Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/pSw0ld3YyERYYHYQY7UzIjYxmQI.roa
File: pSw0ld3YyERYYHYQY7UzIjYxmQI.roa (raw, json)
Hash identifier: Onq5TkYtpFOjWibAEGhRgkuMrNOsGBHvCEh9tDb2Q18=
Subject key identifier: A5:2C:34:95:DD:D8:C8:44:58:60:76:10:63:B5:33:22:36:31:99:02
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 019134714741CD1DD22C07D837DE0738CD12
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/pSw0ld3YyERYYHYQY7UzIjYxmQI.roa
Signing time: Fri 09 Aug 2024 00:02:04 +0000
ROA not before: Fri 09 Aug 2024 00:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197730
IP address blocks: 45.156.20.0/24 maxlen: 32
91.190.152.0/24 maxlen: 32
193.28.186.0/24 maxlen: 32
194.36.208.0/24 maxlen: 32
194.113.209.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 23:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:34:71:47:41:cd:1d:d2:2c:07:d8:37:de:07:38:cd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Aug 9 00:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a52c3495ddd8c8445860761063b5332236319902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:72:99:dd:40:01:6f:7c:25:43:44:44:d8:df:
2e:af:68:6f:96:da:92:7d:a2:a0:7e:7c:4b:4e:68:
f0:88:88:bd:6b:a5:6c:a6:db:be:de:f3:39:6a:e7:
8e:a2:3c:31:34:c8:5c:77:8c:04:51:81:06:b1:f9:
7c:2c:f4:f4:00:1b:dc:ae:b2:68:d5:3b:95:39:fe:
b9:3d:ff:6b:23:18:ec:17:25:50:73:bc:3a:9d:57:
4b:87:7d:8f:1a:16:3a:26:a2:76:ad:08:b9:7f:03:
9f:73:77:a1:32:ea:2b:99:5f:ce:d7:b6:73:e8:99:
cc:da:4d:6c:01:c4:9c:75:bc:ce:e8:65:2c:87:90:
2f:78:94:f6:4d:9c:5f:98:6d:06:ed:94:c7:69:13:
dc:3a:88:98:14:d4:a0:db:b9:ef:2c:2f:61:2c:80:
e0:fd:f3:33:f8:77:a6:df:e4:63:2e:56:74:9e:2a:
5f:ab:09:21:ff:32:ee:43:e9:7b:80:21:2b:97:c8:
75:5c:f8:1b:ec:d4:11:8e:13:a1:11:8e:71:42:c4:
32:92:97:fe:59:d7:8a:68:a7:12:52:4f:a3:ee:ed:
18:6d:2f:4d:97:00:58:97:19:0b:3e:96:8a:d9:f7:
d8:c5:e8:c6:3e:86:28:eb:05:2a:38:eb:a0:eb:01:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2C:34:95:DD:D8:C8:44:58:60:76:10:63:B5:33:22:36:31:99:02
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/pSw0ld3YyERYYHYQY7UzIjYxmQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.20.0/24
91.190.152.0/24
193.28.186.0/24
194.36.208.0/24
194.113.209.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a7:b6:b0:7b:d5:1f:26:44:56:02:27:d7:ed:90:8a:98:14:
b3:05:d3:d5:ac:b4:1e:3a:56:19:24:5c:05:ba:48:79:1c:ba:
6f:bc:8d:44:b8:ce:ef:b0:f8:f9:7c:0c:98:7a:f3:f7:59:2c:
1a:e6:2f:ff:21:06:01:3b:da:0a:4f:62:cb:56:e5:d6:33:b0:
77:83:5a:b6:84:15:39:7e:28:42:f1:0c:e8:07:ee:e2:50:a2:
93:12:bc:02:7c:73:af:5f:0f:fe:96:f7:95:70:b8:50:39:0d:
0c:ea:b7:c1:3b:68:50:71:0c:f0:86:89:9a:3c:87:69:21:81:
f8:6c:bc:87:2c:83:71:f1:a5:8b:df:92:65:52:41:29:17:37:
08:1d:96:71:dc:95:c7:48:8d:e2:a5:d0:52:7e:34:10:16:e9:
7f:ea:38:a1:4e:ac:bb:89:50:3e:73:b2:2e:43:88:dd:de:f4:
3b:02:9f:f6:33:ea:45:3a:61:39:47:62:4d:55:b6:4d:5e:a4:
b5:e1:53:48:34:5e:94:0d:a2:5b:91:37:aa:b5:2f:0c:bf:df:
6e:7e:a8:80:69:b0:f6:aa:f1:1d:b3:98:11:d0:7f:21:92:8c:
f7:38:11:db:91:ad:5a:78:a4:68:ce:9a:f4:43:c4:c2:a3:97:
85:55:09:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:47:44 2024 by rpki-client on console-fra.rpki-client.org