Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/ipB0oEpWyGOsLNmJDcIw_eIzwLg.roa
File: ipB0oEpWyGOsLNmJDcIw_eIzwLg.roa (raw, json)
Hash identifier: 1Xxsced/zy2cm3qg8amH5THAAG6R+z4lkP6NM2K/320=
Subject key identifier: 8A:90:74:A0:4A:56:C8:63:AC:2C:D9:89:0D:C2:30:FD:E2:33:C0:B8
Certificate issuer: /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial: 01905D632B08104E243744E4FF9F64A70CFA
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/ipB0oEpWyGOsLNmJDcIw_eIzwLg.roa
Signing time: Fri 28 Jun 2024 05:48:18 +0000
ROA not before: Fri 28 Jun 2024 05:48:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48821
IP address blocks: 45.159.32.0/22 maxlen: 24
185.138.52.0/22 maxlen: 24
2a07:a40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5d:63:2b:08:10:4e:24:37:44:e4:ff:9f:64:a7:0c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
Validity
Not Before: Jun 28 05:48:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a9074a04a56c863ac2cd9890dc230fde233c0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:ef:18:48:5e:c8:0f:61:49:fc:fd:c1:4e:
e0:fb:fd:17:c5:57:96:8c:0f:60:03:bb:6b:f7:71:
77:7e:95:f8:ed:82:54:c0:66:5a:dd:b2:7c:41:85:
15:10:6f:dc:56:c7:55:a7:7b:62:5d:f7:72:aa:91:
1f:e9:8b:97:77:34:fc:88:b6:2d:a1:9d:81:c1:c5:
fb:a5:86:2a:a6:7a:05:d7:81:8a:43:f8:b7:5c:28:
27:22:6c:10:45:1a:cb:e5:51:52:25:dc:6c:72:c6:
97:44:05:cd:4e:1f:16:99:61:d3:97:74:cf:25:a0:
55:83:3d:c3:ca:69:99:01:f9:11:a1:c2:a5:7a:07:
d6:52:8b:f2:44:8f:5b:3b:61:93:33:96:8d:c2:56:
f0:1a:c1:4b:2f:a6:c0:27:20:e9:d6:5f:a7:3d:6f:
f7:1f:fe:45:8d:4e:3d:41:a1:a1:31:de:b1:01:79:
6e:30:15:9c:65:b9:a8:cc:ca:6e:1c:07:a8:d1:4f:
43:c2:2d:6e:cd:2f:57:7a:d7:ed:d3:5a:b3:98:ca:
5d:02:9f:b7:4f:fc:af:46:8d:4f:ea:8d:7c:78:af:
7e:ea:e4:4c:ac:c1:e0:70:d0:6d:73:15:7b:df:91:
87:50:eb:c8:47:f2:55:33:d7:53:0a:38:d2:31:d3:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:90:74:A0:4A:56:C8:63:AC:2C:D9:89:0D:C2:30:FD:E2:33:C0:B8
X509v3 Authority Key Identifier:
keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/ipB0oEpWyGOsLNmJDcIw_eIzwLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.32.0/22
185.138.52.0/22
IPv6:
2a07:a40::/29
Signature Algorithm: sha256WithRSAEncryption
39:74:42:57:87:cf:ae:a6:9c:54:95:55:31:95:28:68:3e:57:
31:b5:9d:61:52:dd:04:00:86:22:f9:88:4f:f5:cc:f8:db:fe:
19:88:ed:53:69:03:45:74:44:08:64:4a:57:a2:5c:5c:08:03:
4e:8d:c8:c7:8f:39:bf:65:bf:18:5b:eb:ba:67:44:9e:a5:37:
59:02:f8:5c:01:16:f5:7b:81:bf:e9:20:b5:b5:ce:34:7a:41:
55:a7:26:c5:14:f0:c9:f5:26:24:6d:1c:ec:b1:9d:e7:18:5d:
df:81:6f:7f:b9:f2:95:ac:b1:16:a1:fc:d6:3f:2d:f8:03:57:
16:88:ef:4e:b7:83:0e:a9:c7:09:ad:cb:04:61:e6:31:7c:d1:
06:0f:34:b4:9f:a9:9e:4f:60:9d:3e:6a:22:2f:a0:a1:42:47:
4d:f0:d8:dc:6b:42:a0:a3:72:fc:e0:85:d0:20:40:55:bf:03:
c4:c5:f1:b8:ec:9d:14:72:79:61:8d:08:04:58:50:88:bf:fa:
5e:8f:1e:2f:58:e6:7d:ff:5d:bd:11:2c:67:e8:a6:16:a9:c0:
c6:1b:e6:4d:27:42:b4:eb:15:d0:1e:3d:ed:a5:2c:f0:35:1d:
f9:9e:63:5a:6c:71:67:9b:9b:82:2f:5f:24:a5:1e:0e:f7:e2:
25:d7:64:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:53 2024 by rpki-client on console-fra.rpki-client.org