Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/vYc2URA4GqV-dqL39TsmbzXnkuw.roa
File: vYc2URA4GqV-dqL39TsmbzXnkuw.roa (raw, json)
Hash identifier: jg5YJLnqbhYiwle0h8wHZ7rG5yIPzNomTG3tGx4Euxg=
Subject key identifier: BD:87:36:51:10:38:1A:A5:7E:76:A2:F7:F5:3B:26:6F:35:E7:92:EC
Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial: 018CC8015B67B848F078ED3198CE6E3690E1
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/vYc2URA4GqV-dqL39TsmbzXnkuw.roa
Signing time: Tue 02 Jan 2024 02:29:41 +0000
ROA not before: Tue 02 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395886
IP address blocks: 45.81.128.0/24 maxlen: 24
45.135.116.0/23 maxlen: 24
45.91.83.0/24 maxlen: 24
45.91.82.0/24 maxlen: 24
45.91.81.0/24 maxlen: 24
45.91.80.0/24 maxlen: 24
45.155.222.0/23 maxlen: 24
45.140.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:5b:67:b8:48:f0:78:ed:31:98:ce:6e:36:90:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Validity
Not Before: Jan 2 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd87365110381aa57e76a2f7f53b266f35e792ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7f:7b:2e:cd:ed:e7:9c:7b:55:e5:ae:63:0d:
54:c5:9d:b8:89:35:0b:be:f5:14:ea:30:8b:25:7d:
66:2f:41:4a:ef:5e:83:a2:29:e4:07:db:75:cf:71:
1b:4e:6b:36:01:71:b3:01:53:9a:c5:16:c7:70:68:
fe:e9:6a:32:ea:3e:7f:f5:ce:43:b3:c6:a2:0a:95:
60:46:34:40:c6:91:b8:d6:bf:b6:83:8a:34:9f:a3:
5c:f5:13:ce:a0:24:71:96:8a:8a:76:70:78:65:45:
f2:b4:a3:34:e3:6e:a9:63:62:e7:b8:dd:cc:52:0d:
3b:c6:26:21:a2:e4:b0:d7:2b:e5:4c:ce:b4:e0:60:
b3:4c:f2:aa:43:aa:25:d6:16:e4:f7:9e:1e:59:f0:
be:23:15:e9:92:e4:75:2c:99:db:8a:a5:d0:b1:38:
36:03:0f:ea:7b:32:e2:08:a9:aa:43:4e:fa:03:1b:
f3:53:6c:9a:b6:dc:e5:5c:c1:57:fc:6e:94:76:6a:
70:ac:ba:c3:e0:97:b2:de:91:bd:30:be:55:6f:d4:
d8:9a:3d:36:94:52:3e:54:06:63:92:b1:8c:e8:27:
57:bc:f1:75:b4:e0:44:b3:54:f5:a6:dd:4a:b8:02:
3a:ec:ba:07:34:b6:55:06:80:94:eb:e3:a8:bc:c7:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:87:36:51:10:38:1A:A5:7E:76:A2:F7:F5:3B:26:6F:35:E7:92:EC
X509v3 Authority Key Identifier:
keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/vYc2URA4GqV-dqL39TsmbzXnkuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.128.0/24
45.91.80.0/22
45.135.116.0/23
45.140.88.0/23
45.155.222.0/23
Signature Algorithm: sha256WithRSAEncryption
05:61:46:60:dd:99:c0:3c:a5:f0:0b:cc:ae:12:4f:c2:73:8f:
78:d2:ff:e5:bb:0f:7b:0f:f9:d0:48:b7:bc:47:6c:50:0c:07:
3d:b0:cb:53:e3:4c:fe:b6:d5:dc:b2:45:dd:0d:64:d4:5b:36:
37:c6:95:50:30:09:c0:a5:c2:21:90:df:ea:97:35:d6:7f:44:
30:9c:11:1d:12:ed:7e:7f:ce:de:39:58:2b:0f:dc:76:1e:45:
e8:7c:24:72:b6:51:40:f3:d7:8f:5b:5b:b7:21:23:ce:38:b4:
b4:9a:55:d8:39:49:f9:7d:89:a2:8d:bd:09:83:f1:a7:ab:1b:
7b:51:01:45:07:c8:37:fd:80:a4:ac:98:82:7b:f9:50:8a:47:
bc:a6:66:3a:76:4d:b0:2b:bd:14:60:cf:fd:6e:82:31:0f:f3:
ce:25:fb:71:08:e1:c9:92:02:bf:60:f4:5a:37:64:37:f8:fc:
bf:f7:40:04:8f:28:0b:7f:1f:a8:45:6e:c7:03:84:02:12:dc:
17:cc:fb:b7:68:80:95:8a:7e:af:f0:7f:6f:93:da:a8:bf:ef:
4c:62:83:74:ff:90:cc:47:84:c2:bb:11:e2:0a:95:b0:4e:bd:
e8:14:d3:a4:3f:8b:1b:66:1d:84:bd:91:77:80:d6:1b:d0:ef:
61:c1:73:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:51:23 2024 by rpki-client on console-ams.rpki-client.org