Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/RdJagIQPxGZ1_p-t-RbuqBmqrUQ.roa
File: RdJagIQPxGZ1_p-t-RbuqBmqrUQ.roa (raw, json)
Hash identifier: 6hvo4ngJq87WEtdj2OYo6eLbk1la4mWn+X94g45z6gs=
Subject key identifier: 45:D2:5A:80:84:0F:C4:66:75:FE:9F:AD:F9:16:EE:A8:19:AA:AD:44
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 019200658F7D1C17A7CC294B2B65F5B1AE5A
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/RdJagIQPxGZ1_p-t-RbuqBmqrUQ.roa
Signing time: Tue 17 Sep 2024 14:31:48 +0000
ROA not before: Tue 17 Sep 2024 14:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60439
IP address blocks: 45.151.80.0/24 maxlen: 24
45.151.81.0/24 maxlen: 24
45.151.83.0/24 maxlen: 24
85.208.196.0/24 maxlen: 24
85.208.197.0/24 maxlen: 24
85.208.198.0/24 maxlen: 24
85.208.199.0/24 maxlen: 24
193.160.22.0/24 maxlen: 24
193.160.23.0/24 maxlen: 24
193.160.30.0/24 maxlen: 24
193.160.31.0/24 maxlen: 24
2a13:8240::/40 maxlen: 48
2a13:8240:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:00:65:8f:7d:1c:17:a7:cc:29:4b:2b:65:f5:b1:ae:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Sep 17 14:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45d25a80840fc46675fe9fadf916eea819aaad44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:4e:3c:4f:54:f1:85:d4:0a:59:07:38:b8:
11:69:87:b5:05:6c:55:3e:15:8f:16:96:5c:a1:e3:
b9:88:e1:0d:12:71:3f:70:f1:3b:80:6f:d4:b8:a9:
56:ee:ed:cb:9e:4c:2c:19:58:33:01:33:01:47:e9:
88:00:21:8d:6c:b2:8d:83:61:7d:31:5b:14:b5:41:
9c:c9:96:a8:1f:44:bf:08:94:86:9d:90:1f:34:bf:
cb:0a:58:7a:9a:68:93:19:07:bb:af:00:9f:07:3c:
d0:fa:33:97:c5:4f:ee:d9:e5:fe:31:66:67:c0:ec:
22:7c:74:02:ae:cb:65:43:93:cc:6d:79:66:db:3c:
05:ef:ac:05:e7:2f:90:3a:45:77:f6:45:6c:07:cf:
9e:5b:06:d8:60:ca:2b:da:69:c5:2f:ea:26:40:f7:
41:87:07:a3:d7:b5:a1:ce:c2:8f:bf:f3:d2:01:f7:
ac:80:c1:7b:4b:b1:8d:02:f2:42:da:c8:b9:15:c8:
1c:c7:db:5e:6a:42:c7:8b:57:54:f7:44:fe:62:c5:
37:77:a9:80:71:25:86:ca:1b:6f:f5:2d:74:74:b6:
41:45:1a:78:4f:82:09:91:d8:3f:d2:9b:3c:a2:e1:
1d:b9:f5:9a:8b:9b:23:0e:02:f2:6b:09:bf:2d:f3:
d3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D2:5A:80:84:0F:C4:66:75:FE:9F:AD:F9:16:EE:A8:19:AA:AD:44
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/RdJagIQPxGZ1_p-t-RbuqBmqrUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.80.0/23
45.151.83.0/24
85.208.196.0/22
193.160.22.0/23
193.160.30.0/23
IPv6:
2a13:8240::/39
Signature Algorithm: sha256WithRSAEncryption
63:e9:72:4c:c3:ad:fa:12:69:4b:75:5c:bc:e4:25:f1:e1:1e:
4a:b4:60:22:29:b5:0a:65:7e:a1:07:dd:64:a3:30:e5:27:9d:
96:1f:73:45:f2:cb:26:4f:08:b2:1c:b6:02:14:6f:71:05:90:
c5:02:db:97:ed:35:aa:9c:0d:1c:71:fe:d1:b5:c1:52:a7:b2:
8f:4f:f7:d4:34:0a:d3:7c:f6:e4:d7:7c:84:5f:b6:3f:d0:7c:
79:5f:f5:0b:f4:54:70:c5:e1:e6:3d:b2:6d:74:fa:24:0c:a5:
a8:ea:09:0c:54:23:4e:24:d4:17:b4:66:38:2e:f9:53:54:12:
c6:58:bc:54:b4:fa:ea:25:bf:62:6b:6a:83:bc:8e:1d:80:c2:
c4:09:c9:17:7a:64:a0:05:a2:ba:65:c1:e6:a2:77:e0:a1:e7:
c9:a0:a2:41:35:8c:4a:48:ba:a5:84:c1:75:78:3e:a8:c3:02:
92:d8:3e:8e:69:d7:e2:9d:d4:35:56:a0:97:16:32:e3:b8:1e:
e9:2f:6e:7a:c9:66:06:e5:37:9c:53:d0:e7:29:21:88:4d:67:
4b:5d:26:f9:32:27:dc:86:78:55:bc:45:e7:d8:bb:fc:54:52:
88:6e:60:f7:52:82:f7:6c:c7:91:33:fa:de:5e:17:17:5a:28:
f9:b0:80:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:27:58 2024 by rpki-client on console-ams.rpki-client.org