Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/AjvHf331roA25zYfb0x5vclFbhs.roa
File: AjvHf331roA25zYfb0x5vclFbhs.roa (raw, json)
Hash identifier: aW9VhicDizfEgQ5Y5WChODcLKSu6LB6dVZjVY9hYN9U=
Subject key identifier: 02:3B:C7:7F:7D:F5:AE:80:36:E7:36:1F:6F:4C:79:BD:C9:45:6E:1B
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 0190BA76EEE4153EA9AE668126DE47390120
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/AjvHf331roA25zYfb0x5vclFbhs.roa
Signing time: Tue 16 Jul 2024 07:34:34 +0000
ROA not before: Tue 16 Jul 2024 07:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200702
IP address blocks: 45.159.16.0/22 maxlen: 22
77.120.56.0/22 maxlen: 22
91.212.198.0/24 maxlen: 24
91.212.201.0/24 maxlen: 24
91.212.220.0/24 maxlen: 24
91.212.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ba:76:ee:e4:15:3e:a9:ae:66:81:26:de:47:39:01:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jul 16 07:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=023bc77f7df5ae8036e7361f6f4c79bdc9456e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c5:f4:a9:fe:8c:e3:b2:13:2a:f9:dd:9b:f1:
a4:1f:07:cb:90:be:31:0b:38:b8:ff:71:38:29:84:
be:02:be:0c:e3:dd:d3:20:6e:89:85:44:02:2b:23:
d8:2c:7a:ab:e0:ce:a5:64:9a:16:da:a7:fa:50:f4:
e2:cf:e1:b3:72:d2:ed:d0:a8:5d:45:3b:0f:71:d2:
13:fa:08:62:4c:c8:8a:b7:63:83:8b:9d:f8:97:17:
35:35:f6:b0:e8:74:fb:99:66:73:95:20:a9:24:b5:
7d:23:c0:a5:86:6e:0d:e3:30:0b:c3:f8:5f:fc:c0:
38:16:be:22:93:9e:aa:13:f3:c8:bf:dc:d7:08:33:
c4:2e:c2:1e:76:ea:7b:02:e3:13:71:a9:21:00:3a:
cc:ba:29:c5:4e:60:01:97:5a:b8:ae:28:63:dc:05:
ff:99:45:8b:83:19:4c:96:d8:9f:62:39:c2:2a:19:
c5:8c:7f:84:41:3a:d4:3b:2f:bc:cc:67:2c:de:53:
18:db:79:b1:db:a6:92:33:61:13:9d:0e:0d:2e:c7:
43:70:99:da:77:78:29:1f:32:b5:d5:93:e5:43:09:
61:5e:55:b3:24:aa:fe:b7:b1:1b:5b:64:7c:fd:78:
ae:91:ed:e1:74:94:b1:a1:1b:cf:50:06:9f:4a:d3:
6d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3B:C7:7F:7D:F5:AE:80:36:E7:36:1F:6F:4C:79:BD:C9:45:6E:1B
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/AjvHf331roA25zYfb0x5vclFbhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.16.0/22
77.120.56.0/22
91.212.198.0/24
91.212.201.0/24
91.212.220.0/24
91.212.226.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a8:d3:58:ff:29:03:40:74:5d:8c:3e:a2:cb:d9:20:b2:3c:
29:df:0b:49:ec:75:cd:e0:b4:28:85:e7:cb:ae:e9:8f:87:7a:
d0:04:46:32:3e:33:72:99:5a:05:30:61:99:f2:83:db:40:1e:
74:22:45:e0:86:5f:15:ef:3e:7f:f1:96:37:a5:8d:35:25:a0:
4f:7a:3e:27:59:2a:6f:72:a6:64:28:f9:0e:00:20:e2:8d:15:
c2:66:1f:43:c4:63:24:64:ea:14:ab:a9:bd:2e:f3:8c:46:e3:
4e:69:7b:99:55:99:52:6f:8d:48:89:62:4e:35:c3:76:d2:03:
2e:8a:ec:fe:00:55:f8:8c:45:4d:05:3c:c4:b9:c2:42:ef:69:
b8:26:17:47:9f:75:6f:ea:9a:32:39:31:32:8d:40:92:49:0a:
02:5a:4e:39:50:15:b6:ff:b4:24:0f:f4:dd:c5:1c:44:88:4c:
f1:fc:5a:41:bb:46:3d:d5:c6:3c:a7:23:40:24:42:85:75:85:
32:51:5e:be:7f:78:a8:b1:0b:e5:59:b2:92:e9:bc:ad:57:f6:
20:58:41:78:a0:e8:ad:62:15:19:49:f7:8c:3a:9f:9d:d1:ad:
f8:cf:79:a6:97:e8:76:e1:bd:6c:d7:52:4f:19:99:5b:db:2b:
a3:6a:e1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:18:03 2024 by rpki-client on console-ams.rpki-client.org