Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/mZGPbFaLBsHgguDfmAi8_TEEi2s.roa
File: mZGPbFaLBsHgguDfmAi8_TEEi2s.roa (raw, json)
Hash identifier: UljmrIj007cf+lf1x882L5xCfcCqUtJduwq/P7Qzm8o=
Subject key identifier: 99:91:8F:6C:56:8B:06:C1:E0:82:E0:DF:98:08:BC:FD:31:04:8B:6B
Certificate issuer: /CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Certificate serial: 018CC94AC95B6444C127C42132AF280643C9
Authority key identifier: 85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/mZGPbFaLBsHgguDfmAi8_TEEi2s.roa
Signing time: Tue 02 Jan 2024 08:29:30 +0000
ROA not before: Tue 02 Jan 2024 08:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208847
IP address blocks: 45.82.232.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:c9:5b:64:44:c1:27:c4:21:32:af:28:06:43:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Validity
Not Before: Jan 2 08:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99918f6c568b06c1e082e0df9808bcfd31048b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:e6:a8:bc:94:e1:33:48:b8:39:23:89:83:
1b:72:74:7a:5c:4c:1e:34:60:20:03:23:8c:b3:7e:
94:78:f3:21:7a:87:8c:58:c0:76:3d:f5:33:a8:0a:
85:58:06:d2:b6:12:b9:ec:52:10:ae:41:c4:e6:49:
f8:a8:d2:39:e1:02:11:68:14:81:25:04:da:c8:dd:
01:25:15:5a:ad:ae:01:b1:27:36:7b:e5:ff:f9:3c:
55:ab:51:8d:d2:63:5d:0b:e6:e4:17:04:1b:40:22:
55:b1:7b:ce:c4:26:7f:48:b2:56:3d:99:23:b6:c3:
ae:35:7c:5b:1d:ee:59:6c:e5:b8:70:4a:23:5a:91:
81:52:34:76:98:9a:5a:83:fd:12:fb:c2:81:83:8a:
b5:d3:4a:f7:44:61:b9:d5:c8:3f:cb:96:b8:1b:79:
d8:b6:87:79:ae:16:48:85:58:f7:c5:a1:4f:56:61:
e0:7c:3a:fc:22:84:8c:31:47:80:e7:a7:4f:f7:90:
b6:3c:c2:f4:a5:3c:8d:af:a1:0a:96:fb:62:ba:91:
39:8c:1d:9c:44:3c:70:c5:2a:31:6c:40:c8:26:e3:
7d:39:96:8d:3b:41:87:58:d5:bc:4f:3a:d0:94:c3:
e9:a5:05:42:4b:3e:e3:c8:26:2e:3b:88:ab:a6:73:
3b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:91:8F:6C:56:8B:06:C1:E0:82:E0:DF:98:08:BC:FD:31:04:8B:6B
X509v3 Authority Key Identifier:
keyid:85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/mZGPbFaLBsHgguDfmAi8_TEEi2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.232.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:e9:43:da:a1:db:9b:19:22:8e:1b:9c:06:04:f7:6f:8c:6d:
9a:9a:5a:ef:4a:e0:03:1d:7b:83:1b:81:a7:bb:64:9f:8a:64:
0b:8f:e9:d9:34:09:90:77:05:59:32:15:ac:dd:d9:ea:0b:56:
9c:24:f9:8c:bc:61:c7:1f:14:96:74:4c:5c:99:1a:86:04:db:
0e:35:a9:f0:22:ce:81:8f:b4:9a:72:7c:d2:52:f9:5b:72:63:
49:ca:e8:23:1a:41:7f:bc:f3:8d:37:29:a0:99:a6:1c:34:95:
0b:3a:a0:49:c8:a3:0b:37:b6:5c:f6:e8:86:df:c1:5d:a0:97:
f7:2a:33:3d:3a:09:4b:dc:ce:3f:36:e2:72:48:f3:4d:a1:59:
20:40:80:5a:b3:2c:33:e3:f9:ca:9b:c7:7d:31:19:91:8e:1c:
13:67:30:3e:10:92:19:92:f7:e1:dd:45:1d:2e:81:5d:a9:da:
e8:e1:27:59:26:e8:f9:4d:f5:9c:50:8b:b2:70:e1:b4:7a:e9:
67:ce:40:f0:ce:c5:70:e2:3e:bd:92:81:f5:87:59:f9:ac:13:
2f:0f:d7:34:7f:55:82:23:2c:98:3c:94:b1:40:eb:c0:c7:5f:
c1:bd:9f:fc:08:55:93:c1:ff:1e:4a:b2:4b:06:28:e7:2f:73:
3a:d1:9c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:37:25 2024 by rpki-client on console-fra.rpki-client.org