25:e1:6a:48:8f:8a:
ca:1f:4e:05:07:97:fb:af:89:f3:0f:36:f2:76:25:b9:68:9a:
44:09:54:4f:a4:09:36:2f:de:a4:f5:83:f2:d6:a0:e3:3a:f2:
87:c5:11:eb:27:d9:f4:42:11:2f:8e:20:69:f4:71:98:01:62:
c2:be:1e:a8:19:52:93:ba:f2:bf:e1:5b:6b:76:76:9f:b1:f0:
c3:5d:93:47:31:82:f9:c2:bc:d5:d0:f3:96:b1:61:3a:37:78:
6b:81:19:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:00:27 2024 by rpki-client on console-ams.rpki-client.org