Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7tl6rtvvvGRVv8gw3_9fVaS1xxs.roa
File: 7tl6rtvvvGRVv8gw3_9fVaS1xxs.roa (raw, json)
Hash identifier: vOb+BFTqvm7dv/2I93+Y5CzB9VBIfKKvXs0NPCtQvgU=
Subject key identifier: EE:D9:7A:AE:DB:EF:BC:64:55:BF:C8:30:DF:FF:5F:55:A4:B5:C7:1B
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018EE7616EAEDB0D2AFB42316CB8FFE8A899
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7tl6rtvvvGRVv8gw3_9fVaS1xxs.roa
Signing time: Tue 16 Apr 2024 14:48:25 +0000
ROA not before: Tue 16 Apr 2024 14:48:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a05:f5c0::/32 maxlen: 32
2a0c:f1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e7:61:6e:ae:db:0d:2a:fb:42:31:6c:b8:ff:e8:a8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 16 14:48:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eed97aaedbefbc6455bfc830dfff5f55a4b5c71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f2:ba:37:b5:9b:c0:20:8d:ec:2f:31:dc:3f:
38:bb:ff:d5:48:8c:32:a3:18:d6:9d:ce:90:c7:7f:
61:35:45:e0:c0:fe:af:62:1f:9a:40:2b:44:85:bb:
bd:1e:3a:a6:8f:1c:eb:95:a0:de:fe:c0:29:69:61:
c5:e0:8d:6c:a1:aa:1f:0a:fa:04:c4:cb:14:61:bd:
3e:56:34:69:40:33:6f:63:ab:5f:bf:4c:a0:6d:32:
01:54:02:9e:ca:c4:95:b6:50:1c:c3:b3:10:2d:51:
81:41:81:68:3e:2b:67:3e:ec:d5:3c:bd:af:77:fe:
bc:bb:54:ca:e0:a6:7b:ee:4e:83:87:6e:c2:1a:1e:
26:fb:4c:42:c5:dc:13:df:02:e9:74:49:99:bc:35:
69:29:3d:f0:ca:e1:4d:f3:19:ef:49:fa:b6:ff:75:
b7:7e:d3:05:d5:a0:87:4e:bf:1a:3b:84:a0:91:60:
f2:32:28:27:94:d6:d8:af:a0:34:2b:ef:5b:c3:43:
5d:41:31:09:61:6e:52:a7:4e:d4:db:92:c0:b7:69:
35:64:0b:fc:3d:d5:e4:0d:81:bb:34:2d:ec:13:b5:
db:f0:9e:ce:0d:b5:23:3d:7d:d0:2c:4f:8e:8c:7d:
9e:6c:8c:74:e1:a1:34:15:a5:46:b9:74:6f:5c:68:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D9:7A:AE:DB:EF:BC:64:55:BF:C8:30:DF:FF:5F:55:A4:B5:C7:1B
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7tl6rtvvvGRVv8gw3_9fVaS1xxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.246.0/23
92.52.208.0/21
92.52.219.0/24
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
06:64:ed:90:ae:94:2c:8d:b9:22:52:e5:5d:13:b2:82:b0:5b:
d8:2b:55:ff:3e:28:32:4e:9d:a6:7d:b5:a0:9e:2d:fe:fe:cf:
62:0b:15:56:1c:78:8a:c3:a5:15:06:6d:c5:95:95:eb:57:54:
20:5a:30:5e:db:5f:72:f2:ef:1d:f3:f4:4c:6f:15:fc:63:f7:
d3:34:00:0b:7a:1b:b0:4d:21:54:3d:a8:34:e0:b1:ec:65:ed:
47:b6:8e:45:0f:89:01:cc:ea:37:5d:4a:d0:da:dc:47:c9:30:
4d:f0:0f:28:57:f5:16:92:c7:41:3b:16:1e:a4:d9:d9:d0:a3:
e6:d1:1c:05:26:03:0e:c2:4c:03:30:e3:fd:2f:28:e0:b2:ff:
f7:ee:5e:91:0b:10:a0:08:1c:14:6c:b9:73:b9:d7:c5:24:a5:
3b:b7:1a:fe:4d:de:5c:30:22:68:ea:3a:b0:f0:d0:d2:79:c5:
d0:a4:c0:d6:29:9f:b0:f1:d3:dc:9f:0d:0e:7e:b9:12:6e:83:
0d:69:e2:e6:02:a8:ca:3f:d3:ce:7e:b6:f7:42:dd:3d:ec:c3:
01:ed:79:b4:46:94:f8:d0:8e:38:29:2a:5d:52:4e:2c:e2:06:
d8:b1:e3:6a:64:36:a7:bc:d8:82:b7:cd:d1:ba:fc:ba:55:36:
af:7d:eb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:17:56 2024 by rpki-client on console-ams.rpki-client.org