Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/rDQAIL2I66VyyKAsV_XGkUpmyY0.roa
File: rDQAIL2I66VyyKAsV_XGkUpmyY0.roa (raw, json)
Hash identifier: vAfoOn31LmsqMHN9AUqFBwdv1mG9CFwKLxlyrjkFFqk=
Subject key identifier: AC:34:00:20:BD:88:EB:A5:72:C8:A0:2C:57:F5:C6:91:4A:66:C9:8D
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 018CC64AAECF45B37E7F1BD84AF834985306
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/rDQAIL2I66VyyKAsV_XGkUpmyY0.roa
Signing time: Mon 01 Jan 2024 18:30:32 +0000
ROA not before: Mon 01 Jan 2024 18:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 45.66.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ae:cf:45:b3:7e:7f:1b:d8:4a:f8:34:98:53:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Jan 1 18:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac340020bd88eba572c8a02c57f5c6914a66c98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:51:89:d2:05:ce:b6:70:51:b8:04:c5:9a:4f:
e4:b7:e5:a8:e3:22:8a:3e:53:b8:01:d9:55:11:a4:
3d:dc:b8:6d:26:10:9c:d3:2d:fc:36:68:af:5e:7f:
aa:36:53:14:a3:62:70:b7:59:27:db:7d:ae:82:16:
89:26:c9:b6:72:ec:21:c3:13:41:76:fb:fd:09:4d:
9f:17:33:60:ee:ee:bf:ab:c4:f1:56:2a:2a:d6:6d:
21:f6:c4:22:fd:3f:30:6f:8e:81:b2:7a:a9:a7:a4:
18:4b:e7:3c:e7:d7:ac:ec:10:93:8c:2c:af:c3:85:
04:12:89:39:91:f5:36:d0:1e:9d:ec:7a:b6:da:f2:
e8:ba:f8:b7:d9:11:94:6c:d8:e7:47:dc:15:c2:75:
00:6f:56:33:5b:9b:4e:3a:0c:72:1f:a8:e6:b0:36:
ea:3d:3e:58:6d:2a:4b:d0:ce:94:9f:5c:24:95:4e:
aa:12:49:5f:30:7a:33:50:be:22:17:c6:43:c4:31:
48:72:1d:d2:96:ef:9e:9b:d9:d6:1f:11:d3:91:e3:
23:b5:87:76:2d:b4:1b:30:09:61:c4:75:2f:76:6c:
a3:28:bd:f5:aa:14:8c:6a:21:31:ab:ff:97:50:66:
5b:ee:55:a7:70:57:19:9e:fb:6b:04:e3:bd:56:61:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:34:00:20:BD:88:EB:A5:72:C8:A0:2C:57:F5:C6:91:4A:66:C9:8D
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/rDQAIL2I66VyyKAsV_XGkUpmyY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.132.0/24
Signature Algorithm: sha256WithRSAEncryption
26:68:50:67:a1:00:36:5d:4f:0a:58:29:b6:2d:c9:83:f3:2a:
91:f2:c3:ad:28:d4:8a:43:9f:24:69:af:52:86:ab:a3:d7:c9:
1f:ea:c8:84:5a:a2:fa:23:35:81:8b:ce:da:57:bf:db:b0:5c:
84:e4:07:e6:c6:47:ae:00:6b:8e:4a:d0:6d:16:86:08:48:7a:
04:f0:69:5b:a4:8c:29:8a:82:3f:90:16:57:d1:ce:4c:3d:43:
38:a6:bd:a3:12:3e:a7:a7:aa:00:87:04:80:d2:ce:90:c3:9a:
4c:0c:0e:93:eb:c2:71:33:1a:86:94:e7:df:28:60:bb:99:be:
55:7b:4a:6e:9a:d6:fa:c3:48:27:93:1f:b6:d5:ef:9c:18:12:
cd:64:a7:02:c6:bf:f5:ac:12:49:b4:59:70:71:89:f3:67:9d:
f5:be:d0:d6:e1:0d:03:d3:70:84:60:30:19:de:07:70:e2:b0:
49:85:ee:98:0f:3d:88:8d:7c:ff:25:3b:65:fe:61:17:36:ee:
9c:45:17:51:8a:f8:a5:b3:0b:90:aa:f6:58:ae:37:69:e0:ad:
c2:8a:4a:ee:bc:e4:37:c4:84:9d:6f:f8:c0:5b:c9:33:79:f9:
74:90:c1:97:6f:16:8b:6c:c4:a9:be:0c:e7:f8:0e:28:f7:ba:
31:27:9b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:45:39 2024 by rpki-client on console-ams.rpki-client.org