Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/cuwwIHb0u1yrTA3gAo7my6aYOx8.roa
File: cuwwIHb0u1yrTA3gAo7my6aYOx8.roa (raw, json)
Hash identifier: Uonr4vuXFu+qsvHcGkoOhKviu6/Z1NN3gF84N+MWpw0=
Subject key identifier: 72:EC:30:20:76:F4:BB:5C:AB:4C:0D:E0:02:8E:E6:CB:A6:98:3B:1F
Certificate issuer: /CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Certificate serial: 01902637945769149A7AAAA112E8804F0A82
Authority key identifier: A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/cuwwIHb0u1yrTA3gAo7my6aYOx8.roa
Signing time: Mon 17 Jun 2024 12:41:34 +0000
ROA not before: Mon 17 Jun 2024 12:41:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201301
IP address blocks: 185.45.98.0/23 maxlen: 23
185.45.98.0/24 maxlen: 24
185.45.99.0/24 maxlen: 24
2a04:a182::/32 maxlen: 32
2a04:a182::/33 maxlen: 33
2a04:a182:8000::/33 maxlen: 33
2a04:a183::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 12:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:26:37:94:57:69:14:9a:7a:aa:a1:12:e8:80:4f:0a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Validity
Not Before: Jun 17 12:41:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72ec302076f4bb5cab4c0de0028ee6cba6983b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:d8:c0:39:0e:b0:0f:de:ae:dc:87:bb:e9:
1a:bc:f7:a7:16:1f:35:0b:41:95:55:47:ac:c9:41:
64:d3:e4:20:96:55:b3:9a:5b:d9:99:97:b5:57:c3:
15:79:34:a6:01:8c:2b:59:f9:89:45:ae:87:5c:61:
f6:10:aa:62:d1:93:e9:49:01:e8:2f:f0:da:82:6e:
d1:cc:0d:ae:27:aa:e8:d6:4c:9a:cb:4b:25:6c:da:
fb:50:68:5a:b9:6e:06:b2:97:df:3b:e5:c0:61:39:
b4:41:cc:30:b4:c9:4e:95:c1:a7:b4:11:8e:ed:05:
e7:bd:11:2a:20:f4:66:13:eb:b8:9f:c9:7f:b2:b0:
d4:28:5d:51:c0:00:6c:f2:90:52:2f:44:bd:66:fb:
64:c0:d7:8c:e3:61:6d:bf:7e:b4:e6:1d:0c:46:4c:
95:c4:64:e2:5a:0d:b7:56:ff:bd:31:e3:2f:18:dd:
45:a8:42:91:30:9c:75:dc:0e:a5:6a:de:be:03:f0:
02:f7:89:ff:79:1d:a4:ca:dc:ca:bb:48:03:e9:19:
3a:8e:bc:15:67:5a:4c:e0:de:4d:7a:b1:e5:b0:b4:
4a:0f:11:d4:1e:46:26:46:d1:63:48:d4:da:d6:72:
3b:93:77:10:5d:64:56:86:10:cf:60:78:61:f2:27:
58:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EC:30:20:76:F4:BB:5C:AB:4C:0D:E0:02:8E:E6:CB:A6:98:3B:1F
X509v3 Authority Key Identifier:
keyid:A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/cuwwIHb0u1yrTA3gAo7my6aYOx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.98.0/23
IPv6:
2a04:a182::/31
Signature Algorithm: sha256WithRSAEncryption
8b:52:ea:9c:d5:dc:0d:a6:81:2b:9b:c4:d7:25:7c:03:93:42:
93:77:22:cf:83:ec:30:77:f7:3e:cd:36:cb:41:19:b2:1f:94:
81:d1:47:05:5c:12:67:d3:8d:aa:e1:3c:53:e2:f3:e9:ba:dd:
b0:dc:44:b2:03:06:8f:13:ae:05:7d:30:4f:38:a5:fe:68:13:
7c:5a:85:a8:c7:e2:04:f8:6c:ff:8a:ce:7d:e3:a9:02:9d:4a:
9a:b1:a9:4b:17:d9:86:1f:49:93:d0:1b:89:1c:ce:f5:d4:35:
01:7c:28:7c:4c:f8:aa:55:80:17:88:f9:99:38:82:e9:56:84:
d8:11:d2:65:b6:a4:aa:bf:62:38:70:93:18:75:03:7a:fb:f8:
18:aa:b9:11:38:3c:8d:3e:04:36:39:c2:72:72:c0:06:b3:b3:
0f:25:87:87:15:1c:64:57:c9:0a:76:eb:7b:e2:40:31:72:0f:
26:17:4b:f1:50:32:61:ba:a6:60:61:c0:f4:a3:ac:75:2d:2a:
d6:f7:95:c2:f4:ad:d4:0a:56:1c:f6:c8:ba:50:21:d4:97:52:
9f:53:f9:d4:ce:e3:41:00:d9:c5:39:46:c5:c7:8a:ec:4a:39:
f8:a7:8f:a9:3c:0c:eb:40:ac:34:76:d7:47:c8:c6:93:34:ad:
1f:9d:54:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:29:30 2024 by rpki-client on console-ams.rpki-client.org