Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/abH2Bvmt0tuntYrNta-bYVrjX58.roa
File: abH2Bvmt0tuntYrNta-bYVrjX58.roa (raw, json)
Hash identifier: +xqVcqEUq3cjQnuHRC0fDsoGa4ITathBJdN8hS49c98=
Subject key identifier: 69:B1:F6:06:F9:AD:D2:DB:A7:B5:8A:CD:B5:AF:9B:61:5A:E3:5F:9F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01935045774B6DFEA8517284B7F3B13FF3A2
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/abH2Bvmt0tuntYrNta-bYVrjX58.roa
Signing time: Thu 21 Nov 2024 19:49:09 +0000
ROA not before: Thu 21 Nov 2024 19:49:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21769
IP address blocks: 45.127.248.0/22 maxlen: 22
89.106.0.0/19 maxlen: 24
103.41.44.0/22 maxlen: 22
103.63.28.0/22 maxlen: 22
103.71.61.0/24 maxlen: 24
185.195.212.0/22 maxlen: 22
185.195.220.0/22 maxlen: 22
185.196.188.0/22 maxlen: 22
185.199.116.0/22 maxlen: 22
194.93.4.0/22 maxlen: 22
2a09:1e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:45:77:4b:6d:fe:a8:51:72:84:b7:f3:b1:3f:f3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 21 19:49:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69b1f606f9add2dba7b58acdb5af9b615ae35f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:cc:d8:b4:19:4b:82:89:f0:17:22:06:77:
89:2f:ec:12:e7:1b:2a:f1:be:77:fa:ae:3c:70:9f:
78:ce:2b:99:c3:47:af:ac:58:8a:8a:c2:0e:01:e3:
3f:69:df:81:59:c6:52:35:f2:21:24:69:31:a5:c4:
d1:08:b6:49:99:0c:f7:ee:e2:20:71:3a:8c:44:37:
2e:03:05:bc:5c:1a:f4:ed:9f:90:66:ae:06:90:18:
b8:c0:33:30:b9:7a:ee:d6:4e:45:03:06:45:5b:38:
3a:ef:2b:e0:c5:6f:10:4c:f7:72:f3:a0:a1:f4:65:
49:6c:95:d4:14:4e:0e:69:bf:99:4a:b8:31:94:2d:
54:43:e5:b1:1a:a6:5c:c9:9a:e3:41:0c:94:da:4b:
9c:55:1d:24:75:fd:36:87:2a:29:50:db:a4:78:b7:
56:87:8b:38:d6:a1:b3:4f:0e:3b:3e:f1:a1:e7:27:
0d:16:7d:fc:ce:9e:f6:c7:bb:63:b9:8e:2a:f7:c7:
64:87:60:26:16:99:10:5b:84:13:fc:64:34:8e:3a:
2b:6b:f5:d0:20:b3:39:25:3a:6b:34:21:03:c6:35:
33:f8:2d:f9:1c:31:c4:63:6e:90:1d:e5:5b:f2:f8:
94:ac:9e:6b:ab:5a:2a:e7:6b:7f:b4:53:21:d5:20:
8d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B1:F6:06:F9:AD:D2:DB:A7:B5:8A:CD:B5:AF:9B:61:5A:E3:5F:9F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/abH2Bvmt0tuntYrNta-bYVrjX58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.248.0/22
89.106.0.0/19
103.41.44.0/22
103.63.28.0/22
103.71.61.0/24
185.195.212.0/22
185.195.220.0/22
185.196.188.0/22
185.199.116.0/22
194.93.4.0/22
IPv6:
2a09:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
79:17:29:1a:5c:0f:38:3e:fa:88:f1:4e:40:af:a5:2f:3b:e0:
21:4d:0a:53:87:6d:1b:7f:2d:75:05:04:52:cc:16:81:bd:56:
1b:ba:15:06:73:42:a6:ec:cf:7a:51:05:47:18:ad:b0:71:9e:
8e:f3:e4:37:7d:e2:49:fd:b9:aa:06:8c:e1:0a:f5:6a:2c:fb:
84:1c:2b:11:10:a6:cc:51:9e:ef:08:5b:c9:fc:2c:f1:70:d1:
93:22:2b:8c:fb:6c:c0:ee:b7:4f:c3:52:11:fd:02:f0:82:db:
53:37:77:0f:26:3c:9f:9d:0b:5d:d4:f0:31:47:c0:f9:ee:6f:
ef:62:63:d7:4e:04:b8:c8:d5:79:7a:83:5e:72:17:32:b0:e6:
f5:c7:a2:55:16:1e:e8:a2:f3:71:11:6d:39:bb:56:8c:45:d5:
83:e0:c1:82:08:94:c5:82:a5:85:f6:ab:a5:7b:e1:85:7a:41:
87:8d:ba:9a:e1:8e:e0:89:46:25:60:8f:86:17:2c:3b:c7:ea:
b8:22:e2:9d:45:f8:3c:8a:97:d9:67:f5:b1:5b:04:01:24:18:
a6:2f:a6:94:f7:65:38:c5:4a:20:48:63:fa:db:2a:fc:d4:3f:
69:5c:42:59:1f:2f:72:5c:f0:4b:8d:4d:fa:e8:31:fb:06:b0:
ff:64:47:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:32:58 2024 by rpki-client on console-fra.rpki-client.org