Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/61Z_0Yl1Ls-nqVgKYxVDPpYV6MA.roa
File: 61Z_0Yl1Ls-nqVgKYxVDPpYV6MA.roa (raw, json)
Hash identifier: ddla1jqlqBDLe80bR0Y1WoLELnKy80MfpN9DNdZ/xao=
Subject key identifier: EB:56:7F:D1:89:75:2E:CF:A7:A9:58:0A:63:15:43:3E:96:15:E8:C0
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 018DC6835CEE7E21F5FB4CCB3293935E4B27
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/61Z_0Yl1Ls-nqVgKYxVDPpYV6MA.roa
Signing time: Tue 20 Feb 2024 12:35:14 +0000
ROA not before: Tue 20 Feb 2024 12:35:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34661
IP address blocks: 45.152.164.0/22 maxlen: 22
89.28.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c6:83:5c:ee:7e:21:f5:fb:4c:cb:32:93:93:5e:4b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Feb 20 12:35:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb567fd189752ecfa7a9580a6315433e9615e8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:94:ba:a5:98:b8:82:d4:6e:8e:11:0f:c3:
2a:47:cc:0d:25:4f:2c:29:ae:10:6c:8d:c1:61:a4:
8d:a2:5c:fe:b0:1e:f7:fb:d5:65:d4:26:8e:f9:3b:
c0:38:74:3a:5f:83:19:2c:f3:0d:0f:86:1a:0b:92:
7b:f7:46:33:37:bb:97:ee:8a:bc:54:b7:28:f0:6e:
97:6c:2f:d5:22:58:13:03:f1:5f:5f:5e:f1:40:f9:
a0:6d:c6:3e:ef:ad:0d:97:4c:ea:48:82:fa:7f:5a:
6e:6e:4d:25:2c:eb:e4:3b:47:ff:ab:33:d8:65:0f:
8d:45:1f:44:5e:43:96:9c:e3:d9:de:88:e8:a8:7c:
aa:ac:d2:4e:ea:08:a3:f5:e5:11:a6:2a:e4:78:41:
10:ab:56:6d:2c:f6:c3:78:ff:e0:78:b9:6d:f2:e8:
5f:ab:8e:f3:06:fb:15:24:14:96:68:e6:33:c9:cb:
f7:26:9b:8b:f0:ae:fc:05:64:d6:54:fb:29:9d:ac:
08:60:2a:e6:90:d0:9f:99:08:79:dc:67:92:68:39:
27:50:a1:f6:b5:b7:47:fd:cd:01:3e:e4:20:c2:dd:
07:f7:1d:b9:3c:40:47:30:83:99:c3:05:0f:3e:9c:
7c:06:a2:52:15:92:dd:a5:f8:7e:3a:41:f7:3a:f6:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:56:7F:D1:89:75:2E:CF:A7:A9:58:0A:63:15:43:3E:96:15:E8:C0
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/61Z_0Yl1Ls-nqVgKYxVDPpYV6MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.164.0/22
89.28.200.0/21
Signature Algorithm: sha256WithRSAEncryption
85:5a:80:a8:b0:c2:80:0c:ad:30:58:50:da:11:fc:62:9a:be:
e7:fa:12:4b:50:99:55:e9:91:a0:8c:66:2b:4b:28:f0:50:2e:
ec:3f:61:d3:27:d2:56:11:73:28:b9:2b:37:5b:06:ab:6a:34:
74:70:e3:c5:7f:b5:54:4d:44:25:1f:0e:d2:33:83:c0:d1:ba:
ff:98:28:ac:32:fc:0c:e1:90:20:5b:1e:7f:1e:fb:f0:c6:32:
e7:76:cb:bc:b9:50:7e:5f:10:40:88:87:06:3e:fd:28:8f:02:
0d:48:28:d2:e4:35:ae:be:91:72:b1:01:5b:db:3b:a6:de:d2:
23:ff:73:f9:b2:10:21:78:dd:35:36:5c:bc:fb:f1:1b:d3:13:
fc:a0:31:68:88:62:8b:6b:99:99:f9:7b:70:9e:f2:91:e5:83:
89:4b:e8:c7:c1:1c:6d:ab:59:b1:39:0f:42:c1:9b:90:9a:f2:
cf:6c:d4:55:9b:26:f1:69:31:81:eb:95:f4:82:36:c6:bb:33:
c1:57:1b:0a:4c:ea:8f:d6:eb:0b:a5:90:db:0d:63:44:50:aa:
b2:1a:d1:c8:a1:65:4f:87:24:65:cc:39:90:66:a2:41:07:e8:
20:4a:a7:48:32:d3:a2:d6:27:e9:04:96:b2:4b:94:79:8d:14:
bb:5d:80:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:14:50 2024 by rpki-client on console-ams.rpki-client.org