Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Hc_YVklU2zPwGl5bZo3q64axD_U.roa
File: Hc_YVklU2zPwGl5bZo3q64axD_U.roa (raw, json)
Hash identifier: +FGcmFM6BJgT6vxU8W3908zudHf5YTewSNOcLBrz604=
Subject key identifier: 1D:CF:D8:56:49:54:DB:33:F0:1A:5E:5B:66:8D:EA:EB:86:B1:0F:F5
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018E4BCF5F6E166F2EA46924BA8C56FDC12F
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Hc_YVklU2zPwGl5bZo3q64axD_U.roa
Signing time: Sun 17 Mar 2024 09:47:45 +0000
ROA not before: Sun 17 Mar 2024 09:47:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 45.82.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4b:cf:5f:6e:16:6f:2e:a4:69:24:ba:8c:56:fd:c1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Mar 17 09:47:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dcfd8564954db33f01a5e5b668deaeb86b10ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4c:12:bf:2d:ed:eb:4e:4b:a7:25:f6:71:19:
27:c2:8d:ce:e9:eb:44:2f:44:91:10:ec:8c:6c:a1:
3b:6e:a0:fa:6c:06:3e:73:da:a7:a7:05:bf:dc:ac:
98:1f:81:4f:07:6c:a5:ca:ee:c7:84:91:55:c2:c8:
91:20:0b:08:46:0e:51:66:25:cf:16:69:e5:fc:0b:
f4:6e:c5:80:7b:10:de:83:a6:2f:5d:cf:a9:98:cd:
2b:b8:b5:b2:82:82:ae:bf:b1:1d:0e:b9:44:af:6f:
82:71:d6:9f:ac:7e:98:d0:9c:35:85:b4:54:41:7a:
c4:3f:cf:04:cd:c7:a3:a9:e7:12:7f:08:72:dc:a6:
07:61:43:d3:67:9f:0a:01:53:ae:ad:b2:31:43:0d:
c2:8f:70:fe:e8:fe:a9:11:be:79:15:d5:5a:5e:f5:
de:35:63:eb:35:cb:5c:d3:d6:01:7d:ac:17:43:28:
c3:15:83:04:b9:c6:71:0f:9a:dd:f2:69:9a:b3:d4:
fe:3e:2c:2f:9a:29:12:a1:2f:2c:8d:c0:44:a4:10:
8a:c4:85:d9:7e:01:f7:b4:fb:de:fa:dc:11:47:07:
76:c6:5b:30:c9:d7:02:65:83:43:fc:7c:b5:e8:13:
87:16:ba:ff:0b:f9:ba:9b:0b:39:80:0a:38:0e:e6:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CF:D8:56:49:54:DB:33:F0:1A:5E:5B:66:8D:EA:EB:86:B1:0F:F5
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Hc_YVklU2zPwGl5bZo3q64axD_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.13.0/24
Signature Algorithm: sha256WithRSAEncryption
11:03:a3:4c:ea:6f:b4:89:65:72:93:9a:ad:86:56:cd:a1:f6:
b3:07:e9:80:79:de:b5:91:1e:2a:73:c3:04:b5:c2:5c:7b:42:
9e:3f:42:22:2f:9f:80:15:db:19:72:7f:96:65:87:89:bb:26:
ae:a9:38:a9:8f:7a:e5:1e:c7:19:94:5e:93:f4:55:51:ff:23:
7a:5c:1e:65:30:ef:71:e1:29:b4:85:33:f5:53:2f:79:9a:65:
43:38:37:41:2f:8d:e9:12:8e:0a:a9:b6:46:63:1d:e3:bc:76:
c4:5f:60:78:d1:14:5f:a6:c9:00:8b:c7:5d:ab:c1:09:fc:26:
45:74:c4:5f:05:79:ff:34:ac:08:e9:b5:94:d6:98:1e:12:f4:
21:c3:2f:ea:56:9b:2d:d6:84:0c:bd:3c:cd:42:e2:3f:d7:d7:
f9:25:b4:65:b8:a8:f3:6e:ba:d4:41:b6:93:7e:e8:8e:59:cc:
9f:bf:10:ff:a5:e0:29:fb:ec:aa:b9:b7:0a:4c:28:25:46:37:
4b:a5:77:f6:b0:60:69:3f:de:bc:26:0c:75:09:86:ee:67:87:
62:ef:f7:d1:e8:83:05:a8:e7:98:c4:37:bf:bf:ab:49:83:73:
3f:49:2b:5d:af:d9:2f:22:c6:54:a0:0e:e3:b6:65:e1:1f:87:
dc:75:48:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 22:45:06 2024 by rpki-client on console-ams.rpki-client.org