Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/r-09yE839Y5_hyZRKp6H_v6RE9o.roa
File: r-09yE839Y5_hyZRKp6H_v6RE9o.roa (raw, json)
Hash identifier: bjzhILdvPP+2vdmmDAX9qFy7NwlTehSwuRd6ipVs6z0=
Subject key identifier: AF:ED:3D:C8:4F:37:F5:8E:7F:87:26:51:2A:9E:87:FE:FE:91:13:DA
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 01912C5B454231D77F19F5DC1AB9249B7AC8
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/r-09yE839Y5_hyZRKp6H_v6RE9o.roa
Signing time: Wed 07 Aug 2024 10:21:04 +0000
ROA not before: Wed 07 Aug 2024 10:21:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 45.13.171.0/24 maxlen: 24
185.189.224.0/24 maxlen: 24
185.198.51.0/24 maxlen: 24
195.245.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2c:5b:45:42:31:d7:7f:19:f5:dc:1a:b9:24:9b:7a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Aug 7 10:21:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afed3dc84f37f58e7f8726512a9e87fefe9113da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:44:43:a4:cc:e6:36:b7:b7:fe:e7:a3:5f:
07:36:c4:c1:e2:3c:0c:00:d2:4b:c0:75:8b:be:b1:
7c:4a:33:c2:b0:d6:b1:95:ed:17:e4:30:b5:37:cf:
44:f2:2e:4c:91:8c:1d:60:17:98:ba:cf:0a:cd:8b:
8f:37:0a:4e:4a:35:70:e6:84:be:a8:86:6c:97:28:
48:c7:15:2d:62:4a:f6:94:eb:3a:47:fc:f5:aa:08:
cf:03:18:b7:4a:88:21:c4:dd:dc:66:d0:41:ee:e7:
f1:47:5c:80:f8:ae:c5:03:0c:15:02:0a:ae:4d:24:
67:c6:92:11:ba:86:67:bb:2f:59:44:51:20:98:e5:
59:34:c1:b5:9b:c5:63:f9:e2:76:37:94:0c:7c:aa:
c8:ce:c1:b9:d1:0c:61:ef:c9:39:29:26:33:cd:04:
2f:18:8e:0f:34:07:92:cb:39:75:37:4c:d6:e7:1e:
5f:30:00:d7:80:52:f2:60:94:87:30:b8:a2:f2:f3:
5f:6c:a0:99:60:1e:a3:66:28:52:1b:54:b5:6f:99:
e2:a6:98:ae:51:82:25:a0:dc:bc:ff:77:ea:f7:7c:
97:bd:31:91:bb:ae:9e:69:f3:9b:72:2f:b8:aa:e6:
77:eb:97:ce:b6:e4:8c:a5:c1:0f:ad:67:76:a5:d8:
ee:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:ED:3D:C8:4F:37:F5:8E:7F:87:26:51:2A:9E:87:FE:FE:91:13:DA
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/r-09yE839Y5_hyZRKp6H_v6RE9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.171.0/24
185.189.224.0/24
185.198.51.0/24
195.245.89.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:4d:54:aa:ba:af:07:f1:62:39:99:88:e5:ee:2e:57:fe:69:
af:dc:82:c5:1f:2a:19:bb:57:7b:15:d2:54:1a:6b:49:47:9b:
a3:d4:dc:5a:de:36:bc:62:a8:ae:c2:18:1e:bb:b4:77:6b:ab:
5c:4b:02:aa:94:fe:47:44:93:06:35:fc:88:dd:b0:e0:52:53:
93:f3:95:c1:f0:a9:d0:b9:24:cd:5d:54:05:91:42:99:95:7b:
9b:77:fe:42:90:99:bc:b5:7a:b1:58:4b:b9:89:d4:8e:76:1b:
70:de:1c:34:d7:db:32:a3:0b:ab:e2:92:cb:4d:2c:29:bb:2a:
c7:93:b1:22:c5:12:e0:8a:5e:d5:1d:ad:93:bc:c5:68:b3:c0:
e5:77:cd:7c:00:f2:70:cf:4b:61:d7:8b:7c:33:f6:79:aa:4d:
d7:73:2a:c5:55:fc:01:86:59:9f:bc:57:93:bc:b1:dd:4e:57:
85:b1:f5:1e:26:bd:fe:46:90:73:ae:2e:44:93:bd:da:1a:93:
dc:9e:a4:84:4d:58:1d:09:ee:1b:57:1b:a9:1c:68:9a:68:ec:
b5:66:58:7f:38:d6:28:49:00:da:e9:3d:9e:55:2a:55:f7:a7:
2f:db:c4:f8:4f:fa:f5:8f:fa:1d:88:f4:9a:61:d5:11:33:84:
4d:12:d7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 23:37:00 2024 by rpki-client on console-ams.rpki-client.org