Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/BmX_w1M0UPeMSaB1vIEWT8cQHkA.roa
File: BmX_w1M0UPeMSaB1vIEWT8cQHkA.roa (raw, json)
Hash identifier: wUyKNlsIT06J8LEMhjq+42xfXnALjsG38lZmoKMrwME=
Subject key identifier: 06:65:FF:C3:53:34:50:F7:8C:49:A0:75:BC:81:16:4F:C7:10:1E:40
Certificate issuer: /CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
Certificate serial: 018CC8DE96A2EB6D9B066E238714AFC94973
Authority key identifier: E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/BmX_w1M0UPeMSaB1vIEWT8cQHkA.roa
Signing time: Tue 02 Jan 2024 06:31:19 +0000
ROA not before: Tue 02 Jan 2024 06:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35131
IP address blocks: 45.145.24.0/24 maxlen: 24
45.145.24.0/23 maxlen: 23
45.145.24.0/22 maxlen: 22
45.145.25.0/24 maxlen: 24
45.145.26.0/23 maxlen: 23
45.145.26.0/24 maxlen: 24
45.145.27.0/24 maxlen: 24
2a00:e280::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:96:a2:eb:6d:9b:06:6e:23:87:14:af:c9:49:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
Validity
Not Before: Jan 2 06:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0665ffc3533450f78c49a075bc81164fc7101e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:f6:3d:a3:35:0c:e4:b7:45:ec:27:41:07:
f5:f1:0b:e6:05:55:22:7f:30:7d:e9:e2:d5:0d:aa:
ff:30:77:08:e6:98:f0:d1:7c:74:b2:c8:d4:18:32:
0e:41:2c:80:cb:2d:d8:b5:c8:42:96:11:fc:df:ac:
21:65:b3:cc:16:d5:08:20:ec:a4:b1:7a:1b:42:fa:
4f:63:80:38:72:21:83:12:7b:24:be:ad:26:91:3c:
a2:52:8e:c0:ef:af:2f:f1:6f:4d:9a:fd:20:18:21:
7c:67:b2:eb:eb:ea:30:c6:64:e6:19:74:11:33:be:
0a:a7:8b:17:fa:21:12:d0:75:45:29:54:9d:64:96:
26:0f:fe:d1:c4:b7:95:88:11:36:15:45:6a:62:0e:
0e:1d:c9:a1:f6:7d:d0:99:0d:40:a9:e4:7a:74:d4:
d0:33:bd:af:ab:66:1f:1e:02:ee:f0:25:c2:0d:a3:
7e:63:84:1f:20:b0:22:88:4b:f5:b6:00:6f:fe:d8:
3a:93:68:26:9a:92:e4:eb:3f:16:53:90:5f:fb:a6:
aa:78:bd:f5:4f:b4:71:a5:ee:1b:69:4a:4c:61:7f:
90:6e:66:1d:93:27:fd:2d:1d:78:b1:81:fc:73:85:
c6:19:bd:63:3b:f6:35:8d:b3:bf:d8:f5:6e:a3:39:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:65:FF:C3:53:34:50:F7:8C:49:A0:75:BC:81:16:4F:C7:10:1E:40
X509v3 Authority Key Identifier:
keyid:E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/BmX_w1M0UPeMSaB1vIEWT8cQHkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.24.0/22
IPv6:
2a00:e280::/32
Signature Algorithm: sha256WithRSAEncryption
25:42:0a:ec:ff:e8:9b:18:b0:45:5b:31:83:ce:16:04:af:29:
0c:67:0e:a0:3c:2d:83:d5:81:d8:ff:be:6a:d3:74:17:55:28:
f7:81:a7:3b:e9:79:da:34:4e:ad:15:64:a5:74:c0:1d:4f:40:
0a:f2:08:05:22:78:fd:c9:00:95:49:5a:85:1f:df:d6:b8:5e:
af:1b:bf:89:4b:c2:01:48:d3:c9:77:9f:23:0b:6b:e6:1c:94:
e4:98:b8:72:55:52:78:69:57:ee:e6:46:c3:4e:60:6d:7b:61:
33:21:81:f4:a7:fd:8a:6d:a4:05:87:2b:3f:8f:d0:89:6b:2e:
0f:c1:7e:ff:d3:3a:f6:6b:9e:7d:c2:84:52:f7:55:e2:1c:32:
17:5f:f7:2a:b7:5f:9f:82:d7:49:a1:e7:eb:a6:59:6c:34:d0:
58:2c:2a:dc:5d:43:d6:ba:0a:a3:68:e8:f1:1f:9e:d6:cb:6b:
22:c8:a4:97:5d:bf:5e:22:42:64:64:fd:c2:4e:56:7a:b2:5a:
0f:a5:b4:e7:e6:a4:f2:88:83:11:c0:89:e4:e0:23:26:61:36:
48:ef:83:ce:6c:a4:9e:0d:8b:da:c1:b6:f5:c4:b1:99:b1:a1:
ab:89:99:74:21:4a:56:7a:58:e3:16:f5:98:e6:5c:58:1a:3d:
76:51:59:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:07:37 2024 by rpki-client on console-fra.rpki-client.org