Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/H-tBCyC3CHJUsbUVCW9tNzckfP4.roa
File: H-tBCyC3CHJUsbUVCW9tNzckfP4.roa (raw, json)
Hash identifier: lqc/mbdRWvwDFfgBMie+tZHye/XOIp1PP/YHLYywzXk=
Subject key identifier: 1F:EB:41:0B:20:B7:08:72:54:B1:B5:15:09:6F:6D:37:37:24:7C:FE
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 018CCA294F40935B1A7995E6E540D988C80C
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/H-tBCyC3CHJUsbUVCW9tNzckfP4.roa
Signing time: Tue 02 Jan 2024 12:32:33 +0000
ROA not before: Tue 02 Jan 2024 12:32:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399641
IP address blocks: 45.132.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:4f:40:93:5b:1a:79:95:e6:e5:40:d9:88:c8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 2 12:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1feb410b20b7087254b1b515096f6d3737247cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:71:2b:5f:51:a4:ae:13:90:92:cf:fa:a0:
b2:c7:7b:c4:2a:3e:f5:7f:c0:65:79:13:9e:53:8b:
f5:15:01:e3:61:3f:20:7f:84:98:04:80:02:25:2a:
56:c6:a9:44:ea:7d:51:f1:08:38:49:49:86:f4:f4:
14:57:be:81:37:46:a9:de:dc:1a:2c:20:d8:da:48:
ca:66:5d:90:4e:29:3f:56:24:52:e9:86:84:00:79:
f8:2c:61:b7:ca:a9:b6:9b:c2:3f:2f:ed:55:e4:ca:
7a:e1:2e:25:09:38:be:5b:8b:95:81:8b:8e:ef:e4:
90:bf:fa:b9:51:38:42:c7:23:fb:52:23:31:59:9e:
e4:e5:95:3b:4c:82:bb:c2:6a:aa:07:ed:6d:26:6f:
a2:e3:a7:7e:a8:80:72:61:c4:5a:5c:81:8e:32:e9:
03:db:f3:cb:06:35:6f:e6:87:7f:45:a9:f9:f4:fa:
21:71:f4:b2:41:d7:86:13:8d:7b:00:cc:7f:9d:d1:
94:0a:ba:fe:3f:8b:e2:cd:8c:2a:10:01:c2:9d:08:
27:1b:13:69:04:8a:28:7f:6c:7b:3d:e4:56:af:45:
07:83:2e:1f:44:6f:11:e6:10:21:c2:8f:79:f7:64:
d8:f0:92:f1:ba:65:72:23:cb:5c:db:2a:66:24:da:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EB:41:0B:20:B7:08:72:54:B1:B5:15:09:6F:6D:37:37:24:7C:FE
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/H-tBCyC3CHJUsbUVCW9tNzckfP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.26.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:33:cd:f6:1c:76:56:6b:00:2f:c5:a5:62:7b:ae:4e:4e:b4:
07:cd:e3:9b:aa:00:1c:a5:ef:aa:5f:33:5d:7b:df:b3:49:03:
b4:cd:55:22:b5:99:c8:e2:2b:fb:fa:72:de:30:c4:a6:6b:3c:
7b:6d:19:30:68:b7:34:e5:11:5f:f1:68:63:df:2c:0f:a5:da:
72:66:5a:25:5e:e0:2b:a5:6e:01:7f:26:b8:f4:84:a0:00:2f:
51:20:1c:30:c8:dc:c4:aa:16:ff:14:a0:f3:69:f7:2a:54:40:
04:61:ad:b6:7d:71:bc:2f:46:b1:65:6a:fd:91:81:38:4f:0f:
3d:07:7f:c1:99:ea:3b:18:10:5d:1b:02:b7:38:db:59:fd:f4:
f3:27:fb:93:56:c8:63:61:83:cf:08:c6:b2:81:6c:4b:98:25:
e6:0c:00:ab:eb:b2:70:05:88:93:ae:eb:8b:30:f0:ea:0c:e7:
43:6b:73:2c:e7:29:ef:d5:a3:c5:b0:43:5f:77:90:72:8f:bd:
b3:81:c9:77:00:d3:10:d2:51:c3:21:0e:72:08:07:5d:f0:32:
56:ad:8e:b5:52:f3:09:c2:1a:8b:46:bd:c2:47:dd:d8:6c:e1:
7f:80:3c:e6:9a:db:00:9a:7e:f6:12:53:6e:7a:0f:49:17:13:
0b:3a:b7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 16:07:07 2024 by rpki-client on console-ams.rpki-client.org