Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/lBmcCRhuE5Ff4A0uUygv3QWAdXM.roa
File: lBmcCRhuE5Ff4A0uUygv3QWAdXM.roa (raw, json)
Hash identifier: Ea8gJWuhlPTWKdohuGfFwFWm3k4z6nZdlhcpXpcW1CA=
Subject key identifier: 94:19:9C:09:18:6E:13:91:5F:E0:0D:2E:53:28:2F:DD:05:80:75:73
Certificate issuer: /CN=554834da8600c96c5fde91278f520e6c0d26fff3
Certificate serial: 018CC56E047AFB6FA30817720E547A186980
Authority key identifier: 55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/lBmcCRhuE5Ff4A0uUygv3QWAdXM.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43414
IP address blocks: 185.185.244.0/22 maxlen: 22
45.149.44.0/22 maxlen: 22
2a0b:6980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:04:7a:fb:6f:a3:08:17:72:0e:54:7a:18:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554834da8600c96c5fde91278f520e6c0d26fff3
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94199c09186e13915fe00d2e53282fdd05807573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:53:c7:a6:5f:a5:35:c8:31:c3:23:ca:cd:
8a:9d:ae:b1:0a:30:ce:c5:00:60:9f:43:69:24:65:
c2:dc:cb:c8:b3:fe:1e:80:81:b4:38:28:12:a9:00:
85:0b:8f:21:ae:46:7a:af:46:a7:2b:36:e8:26:aa:
b8:37:f4:52:dc:92:32:fc:63:ab:f8:ae:d1:76:13:
68:b9:aa:4f:fd:53:79:3f:3e:fb:f5:da:a9:60:38:
fb:88:f2:aa:a3:21:f7:ff:f7:27:85:4b:d0:9f:f3:
4e:2f:e3:f2:f3:1e:d6:86:b6:ab:fc:17:28:7b:79:
7a:bd:0a:82:2a:21:6d:af:9c:39:31:90:40:5e:a9:
d9:4c:2d:72:43:78:c2:7d:9e:b4:eb:b6:91:19:da:
c9:d3:81:9a:47:a3:5c:6c:e9:a7:75:dc:76:9a:76:
fd:2d:e7:70:2a:c9:2a:98:99:7e:9c:d0:03:1c:9b:
08:85:ab:56:4d:7d:68:c9:51:44:61:0f:ee:c4:3c:
97:9c:67:c4:fd:0d:56:10:10:5f:41:e8:1e:10:26:
8e:f7:c8:1b:e0:da:49:93:a5:c7:ad:18:70:75:10:
36:d9:38:01:35:54:f4:9a:f0:0c:76:2d:89:31:10:
48:35:da:ab:12:43:8e:ea:ea:b4:7c:cf:78:7d:f6:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:19:9C:09:18:6E:13:91:5F:E0:0D:2E:53:28:2F:DD:05:80:75:73
X509v3 Authority Key Identifier:
keyid:55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/lBmcCRhuE5Ff4A0uUygv3QWAdXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.44.0/22
185.185.244.0/22
IPv6:
2a0b:6980::/29
Signature Algorithm: sha256WithRSAEncryption
89:06:a1:70:1e:39:ff:23:1e:4a:9d:11:35:73:34:c8:48:5a:
e0:6e:0b:78:4f:38:f3:19:fe:52:78:8a:3c:e8:2a:81:fc:9f:
41:8c:c3:00:77:54:41:af:d7:e4:7c:59:3b:41:50:87:7d:ff:
c0:d7:f2:a1:17:ec:78:63:a5:ab:58:72:db:e8:f8:84:68:a9:
39:fb:e6:9f:74:47:14:3b:56:14:5b:0a:b3:ae:a4:e9:d7:7d:
4a:cd:26:71:a1:93:ba:e8:65:9b:02:a0:68:53:02:10:4c:46:
6d:94:bf:8a:49:be:8d:ab:49:e8:29:85:29:7d:8c:fa:7d:46:
85:ca:90:c8:c5:5a:69:7f:ec:b8:40:1f:36:ad:af:7d:76:89:
52:16:83:02:0c:e5:fc:53:43:14:ea:5c:f5:b6:52:7f:39:56:
34:ba:69:31:79:a4:64:dd:ad:23:35:6e:5f:54:9e:4f:6b:e0:
33:44:bd:a3:fe:87:04:4b:54:8a:d4:2e:d9:76:06:72:a5:12:
6b:06:39:d4:01:55:84:85:e8:86:12:5c:b2:d7:c0:1f:da:f1:
bf:f8:f8:dc:ad:43:35:5a:8b:bd:e1:b2:48:e1:e1:f9:ea:57:
4d:04:06:b1:cd:0a:9f:45:17:0b:22:23:62:2c:23:63:79:d2:
cc:56:08:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:29 2024 by rpki-client on console-fra.rpki-client.org