Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/pkXco9ARq8nks9RJ3Dgy7R9_0_k.roa
File: pkXco9ARq8nks9RJ3Dgy7R9_0_k.roa (raw, json)
Hash identifier: DdJYW6paQpQK4cKXQJ5nMcNYXG3usbUjvydBmo9sTkw=
Subject key identifier: A6:45:DC:A3:D0:11:AB:C9:E4:B3:D4:49:DC:38:32:ED:1F:7F:D3:F9
Certificate issuer: /CN=6d42cff18334b2ff76b15ad944a8a9135e90568c
Certificate serial: 018CC94C982DCB1C07F110553EC9FBB6A5EA
Authority key identifier: 6D:42:CF:F1:83:34:B2:FF:76:B1:5A:D9:44:A8:A9:13:5E:90:56:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/pkXco9ARq8nks9RJ3Dgy7R9_0_k.roa
Signing time: Tue 02 Jan 2024 08:31:29 +0000
ROA not before: Tue 02 Jan 2024 08:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198507
IP address blocks: 45.14.176.0/22 maxlen: 24
45.81.192.0/22 maxlen: 24
37.143.52.0/24 maxlen: 24
37.143.54.0/24 maxlen: 24
37.143.55.0/24 maxlen: 24
37.143.52.0/22 maxlen: 22
37.143.53.0/24 maxlen: 24
185.132.72.0/22 maxlen: 24
185.132.72.0/24 maxlen: 24
185.132.75.0/24 maxlen: 24
185.132.73.0/24 maxlen: 24
185.132.74.0/24 maxlen: 24
45.81.195.0/24 maxlen: 24
45.9.196.0/22 maxlen: 24
2a06:e040:3501::/48 maxlen: 48
2a06:e040:5901::/48 maxlen: 48
2a06:e040:7601::/48 maxlen: 48
2a06:e040:6900::/40 maxlen: 40
2a06:e040::/32 maxlen: 32
2a06:e043::/32 maxlen: 32
2a06:e040:3502::/48 maxlen: 48
2a06:e044:10::/48 maxlen: 48
2a06:e040:7603::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:98:2d:cb:1c:07:f1:10:55:3e:c9:fb:b6:a5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d42cff18334b2ff76b15ad944a8a9135e90568c
Validity
Not Before: Jan 2 08:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a645dca3d011abc9e4b3d449dc3832ed1f7fd3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:2a:62:a2:83:4e:36:5b:1c:d8:9f:5e:01:
86:ec:6d:88:c6:69:95:52:54:65:36:69:62:bf:23:
50:0e:15:84:da:14:37:b4:65:d4:17:05:fb:c0:0b:
34:10:5b:13:86:bd:48:7d:22:58:45:72:a0:f9:aa:
32:bc:6a:90:2b:5d:22:b0:18:d4:e4:89:62:10:c3:
d2:ba:e0:a5:bb:c6:19:20:90:74:5a:c4:d4:f3:a3:
49:61:99:7a:6a:0a:95:a5:9a:cd:01:00:81:12:0c:
65:9b:b3:1c:77:7a:4e:cc:cf:c3:58:71:9e:aa:3f:
64:92:0b:ff:a8:e9:98:a9:8f:c1:e8:46:63:40:57:
17:91:93:ac:f9:81:e5:67:a5:30:67:aa:2d:21:ea:
5c:48:5f:11:5a:c8:14:ca:9e:82:19:b2:52:68:19:
7e:c3:63:66:16:01:55:d7:55:77:9c:e7:7b:94:ef:
2d:33:24:a2:d8:e3:89:75:db:66:dd:41:46:0e:0b:
5c:46:e6:26:14:37:2e:e9:c7:0c:54:ac:c6:fc:28:
55:21:95:7e:0b:6c:2c:c3:6c:a6:f5:eb:80:50:c4:
b5:27:a6:f5:2a:a2:53:88:fa:74:bd:25:c0:32:5c:
d5:10:e8:98:78:ef:4c:2c:18:3e:52:26:9e:9d:5d:
bc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:45:DC:A3:D0:11:AB:C9:E4:B3:D4:49:DC:38:32:ED:1F:7F:D3:F9
X509v3 Authority Key Identifier:
keyid:6D:42:CF:F1:83:34:B2:FF:76:B1:5A:D9:44:A8:A9:13:5E:90:56:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/pkXco9ARq8nks9RJ3Dgy7R9_0_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.52.0/22
45.9.196.0/22
45.14.176.0/22
45.81.192.0/22
185.132.72.0/22
IPv6:
2a06:e040::/32
2a06:e043::/32
2a06:e044:10::/48
Signature Algorithm: sha256WithRSAEncryption
34:93:4c:53:29:53:ec:cc:28:1e:09:c6:1f:c7:f6:7b:4c:c2:
67:19:2d:f3:26:47:4f:f3:d0:81:dc:f2:5e:aa:a5:9d:07:74:
79:38:4a:50:ca:6c:dd:c2:ef:d2:a9:7c:31:10:ba:2f:0d:e0:
a6:09:a6:94:4d:b5:d4:7f:6d:10:b5:d7:3b:91:ff:dd:2a:31:
ca:49:5f:1f:7d:9d:76:d4:cb:23:80:95:9e:26:b0:c2:dc:ec:
eb:91:89:e8:6f:6b:de:74:fb:6b:d2:fd:49:34:7e:32:9d:02:
a1:56:37:41:78:18:21:65:7f:fe:7c:57:ac:e1:34:3d:53:ca:
03:d4:fa:9b:20:95:1c:0a:89:f0:dd:a2:e6:bd:f7:ad:cb:29:
aa:ca:3d:c3:e4:7e:dc:fb:01:f6:ea:f8:c4:63:ef:87:5f:f2:
4c:67:85:8c:5b:fe:97:a4:21:c2:70:9b:24:6c:7a:bc:d0:b6:
be:74:cb:69:a8:94:91:b8:de:b7:9e:1c:1c:1c:85:10:68:10:
64:b9:55:7a:0a:5b:1d:10:1d:de:3d:d5:d0:b8:e2:7e:ff:e6:
4f:60:fb:12:22:51:6f:da:a4:34:e5:1a:76:53:68:4c:5c:9f:
f7:ae:4a:92:cb:49:7c:de:3a:e3:7e:a2:fa:5d:b9:67:75:b8:
44:65:d4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:42:36 2024 by rpki-client on console-fra.rpki-client.org