Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/xDTcKCN3IQQy2tfO9rJ5QY1bOEI.roa
File: xDTcKCN3IQQy2tfO9rJ5QY1bOEI.roa (raw, json)
Hash identifier: Vpd1f81/qIQIhKM6/Mt5tYzVwUfvsAiV46iEshEDgco=
Subject key identifier: C4:34:DC:28:23:77:21:04:32:DA:D7:CE:F6:B2:79:41:8D:5B:38:42
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018CC8DFAD92640B575506EDAB36610236D8
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/xDTcKCN3IQQy2tfO9rJ5QY1bOEI.roa
Signing time: Tue 02 Jan 2024 06:32:31 +0000
ROA not before: Tue 02 Jan 2024 06:32:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213221
IP address blocks: 45.158.252.0/24 maxlen: 24
45.158.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:ad:92:64:0b:57:55:06:ed:ab:36:61:02:36:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 06:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c434dc282377210432dad7cef6b279418d5b3842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ed:e1:29:27:50:2e:79:ad:f7:86:25:1d:7f:
87:f2:6a:c0:ae:71:ee:a7:c7:e9:b2:97:c7:0f:a7:
e1:27:e5:be:67:b8:c6:68:34:67:6d:29:4e:88:1c:
57:25:13:f5:d4:9a:d7:bd:2d:6e:e3:9d:e0:77:64:
e6:44:08:6e:71:a4:a2:4b:fb:98:5d:6d:fa:fc:d5:
b4:ed:3b:4e:93:53:95:de:73:6a:39:5a:5a:12:e3:
91:09:62:19:ac:d6:e0:63:ca:7f:3f:02:3c:0c:e3:
ad:03:4f:57:34:ee:fe:ca:10:4d:1b:02:62:1a:ee:
31:f4:89:74:1e:1c:e2:aa:2f:8b:23:16:68:be:d6:
8d:b2:f5:0f:2d:47:e2:5d:34:5d:ba:95:91:3c:35:
2a:fb:b1:f5:19:4e:85:0e:af:90:fc:8e:a1:b4:90:
5a:7f:96:88:e1:34:72:ae:f2:54:55:bd:b7:68:bd:
2d:87:d4:9b:d2:76:79:2c:b3:ce:e9:db:6d:b3:93:
40:5a:a5:f8:d1:ea:29:ca:ea:6e:8c:71:d2:12:66:
af:9f:f2:84:7e:9b:81:7e:6d:ad:f5:9e:f3:7b:02:
bb:a2:ad:21:cb:fe:f0:02:65:c0:de:40:2f:df:7b:
94:8a:09:94:4a:06:a4:a2:1c:f1:f4:d4:1c:ad:4f:
9c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:34:DC:28:23:77:21:04:32:DA:D7:CE:F6:B2:79:41:8D:5B:38:42
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/xDTcKCN3IQQy2tfO9rJ5QY1bOEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.252.0/24
45.158.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:eb:29:cc:02:96:f9:53:b6:7f:2b:36:be:09:37:66:6d:ae:
bb:78:65:6e:b4:90:d1:15:97:44:0e:78:ff:35:d5:29:d8:a4:
b0:69:3a:c2:c6:21:7b:10:82:42:3e:b0:13:a1:69:6b:7b:75:
c5:f9:78:52:c4:eb:9e:3c:21:9c:a1:68:e5:25:e4:08:1f:73:
bb:a1:1f:0e:df:3d:6b:3f:fe:fe:f5:47:4d:ba:58:d6:37:44:
75:2d:05:a4:61:54:72:2e:a4:b7:fb:31:1b:f0:3c:ac:0f:e6:
d7:5d:72:f5:46:a7:98:f3:f6:85:0b:b8:53:68:6a:f2:81:23:
41:9a:e7:29:cd:25:91:49:bd:18:74:08:9d:96:01:84:b5:ba:
fb:4c:43:98:a3:8a:ba:c4:26:4f:09:94:6c:78:92:ca:ce:fa:
60:6e:fa:7c:9c:82:0b:92:40:ff:65:36:da:d1:d2:03:62:81:
81:31:f9:9f:31:02:98:4e:87:ac:19:25:0a:b0:d4:91:f2:3d:
58:5d:8d:52:d8:b3:78:1c:c6:49:0f:29:72:91:ad:29:9e:a9:
33:84:cd:4e:99:fa:65:23:ef:34:43:2c:d3:e3:55:d6:fd:37:
90:76:bc:5b:63:a8:6c:fc:43:a1:0f:1f:97:1b:45:4f:60:45:
4e:f4:30:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 16:07:07 2024 by rpki-client on console-ams.rpki-client.org