Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/R-wDFAdwZLBNMiwhA90kJU5Y95Q.roa
File: R-wDFAdwZLBNMiwhA90kJU5Y95Q.roa (raw, json)
Hash identifier: yIn03TpWzX1b28jxnoQwrJP6Ai184Qpzw27OanhIk5Y=
Subject key identifier: 47:EC:03:14:07:70:64:B0:4D:32:2C:21:03:DD:24:25:4E:58:F7:94
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E3183F77393A5EE34AA2B57274B1C
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/R-wDFAdwZLBNMiwhA90kJU5Y95Q.roa
Signing time: Tue 02 Jan 2024 08:33:13 +0000
ROA not before: Tue 02 Jan 2024 08:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34549
IP address blocks: 45.13.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:31:83:f7:73:93:a5:ee:34:aa:2b:57:27:4b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47ec0314077064b04d322c2103dd24254e58f794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:10:ed:34:d2:49:a0:bf:40:02:56:e6:67:a9:
08:e0:e4:21:10:44:fb:72:e4:7b:7e:d5:4a:c9:60:
92:d2:b7:22:ac:f6:f2:34:5d:ad:d0:03:6a:68:b4:
ca:9c:18:e9:e3:99:44:e7:85:51:3a:82:22:ed:aa:
bd:20:eb:85:85:c4:e6:0b:e7:43:fc:b6:10:91:26:
98:17:1f:b8:71:1f:a8:6c:01:b5:98:3e:87:71:ac:
cb:fe:3b:84:72:e7:c9:c1:b7:b1:ae:67:9b:6f:a9:
1f:c2:fd:30:b9:36:15:34:00:38:c5:57:2c:c8:fd:
0e:27:95:b0:de:28:91:a3:60:04:87:b2:b0:7d:77:
f9:ff:84:e3:eb:78:d6:72:f4:08:be:0e:9f:f3:f1:
2c:25:f0:50:dc:5a:e1:57:c7:5b:a5:5e:77:b7:f9:
fe:80:d9:d5:b1:79:c3:f8:55:12:00:bd:de:ca:f8:
8b:23:4d:b1:e7:1a:59:e7:2b:23:13:52:08:b4:d1:
20:2f:2f:88:b3:c4:86:52:9b:9f:e3:8f:6c:92:d4:
35:32:db:ea:04:3a:93:a8:32:c2:10:7c:0f:12:e8:
2c:09:e9:d0:fa:20:87:15:7b:7b:ad:d7:c3:c3:c4:
0d:2b:09:8d:8b:70:07:54:e0:ff:26:a3:1d:83:2c:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EC:03:14:07:70:64:B0:4D:32:2C:21:03:DD:24:25:4E:58:F7:94
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/R-wDFAdwZLBNMiwhA90kJU5Y95Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.236.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:dc:38:c6:5b:36:18:b8:f3:95:15:b1:f9:3a:03:fd:59:d4:
49:5c:2c:f1:b6:41:e2:dc:9c:4c:1b:ca:30:71:0b:80:be:37:
c1:e4:04:50:7b:76:2d:2e:dd:02:a7:86:ae:77:b9:2c:27:6a:
c2:2b:7e:08:72:d0:21:3b:89:69:7c:b7:a3:f4:7c:fa:4b:cc:
85:19:7b:e3:d2:e0:36:1f:b6:6c:2f:a0:62:58:17:94:29:86:
dc:2b:97:76:74:de:36:9c:32:65:97:77:ca:d6:b3:be:9e:46:
3e:a1:61:a8:cb:a5:6f:87:f9:f8:8b:1d:0c:7b:c0:2b:ed:96:
c0:2d:8e:5f:3d:94:7a:ab:5c:5b:d7:f2:25:3f:53:77:75:6e:
36:8e:22:f5:2e:48:ef:55:db:e6:9e:63:fa:d0:8d:1b:2f:ca:
f9:68:a4:18:5d:f9:54:19:42:d9:3d:5a:17:40:3c:52:bd:7e:
71:a0:71:ee:74:43:e1:c8:71:29:63:10:61:7e:02:96:fb:3b:
3e:aa:51:65:02:e0:13:53:7c:88:26:ec:df:85:5e:cd:d9:e9:
0d:b2:76:2d:0a:c7:4b:66:4b:17:c7:d9:11:34:e2:7a:45:c1:
4e:73:d7:82:1c:67:59:e7:1d:97:eb:f9:da:4e:74:2d:d6:f1:
df:d6:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:47:09 2024 by rpki-client on console-ams.rpki-client.org