Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/oL0490q0Wl7BCyQ2x88ZS1sNQX0.roa
File: oL0490q0Wl7BCyQ2x88ZS1sNQX0.roa (raw, json)
Hash identifier: wNQ8fksfJTaxngr+KerYT8vTJHGBHkmElAH8H/p8XKs=
Subject key identifier: A0:BD:38:F7:4A:B4:5A:5E:C1:0B:24:36:C7:CF:19:4B:5B:0D:41:7D
Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Certificate serial: 018D83DE2826A8700A1D6B7C8572C1B17479
Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/oL0490q0Wl7BCyQ2x88ZS1sNQX0.roa
Signing time: Wed 07 Feb 2024 13:59:51 +0000
ROA not before: Wed 07 Feb 2024 13:59:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39305
IP address blocks: 45.84.52.0/22 maxlen: 22
62.106.73.0/24 maxlen: 24
77.75.228.0/24 maxlen: 24
91.211.64.0/22 maxlen: 22
91.238.63.0/24 maxlen: 24
91.242.224.0/24 maxlen: 24
109.234.73.0/24 maxlen: 24
146.19.18.0/24 maxlen: 24
185.182.107.0/24 maxlen: 24
194.247.36.0/24 maxlen: 24
212.6.47.0/24 maxlen: 24
2a0c:7140::/29 maxlen: 29
2a0e:9780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:83:de:28:26:a8:70:0a:1d:6b:7c:85:72:c1:b1:74:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Validity
Not Before: Feb 7 13:59:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0bd38f74ab45a5ec10b2436c7cf194b5b0d417d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:64:d8:47:21:69:b8:92:da:8c:21:82:9d:
c8:5c:32:5c:69:80:f5:22:8c:31:29:a4:ec:16:d0:
66:cf:7a:a6:7d:53:c4:e4:49:d3:82:c9:09:4f:81:
e5:a6:55:4c:7b:3c:80:90:ea:87:01:6b:55:80:6d:
15:35:2c:e9:9b:dc:16:d0:53:3a:17:ce:86:3b:01:
f4:15:df:12:14:2b:92:78:6e:df:15:09:3c:fb:5a:
f8:b7:18:ec:60:b5:69:40:9b:e3:3f:bd:d1:13:fb:
1b:39:72:2b:94:6c:bc:52:e2:36:b0:f0:f9:50:11:
08:65:2e:30:d6:f6:18:7e:3e:42:f6:3b:97:58:11:
f9:58:d3:f3:9c:73:d1:ae:b4:08:1c:93:90:20:35:
57:9b:e1:83:ae:cc:bd:a0:a5:0e:ef:ec:2a:c6:d9:
a4:ac:84:da:e7:70:e1:75:78:68:b4:6d:59:f1:76:
03:0f:19:7a:d1:21:8e:6f:00:af:a5:59:d4:11:f6:
e5:da:b6:13:4a:47:73:3b:c9:f1:35:a6:19:cb:70:
5b:92:fe:5e:1a:34:a0:6c:ab:29:41:1c:09:6a:1f:
f2:6a:88:c3:a0:26:aa:d6:ec:7f:a6:18:f8:50:fe:
50:68:cd:f2:e7:4a:b1:96:6c:a3:ac:44:b7:6f:59:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BD:38:F7:4A:B4:5A:5E:C1:0B:24:36:C7:CF:19:4B:5B:0D:41:7D
X509v3 Authority Key Identifier:
keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/oL0490q0Wl7BCyQ2x88ZS1sNQX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.52.0/22
62.106.73.0/24
77.75.228.0/24
91.211.64.0/22
91.238.63.0/24
91.242.224.0/24
109.234.73.0/24
146.19.18.0/24
185.182.107.0/24
194.247.36.0/24
212.6.47.0/24
IPv6:
2a0c:7140::/29
2a0e:9780::/29
Signature Algorithm: sha256WithRSAEncryption
7c:57:37:f5:a7:70:ae:7a:ff:e3:ef:2c:40:5d:23:7f:c8:ce:
2f:5b:42:af:64:ed:5d:e8:9c:4a:e4:d4:82:66:e7:eb:60:d8:
2d:66:a6:6f:97:eb:ce:8b:0a:21:9b:f4:4b:45:e2:bc:5e:67:
00:45:dd:5d:f2:c3:2e:f3:45:2b:22:37:0c:83:c5:7d:57:c7:
3c:fd:37:68:24:9f:80:f1:ab:19:7e:81:10:d4:11:32:f5:41:
4b:7e:84:26:f1:d8:ce:07:77:ca:d0:a4:55:93:4f:05:49:ba:
f4:1f:d0:89:4a:0b:c1:fe:f8:e2:57:e5:8e:ec:2a:bf:5b:45:
c9:6f:52:4a:29:bb:83:68:f3:a9:92:ed:18:c3:40:9f:bc:1b:
90:42:61:bb:15:1b:fd:6d:f4:86:96:93:51:c1:fe:fb:02:f0:
b8:4c:47:c5:3f:61:28:b2:ee:d8:4e:5e:66:42:0f:54:fc:dd:
07:c3:d8:b4:45:bb:88:27:3a:7f:f3:e3:4a:5f:e5:0f:14:f6:
d2:26:6a:04:e7:54:7b:ed:3d:48:54:1a:e4:40:9f:a9:de:fb:
0b:51:54:61:7f:f3:e7:48:11:4c:84:bd:b3:2b:c6:74:5e:c0:
ed:a1:93:62:fd:30:ab:04:4d:55:ef:85:21:e8:83:cc:e9:6a:
b6:2c:32:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:03:43 2024 by rpki-client on console-fra.rpki-client.org