Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/lykjvGUk0bxWVCOWcGKGjgA_U84.roa
File: lykjvGUk0bxWVCOWcGKGjgA_U84.roa (raw, json)
Hash identifier: sTuuSxte0rmPNknb0TQC+dS8eCCWj/XH7hn84ZMw/as=
Subject key identifier: 97:29:23:BC:65:24:D1:BC:56:54:23:96:70:62:86:8E:00:3F:53:CE
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018DE5A84BDD99E4DE8A168736AC9177A4BB
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/lykjvGUk0bxWVCOWcGKGjgA_U84.roa
Signing time: Mon 26 Feb 2024 13:43:48 +0000
ROA not before: Mon 26 Feb 2024 13:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152586
IP address blocks: 45.11.230.0/23 maxlen: 23
45.11.230.0/24 maxlen: 24
45.11.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:a8:4b:dd:99:e4:de:8a:16:87:36:ac:91:77:a4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Feb 26 13:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=972923bc6524d1bc565423967062868e003f53ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:dd:33:14:61:94:9b:cb:dd:d5:04:d4:16:
7a:0b:66:8d:7a:b0:81:4b:a8:30:42:fb:1b:86:97:
8d:5c:7a:82:62:65:17:13:9f:3d:57:73:18:10:c0:
17:4e:46:3b:6d:6d:ad:55:e8:09:ec:ec:61:81:f9:
ea:fb:1f:2a:5c:11:1e:93:71:5e:c8:a0:31:00:1f:
d1:78:57:25:1f:98:19:ae:f7:6d:57:28:bb:b4:f0:
84:52:49:67:f5:88:1b:74:f8:ba:1e:eb:7e:a7:b1:
1c:46:87:5c:c7:ab:27:fd:3c:5b:26:01:c6:83:2e:
fa:40:a1:40:16:09:72:41:cd:11:29:c3:d5:02:d4:
63:aa:14:9a:fd:4f:1d:d7:c6:e5:63:f2:6b:79:32:
43:d9:87:ac:4b:6b:4a:c7:aa:74:28:39:57:a7:8a:
f6:06:c5:fe:96:0d:be:de:42:44:d4:c9:ea:77:99:
54:4d:60:67:8a:2f:a4:f0:d6:2a:3f:6e:96:cf:7c:
15:69:06:f9:42:96:34:b0:d3:26:61:e7:ab:b0:ad:
ce:50:43:0e:38:cb:f7:75:fc:11:9c:b3:9e:5a:51:
cf:5f:f0:ce:07:5e:36:3b:69:90:be:c2:07:e9:c7:
ab:8d:cb:95:d8:3f:f0:70:a4:af:90:99:4c:dc:f2:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:29:23:BC:65:24:D1:BC:56:54:23:96:70:62:86:8E:00:3F:53:CE
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/lykjvGUk0bxWVCOWcGKGjgA_U84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.230.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:e8:77:9c:72:11:35:f8:53:47:ee:6e:75:93:0c:0d:e3:e4:
86:02:da:5f:fc:18:13:9c:b2:f0:ae:1d:8b:c3:d3:a6:d7:64:
b5:3b:c5:ce:b3:36:47:ee:34:23:49:cf:fd:17:44:47:0e:ed:
45:87:eb:df:d3:76:54:68:22:6f:92:13:5f:b3:a0:63:89:4c:
f5:9f:fa:23:38:74:6a:f1:ac:9a:86:43:ba:67:34:e8:e0:44:
34:cc:e4:df:f2:3e:cb:e8:a1:16:e9:ac:de:29:5e:35:51:b9:
ad:d2:3c:b3:0f:b2:11:b8:1d:62:a1:6b:39:a6:96:36:0d:cc:
dc:66:73:dc:5f:ab:b6:d5:01:38:53:df:aa:4e:ed:f3:11:db:
b4:0f:f7:22:b7:0e:22:b6:8c:56:c0:f2:81:90:1b:00:ff:82:
67:3f:cb:91:32:27:f0:92:0b:11:fc:3d:d2:c7:28:59:50:db:
0e:41:85:bb:1a:9c:0b:a9:6f:f8:7d:1c:e7:78:0a:59:da:04:
eb:5c:56:50:41:49:c8:bc:af:2d:1a:73:79:c3:3c:75:9d:8a:
d4:cb:d4:9b:93:a4:ef:5a:9e:ce:0e:bc:55:17:ac:31:ec:41:
fd:b7:82:dc:48:8f:52:46:e0:a2:27:c2:3b:50:10:7c:b8:6b:
88:59:93:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:47:09 2024 by rpki-client on console-ams.rpki-client.org