Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/VWnr0y-6bfCzoaaqV4PEcucfWB0.roa
File: VWnr0y-6bfCzoaaqV4PEcucfWB0.roa (raw, json)
Hash identifier: 5hGj6QU8vHiYjwIAepEqHcAs4PUvdZX8P7nFByUb/F4=
Subject key identifier: 55:69:EB:D3:2F:BA:6D:F0:B3:A1:A6:AA:57:83:C4:72:E7:1F:58:1D
Certificate issuer: /CN=52ee489f36de04219cd2192e04a7bdb13914648f
Certificate serial: 018CC94DD9C37EEB5D4BF8A588BA1A7DD753
Authority key identifier: 52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/VWnr0y-6bfCzoaaqV4PEcucfWB0.roa
Signing time: Tue 02 Jan 2024 08:32:51 +0000
ROA not before: Tue 02 Jan 2024 08:32:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61074
IP address blocks: 45.135.144.0/22 maxlen: 24
2a0e:8bc0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:d9:c3:7e:eb:5d:4b:f8:a5:88:ba:1a:7d:d7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ee489f36de04219cd2192e04a7bdb13914648f
Validity
Not Before: Jan 2 08:32:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5569ebd32fba6df0b3a1a6aa5783c472e71f581d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:1f:3c:77:38:8a:03:c5:db:49:f5:00:d4:
89:9c:2b:e6:85:42:d1:98:f3:11:47:21:9a:8d:d0:
47:bd:3d:c3:e4:7e:5c:b2:c6:ee:62:21:55:ac:70:
77:36:5f:94:7c:8e:6e:7c:ea:3c:a8:eb:7b:29:5b:
46:69:19:dd:0c:a0:08:68:e0:59:be:d2:5e:31:00:
b3:45:c4:0d:af:8a:d5:94:00:73:aa:7d:38:ed:1f:
cf:fa:8d:c8:20:2f:91:bc:a6:53:69:7d:98:bf:31:
1a:87:c6:20:cc:f0:29:6a:54:fd:fb:ea:ab:df:db:
d7:0a:ca:a4:c4:36:81:8e:23:7a:c2:2a:5e:c7:f4:
25:4b:56:89:60:dd:c3:87:3d:b3:2e:0c:48:82:b8:
a7:c4:da:b6:2d:25:cd:73:80:b2:5e:0f:90:13:e6:
95:a2:23:5f:14:c2:c6:db:76:cf:76:bf:ba:07:f6:
ec:01:ee:3b:fd:a2:09:c9:e9:88:99:01:e0:ae:52:
0a:85:01:51:8f:3e:a1:a7:76:53:e1:f8:81:de:0e:
4f:28:93:d4:80:dd:15:10:46:d3:3b:43:b5:67:d4:
2a:cd:3f:02:ca:86:a9:ca:f9:99:f5:99:0a:b8:a5:
1a:80:b3:3b:6e:a1:83:c1:e6:15:57:98:6a:59:66:
2c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:69:EB:D3:2F:BA:6D:F0:B3:A1:A6:AA:57:83:C4:72:E7:1F:58:1D
X509v3 Authority Key Identifier:
keyid:52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/VWnr0y-6bfCzoaaqV4PEcucfWB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.144.0/22
IPv6:
2a0e:8bc0::/29
Signature Algorithm: sha256WithRSAEncryption
17:ed:8c:75:be:72:3c:6a:60:b6:1b:ad:8a:06:3b:ef:a5:4e:
04:f5:86:7d:af:50:66:68:17:9c:01:6c:e5:fa:a0:eb:32:9f:
26:ba:16:cf:04:11:f2:53:54:aa:40:92:38:1f:ea:17:8d:d1:
da:95:d6:c5:4a:09:63:94:3f:6d:50:9a:4d:35:f6:55:c4:fc:
c2:96:20:b6:b9:09:20:d4:d5:bb:2f:9c:22:2a:5a:2e:82:b1:
34:13:1d:17:06:bf:e6:0f:7b:14:75:ec:b3:b8:23:46:e3:87:
ec:77:7f:47:93:f3:4d:3f:ee:ac:0a:9f:75:e6:7a:0f:bb:be:
4a:a3:97:c3:4f:d9:ff:9d:b7:40:78:9d:9b:ec:3e:91:c0:b3:
c9:06:d6:4d:4c:a1:cd:51:cd:e7:c0:71:c2:82:76:2e:4c:50:
e0:b2:e3:57:0f:77:03:89:29:ba:1b:0a:c5:e9:4e:ff:6b:25:
9c:1f:db:a5:a3:24:42:1f:a4:75:1d:74:cc:9f:b0:af:45:e7:
be:e2:bb:ef:ce:e5:eb:63:2a:1c:fc:25:a1:18:09:b2:05:2d:
98:60:c6:9b:92:2b:ea:71:36:20:3a:2e:52:e1:46:db:37:39:
7f:1f:57:66:44:31:ad:b4:48:05:6e:f0:1c:e6:61:49:7b:6f:
05:8d:8c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:41:52 2024 by rpki-client on console-ams.rpki-client.org