Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/00f52rJWZHoEhyAc0cMjhbELFdc.roa
File: 00f52rJWZHoEhyAc0cMjhbELFdc.roa (raw, json)
Hash identifier: +FbHsbGVuLEvfW3rSyCrLs2JA4sUBc1RheZ4McGckEI=
Subject key identifier: D3:47:F9:DA:B2:56:64:7A:04:87:20:1C:D1:C3:23:85:B1:0B:15:D7
Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial: 018CC94AA7687566A08B551E9D99394ACB9B
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/00f52rJWZHoEhyAc0cMjhbELFdc.roa
Signing time: Tue 02 Jan 2024 08:29:22 +0000
ROA not before: Tue 02 Jan 2024 08:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60435
IP address blocks: 45.157.4.0/24 maxlen: 24
45.157.5.0/24 maxlen: 24
45.157.6.0/24 maxlen: 24
185.29.17.0/24 maxlen: 24
185.29.16.0/24 maxlen: 24
185.29.18.0/24 maxlen: 24
185.29.19.0/24 maxlen: 24
193.242.154.0/24 maxlen: 24
2a00:a362::/32 maxlen: 32
2a00:a360::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 19:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:a7:68:75:66:a0:8b:55:1e:9d:99:39:4a:cb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
Validity
Not Before: Jan 2 08:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d347f9dab256647a0487201cd1c32385b10b15d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:39:b3:69:10:e6:b0:9e:f3:7d:c2:81:e7:5a:
f7:3f:ac:65:91:8e:99:57:bc:41:3f:dd:8f:57:7c:
9b:42:13:00:48:b9:0d:e3:9c:83:26:b5:80:70:49:
e3:ae:7d:af:fe:d1:24:f9:93:da:df:0e:21:bb:41:
2c:fa:bf:5c:dd:33:95:6a:d4:01:6c:ae:cf:b2:f0:
c8:ce:38:bd:1a:df:b0:60:da:2e:79:5f:27:db:be:
7e:c4:78:36:27:03:55:e2:fe:b6:e4:21:e2:57:82:
2d:c1:5a:25:6d:f5:c4:94:3e:19:a5:66:bc:a3:f4:
b2:ef:6d:96:65:df:10:ef:76:e4:bc:e4:d3:41:ba:
74:97:5d:7c:2d:45:b1:d0:13:54:7b:65:f9:3b:f8:
86:48:11:2e:68:d2:7b:ea:93:08:b7:a4:b5:b9:80:
24:ec:2c:1b:6f:42:1b:c6:1f:b8:63:15:3f:84:51:
a3:92:fd:e5:be:c3:f5:ee:13:05:43:f9:d0:0d:77:
c9:1f:70:0d:21:5a:dd:6e:22:a0:53:67:a8:f3:f2:
f9:8f:4d:0b:e7:c1:74:10:cd:8d:d9:a1:fe:3f:b0:
e0:c7:f4:e3:11:5f:50:20:c3:ec:58:34:b0:59:58:
4d:4b:da:aa:78:ad:7f:e4:d4:0f:2f:f2:7d:14:4a:
24:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:47:F9:DA:B2:56:64:7A:04:87:20:1C:D1:C3:23:85:B1:0B:15:D7
X509v3 Authority Key Identifier:
keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/00f52rJWZHoEhyAc0cMjhbELFdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.4.0-45.157.6.255
185.29.16.0/22
193.242.154.0/24
IPv6:
2a00:a360::/32
2a00:a362::/32
Signature Algorithm: sha256WithRSAEncryption
26:da:3f:47:68:b9:90:2d:fe:e1:bf:4d:27:77:93:c3:4a:aa:
c3:b1:6a:5f:12:aa:44:8a:c2:30:55:1e:ad:44:7f:58:68:e8:
fd:4d:7a:5f:d3:bc:6a:30:7f:7b:eb:ab:e3:a5:a8:16:af:2a:
37:43:7e:5f:36:c8:01:75:ef:df:4a:1a:a1:80:eb:1d:ec:bc:
cf:83:46:a6:12:17:f0:e9:9e:c2:49:bc:95:b9:78:32:c8:7d:
41:ac:2c:6c:a2:e8:52:f4:3b:37:ab:4b:30:79:52:42:11:8c:
49:46:fd:34:b7:ac:94:58:94:89:e9:50:3e:ad:d0:ed:ea:ed:
4b:82:2b:c8:c7:f6:6b:3b:f8:b4:58:61:3c:da:a9:78:5e:4c:
dd:26:c5:e4:ea:2e:e2:ec:07:ce:21:98:28:aa:1c:0e:82:87:
49:3f:74:ee:d1:0a:a6:23:02:0b:a3:0d:8b:40:af:e4:e6:da:
8c:88:f8:7c:39:07:58:fc:f5:36:84:b3:63:61:24:fc:0b:25:
b9:d3:b7:e5:55:33:f2:88:52:01:0e:a1:42:00:2d:3f:e4:a3:
a9:a5:94:a8:f1:80:30:9d:29:42:d2:2d:b7:5a:a3:a3:89:ba:
62:4e:9e:2c:d3:1d:f5:53:4c:9a:24:10:e5:7b:67:09:81:78:
9b:dd:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:11:39 2024 by rpki-client on console-ams.rpki-client.org