Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/6Ky4RV5w2tCqS7mL3IK_hSRftmI.roa
File: 6Ky4RV5w2tCqS7mL3IK_hSRftmI.roa (raw, json)
Hash identifier: lBvBMkToSd/ygg8NEqn5bbszaHNkHJ2Go73mY004q9I=
Subject key identifier: E8:AC:B8:45:5E:70:DA:D0:AA:4B:B9:8B:DC:82:BF:85:24:5F:B6:62
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 018F62EEA04E4DF8F4070A4129AB8378EC82
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/6Ky4RV5w2tCqS7mL3IK_hSRftmI.roa
Signing time: Fri 10 May 2024 14:35:56 +0000
ROA not before: Fri 10 May 2024 14:35:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 45.132.113.0/24 maxlen: 24
45.141.48.0/24 maxlen: 24
45.141.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:ee:a0:4e:4d:f8:f4:07:0a:41:29:ab:83:78:ec:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: May 10 14:35:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8acb8455e70dad0aa4bb98bdc82bf85245fb662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:8f:dc:7d:7b:1a:56:d9:e4:85:92:8f:77:
4a:66:aa:87:48:02:7b:b8:10:d9:cf:73:56:44:c8:
39:8f:39:bb:03:f6:80:24:09:4c:40:e6:4a:12:e9:
88:a1:0c:4b:61:d1:51:6a:a8:32:bd:d6:a9:38:1c:
1d:c8:a3:a8:f3:d1:d6:8f:cb:50:d8:25:52:3c:19:
5e:64:b9:f4:5d:d5:75:4d:3a:da:b9:c4:d6:b6:69:
e6:39:b0:63:16:da:7e:27:3d:35:11:47:c3:66:d6:
31:ec:4c:49:c4:e7:34:31:11:39:b0:a6:ed:dd:a3:
9d:87:12:c1:49:ba:86:f2:b2:a5:b8:18:04:1a:d7:
33:75:6a:ff:73:49:db:d3:af:43:e4:20:3b:0b:ad:
c4:1b:a8:c4:d7:19:9b:f6:08:eb:31:a1:32:d7:20:
86:1c:75:40:9a:5a:7f:72:20:2f:de:bd:0c:9f:65:
4a:85:f5:9b:e5:a7:82:bc:c6:e8:68:f3:95:72:a7:
a5:7d:5a:58:97:32:d3:1c:c3:f0:ab:29:21:cb:82:
27:f5:aa:db:56:f8:18:72:eb:f3:ec:43:59:3f:c9:
01:29:e1:7c:be:ec:4b:a2:60:ea:9b:48:16:55:e9:
6e:87:58:d0:11:59:8f:e5:7e:5d:90:16:69:d0:79:
8a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AC:B8:45:5E:70:DA:D0:AA:4B:B9:8B:DC:82:BF:85:24:5F:B6:62
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/6Ky4RV5w2tCqS7mL3IK_hSRftmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.113.0/24
45.141.48.0/24
45.141.50.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:5b:4f:ae:1c:27:77:77:7f:91:84:6a:03:b5:90:7e:8a:e9:
51:86:98:05:8f:f5:6d:57:fc:5d:f2:a9:5d:79:9b:de:bf:d9:
f8:d3:b2:16:8b:19:b8:73:03:0f:37:c8:82:3b:bd:e8:c6:2c:
11:01:23:54:f7:55:a8:4b:c6:10:39:c4:c3:23:9d:7b:f0:84:
e4:08:e9:0d:5f:fa:fd:fe:13:35:05:9a:8c:b3:e1:40:2d:6f:
8a:c0:80:39:96:88:db:6d:93:3e:56:0e:58:46:81:d4:50:94:
f8:ae:ae:50:69:fb:a5:0b:f6:3b:15:da:dd:a1:a7:da:e1:12:
5b:83:a2:93:3a:42:30:1f:92:ba:36:5f:45:3d:db:a7:f5:11:
d1:00:32:46:ce:dc:c4:3c:fb:68:91:d1:01:ef:48:14:8a:1e:
c3:de:b6:e0:ac:57:11:75:3d:c2:ce:29:76:a5:2f:67:28:eb:
01:d9:4c:f3:0b:29:b7:6d:40:76:f2:6a:59:1c:b6:47:ef:11:
ca:4d:56:d4:a5:58:c6:8f:25:00:35:b2:39:9b:ef:6a:fc:e3:
d7:51:b3:9c:6b:7c:fd:f2:65:e1:2a:6c:f9:db:a7:38:ea:f4:
e1:93:76:71:3f:de:e5:30:e9:f6:dc:03:77:59:c5:03:58:3e:
21:7d:a1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:03:17 2024 by rpki-client on console-ams.rpki-client.org