Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/gLdUyE4YPRTW_bIRmgg0HGnt0_M.roa
File: gLdUyE4YPRTW_bIRmgg0HGnt0_M.roa (raw, json)
Hash identifier: OY/DcVZgrLA0ZHh96dBY7iWgSye6OLZKnsjlSM6pZoQ=
Subject key identifier: 80:B7:54:C8:4E:18:3D:14:D6:FD:B2:11:9A:08:34:1C:69:ED:D3:F3
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 018ED0D952B4A2547D3DA86FAD50364C4890
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/gLdUyE4YPRTW_bIRmgg0HGnt0_M.roa
Signing time: Fri 12 Apr 2024 05:48:07 +0000
ROA not before: Fri 12 Apr 2024 05:48:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136258
IP address blocks: 45.154.204.0/24 maxlen: 24
45.154.205.0/24 maxlen: 24
45.154.206.0/24 maxlen: 24
45.154.207.0/24 maxlen: 24
195.137.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft
rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d0:d9:52:b4:a2:54:7d:3d:a8:6f:ad:50:36:4c:48:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Apr 12 05:48:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80b754c84e183d14d6fdb2119a08341c69edd3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:fd:92:2b:d9:e3:02:da:8c:66:30:74:a6:
47:ad:94:07:cd:a8:ab:8b:ee:71:3b:de:c8:35:cb:
13:c4:da:18:50:28:97:99:54:69:90:9e:3e:e2:37:
53:83:a0:3f:b9:ff:39:48:fe:78:07:ae:ad:3e:e9:
ee:82:69:04:63:61:4f:02:c0:82:0d:76:31:42:3a:
68:1e:8c:44:f9:7f:0e:48:f3:f8:06:fc:ac:f2:25:
97:78:03:6b:25:4f:73:a3:0e:b2:a1:f0:5f:a0:11:
2b:24:c5:ef:ec:c7:2d:88:52:75:95:83:a6:8c:ea:
ae:a9:f8:8f:76:a6:5c:d8:fa:1b:b7:97:f0:74:aa:
64:6b:d3:17:2b:52:5c:54:85:fc:f9:70:4e:7a:39:
7e:41:b6:46:42:b3:0f:cd:58:30:46:83:c2:ce:9b:
20:14:14:12:d9:d0:7e:89:cc:27:06:21:03:75:a8:
34:da:e7:5b:77:0b:46:06:20:40:a1:4d:eb:16:f1:
7a:b4:c3:81:77:a4:4f:eb:b9:a5:22:78:a2:87:ac:
d9:e9:91:88:bf:c6:40:ce:54:63:54:bc:2d:0d:c1:
d9:9a:c7:6a:ed:3d:6b:6d:9c:b8:a8:65:c3:94:98:
42:1b:31:4e:a8:7a:85:61:6c:22:c8:74:99:80:d8:
ab:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B7:54:C8:4E:18:3D:14:D6:FD:B2:11:9A:08:34:1C:69:ED:D3:F3
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/gLdUyE4YPRTW_bIRmgg0HGnt0_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.204.0/22
195.137.220.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ba:e1:c3:a6:fc:89:5f:e8:ed:4a:c7:96:90:c2:25:40:be:
a7:bb:05:a4:80:29:83:a2:b0:86:5e:95:53:b7:20:9f:d7:2c:
5f:d0:83:1a:4a:8f:e0:78:fc:bf:7e:46:57:46:23:c0:b9:f9:
77:35:48:86:42:cf:3a:28:36:9e:0b:62:be:dd:1c:2c:8f:4a:
f1:27:b2:15:89:4e:3f:96:8a:2e:0e:b8:4e:c5:69:96:81:7d:
a5:c1:8a:ca:9f:6f:48:4c:79:bb:98:18:cc:82:53:d2:b0:e1:
38:fa:62:b7:37:98:e8:6f:56:35:ab:f2:9c:9f:db:4f:61:25:
36:c9:79:9e:cc:96:8e:76:8f:c2:aa:e5:37:2b:47:d6:69:e1:
05:c5:78:ab:df:9f:7b:dc:5f:e3:00:89:28:8e:4e:16:e7:30:
53:5b:9e:9b:47:15:4d:0c:1e:37:49:6f:97:b8:1b:6f:3e:97:
49:4c:f1:5a:0a:c9:47:17:c9:29:30:2e:2d:ae:8f:a9:73:eb:
2c:65:8c:a7:77:c0:0d:51:f3:80:9c:c1:92:c1:83:6a:be:6c:
3f:33:5f:63:fa:ca:25:8a:e5:f2:78:90:5d:cc:26:90:33:d2:
7f:17:6f:71:93:98:00:72:e6:e8:41:fe:d5:f0:a2:e1:0b:07:
e4:71:92:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:10:29 2024 by rpki-client on console-ams.rpki-client.org