Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/rCaJXWTXMHeftsm0uha6bLyatyw.roa
File: rCaJXWTXMHeftsm0uha6bLyatyw.roa (raw, json)
Hash identifier: fBst+utr/pa+HIrl84EdnssR/80byA9TrB3JxM7TKkY=
Subject key identifier: AC:26:89:5D:64:D7:30:77:9F:B6:C9:B4:BA:16:BA:6C:BC:9A:B7:2C
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 018CC50033A968FDD11ACB55489E68252298
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/rCaJXWTXMHeftsm0uha6bLyatyw.roa
Signing time: Mon 01 Jan 2024 12:29:33 +0000
ROA not before: Mon 01 Jan 2024 12:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134835
IP address blocks: 45.83.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:33:a9:68:fd:d1:1a:cb:55:48:9e:68:25:22:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 12:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac26895d64d730779fb6c9b4ba16ba6cbc9ab72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:6b:4d:6e:65:3d:77:7b:78:3f:4d:9d:ec:
5a:0a:95:d6:71:bd:5d:b4:ce:8e:a5:64:cb:e1:3f:
2d:02:ce:a1:bc:12:6b:2d:08:04:85:7c:74:4b:44:
49:0a:a9:d4:53:7f:68:b7:e7:4b:b1:fe:eb:44:b8:
63:3f:b1:68:16:df:b9:d2:1d:95:68:61:96:1e:59:
ad:08:8b:6d:cc:62:1e:d8:28:aa:7e:ff:53:9a:f0:
8b:33:84:c4:c5:ea:a2:08:e3:c0:23:08:9b:95:3d:
9a:1a:74:ee:cb:5c:47:95:dc:b4:05:be:b1:25:7a:
15:90:f1:79:ad:5c:82:1c:58:95:c8:42:8d:46:4d:
4c:05:01:02:86:1c:85:a3:f4:e2:1c:80:0e:a5:5c:
58:1c:d5:80:a4:8a:17:9d:16:b0:ad:97:f9:c6:fd:
c1:b5:e0:40:87:23:bf:6e:0f:e4:13:7e:2d:41:9c:
80:b5:c3:b3:79:54:3a:75:d6:b5:46:d1:9d:4d:14:
91:a2:4e:84:80:f8:a0:0f:0d:45:d7:aa:0e:36:2e:
aa:c3:b0:9f:c7:d7:8a:0a:73:1d:55:6e:53:29:7b:
9e:66:74:4b:5e:82:d7:13:0e:c1:7f:d1:82:14:0c:
0d:ba:66:2b:77:14:2a:1a:86:d6:48:57:0c:cd:7f:
73:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:26:89:5D:64:D7:30:77:9F:B6:C9:B4:BA:16:BA:6C:BC:9A:B7:2C
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/rCaJXWTXMHeftsm0uha6bLyatyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.237.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e5:c1:b3:ef:8b:b8:49:40:35:b0:4c:75:4b:d6:f8:32:17:
aa:bf:33:a0:81:2b:ac:84:29:9a:a2:10:66:ab:d1:93:e4:a9:
f6:8a:db:b4:0f:65:de:7f:f0:c0:4d:24:a3:6c:0b:46:af:69:
d8:ba:e2:57:88:f0:bb:2c:b4:79:00:59:ce:4a:8c:15:a6:b1:
ee:e7:c2:53:9a:85:2f:54:07:8b:14:78:b7:88:b5:0f:b5:4d:
5f:e3:ab:61:bc:d0:92:d1:61:55:05:0f:2f:97:f5:c3:d3:34:
7f:1d:43:0b:09:05:3f:33:d7:21:96:17:c9:dc:9b:47:68:81:
49:52:52:62:e9:3d:19:0d:ff:4a:99:48:43:44:35:dc:27:72:
16:be:a1:9a:c3:62:6e:46:80:00:82:73:a2:c4:b0:f3:95:d8:
3d:3d:5d:c7:0d:22:ed:96:8e:a3:77:69:d7:43:a0:1e:00:47:
0f:f6:fb:bd:17:cc:10:73:f7:9b:6e:05:a5:71:31:9c:cb:31:
69:f2:3f:79:f2:fa:bd:76:81:03:53:b6:8c:16:91:10:62:89:
13:d7:3a:9d:1c:89:55:56:df:76:2b:17:3a:8b:22:8e:4b:0e:
82:d2:83:ae:e0:14:d5:47:23:26:d4:bc:2a:6c:12:26:16:32:
ee:fa:38:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:09:56 2024 by rpki-client on console-fra.rpki-client.org