Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/ClDjUWbi2esy2PSgT6kDL1ncJjw.roa
File: ClDjUWbi2esy2PSgT6kDL1ncJjw.roa (raw, json)
Hash identifier: WC+f3Ltvc/wa06FKjC9JzaVW+jYS1GRWTokK+eQCenc=
Subject key identifier: 0A:50:E3:51:66:E2:D9:EB:32:D8:F4:A0:4F:A9:03:2F:59:DC:26:3C
Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial: 018FDDBAA4B6850EA6BFE5AAD822C78DC350
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/ClDjUWbi2esy2PSgT6kDL1ncJjw.roa
Signing time: Mon 03 Jun 2024 10:52:27 +0000
ROA not before: Mon 03 Jun 2024 10:52:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25506
IP address blocks: 45.154.222.0/24 maxlen: 24
45.154.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:dd:ba:a4:b6:85:0e:a6:bf:e5:aa:d8:22:c7:8d:c3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Validity
Not Before: Jun 3 10:52:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a50e35166e2d9eb32d8f4a04fa9032f59dc263c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:b0:04:9f:28:01:28:e8:cb:42:73:85:a3:
c9:f9:72:36:29:e7:93:77:c8:13:bb:5d:52:32:e4:
79:f0:77:9b:8c:6a:50:c8:32:46:0c:15:a3:06:9c:
24:20:18:e4:fc:1b:11:61:0f:80:2e:e5:89:ff:4b:
a5:f0:2f:27:48:32:84:8f:a9:b5:b8:c0:b7:6b:72:
9c:af:eb:c4:27:c2:34:89:56:26:1c:29:f4:0f:92:
5e:22:0c:e9:4b:e5:be:62:87:6e:79:e0:e4:b1:53:
36:94:16:77:db:8e:1b:a7:ff:4c:6e:87:81:2c:59:
65:c4:bd:d1:7e:66:69:75:7b:23:ac:6b:80:a9:5e:
00:fe:ce:53:cf:56:bb:d7:da:19:05:07:e5:2d:48:
1c:b2:20:67:c5:c8:22:0c:11:33:f9:f7:e3:92:8a:
14:8a:c0:72:41:fa:51:6e:c7:23:c4:6a:19:9c:15:
e4:f2:0a:13:26:ea:e0:75:87:ab:5f:59:09:8c:f4:
3a:3c:84:1c:f0:57:d6:0f:e1:21:6e:da:ad:27:e7:
0a:e1:ed:73:6e:c4:b9:61:ce:38:85:87:0b:cf:5a:
d6:c2:12:0f:96:31:e3:3a:46:4a:51:a8:dc:10:07:
0f:96:3c:b1:31:0a:b7:20:c4:1d:a8:69:61:3f:87:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:50:E3:51:66:E2:D9:EB:32:D8:F4:A0:4F:A9:03:2F:59:DC:26:3C
X509v3 Authority Key Identifier:
keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/ClDjUWbi2esy2PSgT6kDL1ncJjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.222.0/23
Signature Algorithm: sha256WithRSAEncryption
64:4c:c8:6f:8d:54:09:ca:5f:0f:f0:68:60:b9:4f:7c:bc:c1:
46:5a:a1:9a:43:3c:34:c7:cc:4d:28:eb:2c:63:2f:b3:5d:fe:
03:3d:36:62:b8:e3:a1:c9:61:95:d4:02:3d:a0:39:08:cd:ef:
76:02:ee:2f:80:5b:ec:40:78:da:3f:fe:14:83:75:a3:78:e7:
55:00:2f:df:63:f6:07:07:4e:40:52:7e:9c:17:3e:af:e0:23:
04:38:31:d0:73:08:92:e9:b1:26:17:93:5e:82:c8:71:49:c3:
36:e8:e6:06:0b:1f:08:e1:eb:ed:0e:4c:89:33:85:44:59:16:
72:32:a5:0b:b9:b2:e7:9c:0f:aa:70:a2:3d:58:e0:9e:13:f9:
02:a4:1d:ae:b6:5a:39:bf:ff:09:58:41:e0:06:cf:3b:7d:5b:
3c:e0:f8:16:9a:e7:12:b5:62:4c:a8:33:0e:61:be:f4:d7:f8:
22:f9:77:da:6d:fb:b7:95:88:65:a8:fe:61:61:53:f0:ed:12:
c2:84:a6:e6:2d:cb:d3:af:ca:27:90:30:9b:9d:84:46:78:f6:
cb:e6:30:ac:1b:75:a9:50:cf:a1:29:ab:3f:3a:db:d3:8b:68:
16:99:03:2e:30:d9:22:20:cf:63:bb:27:2f:f2:18:d8:e7:40:
14:14:d1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 19:58:27 2024 by rpki-client on console-fra.rpki-client.org