Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ihRhOZUFv-OHogZ8RVtdTs6RNwE.roa
File: ihRhOZUFv-OHogZ8RVtdTs6RNwE.roa (raw, json)
Hash identifier: Ia5SJV6JVHsM37MG/ESXwkgifHWKG/X2C9X4sYYj5Vw=
Subject key identifier: 8A:14:61:39:95:05:BF:E3:87:A2:06:7C:45:5B:5D:4E:CE:91:37:01
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018DA7B08C9ADB2D21D21AD3AA0A012122E9
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ihRhOZUFv-OHogZ8RVtdTs6RNwE.roa
Signing time: Wed 14 Feb 2024 12:56:21 +0000
ROA not before: Wed 14 Feb 2024 12:56:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44648
IP address blocks: 45.146.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:b0:8c:9a:db:2d:21:d2:1a:d3:aa:0a:01:21:22:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Feb 14 12:56:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a1461399505bfe387a2067c455b5d4ece913701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9a:6b:55:32:f4:f8:d3:f3:52:00:d7:e1:83:
de:04:40:3f:a0:a4:33:43:7a:76:1e:29:cf:cd:17:
96:08:8a:43:97:41:a5:11:80:0d:13:63:e0:8c:74:
a8:87:74:24:3a:ad:7b:59:5d:9f:10:e6:d5:2a:ee:
d0:15:cf:9a:6f:76:89:bd:ee:a8:1e:ff:93:b1:62:
c1:c0:a5:d1:0a:8b:73:4d:fa:8b:10:d3:f7:54:45:
83:7d:8e:92:01:86:a8:9c:ce:d9:d5:45:c6:c4:40:
24:de:d7:b8:35:43:6a:3c:ba:b7:06:e0:91:f0:6e:
b1:07:b7:fb:18:98:ae:9a:23:68:ab:d3:17:0b:90:
f1:02:b8:c7:8f:02:15:89:4a:a5:44:84:08:bc:6d:
85:c3:cb:1f:3c:09:d1:f5:29:0b:b7:d8:a6:d7:b9:
95:e0:72:0b:b2:f6:21:83:73:24:4c:01:ae:31:81:
d6:ea:58:5d:2f:b8:4b:51:7e:6a:99:09:c2:52:46:
95:c9:46:9e:24:25:78:6b:d9:47:55:45:97:91:15:
a8:5d:b4:f0:cf:a6:ba:5c:61:30:2e:94:91:c2:a3:
d2:1c:54:23:50:56:19:f5:14:17:c9:1e:d2:ea:40:
ec:2a:f9:06:6c:af:ae:64:50:c2:ae:9f:a8:07:e5:
22:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:14:61:39:95:05:BF:E3:87:A2:06:7C:45:5B:5D:4E:CE:91:37:01
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ihRhOZUFv-OHogZ8RVtdTs6RNwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.228.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f0:8b:1f:10:e3:46:ff:fc:23:a0:12:b9:b6:78:01:0a:6f:
bc:de:05:97:94:f8:76:c8:b0:bd:38:18:ac:9f:1f:89:a5:a5:
29:f6:ae:ac:66:8b:a5:6a:f5:04:e2:9d:22:ad:04:6f:5b:fa:
36:c6:af:98:a7:08:a2:ee:86:77:f8:19:35:c2:05:fd:50:72:
9e:e7:ef:a7:8b:ff:c6:f2:47:b9:b1:96:38:2f:51:dd:eb:40:
4a:f3:3d:72:0c:a7:ae:82:6a:f0:b7:7b:80:72:09:c3:fb:d8:
25:80:76:78:38:10:94:91:ce:6c:4a:08:47:1c:68:c0:73:0d:
33:07:cc:5c:32:de:1b:82:7c:49:22:be:53:f2:6d:a2:c4:98:
18:1d:0d:82:58:d1:bf:ba:3c:48:5d:ec:2d:ae:4b:1b:1f:6f:
bd:80:b9:5f:5c:3d:32:91:40:47:c7:09:75:af:8b:f5:d2:9b:
c4:30:1b:1f:0b:38:84:66:a1:eb:27:c5:38:21:7f:78:35:61:
2f:53:e0:7d:d3:1a:4b:54:29:97:50:24:96:47:2c:19:94:77:
cf:c7:7c:0b:1a:1a:68:c4:7f:e0:18:72:70:04:5e:c6:03:6f:
d0:4a:62:e6:8c:a0:d3:63:f4:5b:f0:28:ba:b3:16:c1:eb:6b:
cc:20:f7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:56:58 2024 by rpki-client on console-fra.rpki-client.org