Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/JtiiUujds1naIMaLLlygl3u-bvo.roa
File: JtiiUujds1naIMaLLlygl3u-bvo.roa (raw, json)
Hash identifier: YEy8YkDrEAnsDRfEL6RbjDZmJGe6hA7FrgRdlD2eSjk=
Subject key identifier: 26:D8:A2:52:E8:DD:B3:59:DA:20:C6:8B:2E:5C:A0:97:7B:BE:6E:FA
Certificate issuer: /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial: 018CC94AD71FF4C2AB143EF49639D995AF62
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/JtiiUujds1naIMaLLlygl3u-bvo.roa
Signing time: Tue 02 Jan 2024 08:29:34 +0000
ROA not before: Tue 02 Jan 2024 08:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212635
IP address blocks: 45.159.140.0/22 maxlen: 24
2a10:6e40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:d7:1f:f4:c2:ab:14:3e:f4:96:39:d9:95:af:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Validity
Not Before: Jan 2 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26d8a252e8ddb359da20c68b2e5ca0977bbe6efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:b7:36:41:26:17:d9:f6:0b:12:d4:06:42:
20:fd:af:38:eb:0c:bb:68:b6:1e:2c:79:9a:2a:ad:
50:47:67:07:8f:48:40:6f:13:cb:37:c8:2c:72:7b:
3d:83:53:e9:48:33:c4:df:10:fe:67:38:54:4d:13:
a2:f6:5d:fc:f7:64:72:f5:63:f3:48:93:28:aa:e8:
68:37:4c:3f:46:52:53:bb:7f:a2:c7:c7:8a:61:53:
2f:20:ac:f0:c0:d2:d2:9c:a5:7a:b7:e5:7c:d5:29:
e3:67:49:8b:e0:45:53:31:e6:4a:df:a1:1c:5b:04:
dd:68:aa:cf:2d:34:af:a2:75:5a:c6:8d:d9:71:45:
d1:3f:0c:9b:5c:53:7c:09:38:bd:cb:fb:25:3b:d3:
e4:7d:51:71:d0:d5:08:92:ab:dc:cd:b5:9c:4c:77:
5e:24:d1:55:0e:ee:46:9e:d3:d2:c2:fb:60:3b:4a:
65:34:15:8e:57:79:86:fc:6f:f3:46:9e:b6:83:a5:
46:a3:19:fb:4d:0a:d3:b3:e0:eb:54:f2:8d:6d:a8:
58:e9:de:62:66:6c:70:e6:d8:f8:d9:1b:8d:96:cf:
7b:37:b5:c7:cb:7b:6c:4d:d6:1f:f3:30:b1:f1:26:
d7:04:30:d8:8a:e2:21:0a:4c:03:2d:11:7c:dc:5a:
f5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D8:A2:52:E8:DD:B3:59:DA:20:C6:8B:2E:5C:A0:97:7B:BE:6E:FA
X509v3 Authority Key Identifier:
keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/JtiiUujds1naIMaLLlygl3u-bvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.140.0/22
IPv6:
2a10:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
66:d1:1c:22:b1:6d:02:47:e7:97:13:08:37:05:10:44:8a:07:
e6:2f:bd:fa:32:91:5e:6d:0d:a2:8b:0d:18:2e:12:fa:ee:e2:
6b:44:72:d8:a4:91:0c:0b:0c:83:8a:15:04:91:9f:ee:cc:e3:
92:38:e6:2c:fa:e7:24:df:81:e6:e8:36:f3:f7:c2:de:45:f8:
af:d6:92:76:9d:e7:bb:a5:cb:63:4f:34:2a:34:b0:03:38:65:
b8:50:bb:11:7c:20:82:45:5c:24:f1:4e:e3:f4:55:70:78:5c:
53:6a:a2:f9:bd:24:89:3b:7d:6d:53:0c:9d:43:82:cc:4c:71:
40:60:bf:9f:f8:a0:0e:f7:b2:15:b4:dd:8c:31:56:a9:81:cc:
92:10:15:42:27:4b:49:a6:85:23:b9:d5:2c:b5:df:0d:d8:66:
ac:73:52:b0:63:cd:2f:e0:4f:c5:8b:91:11:74:c6:07:be:2c:
22:1c:cc:03:11:ab:7a:3b:b4:f1:51:2c:36:95:f8:48:25:ff:
c0:6e:ca:50:1a:51:6a:e3:4e:6d:76:7a:de:06:79:4d:9f:73:
ec:01:5b:b1:87:ef:35:cd:94:ce:76:87:d5:f1:42:2a:8c:22:
7c:a3:20:9e:29:20:bd:d1:23:21:73:11:8f:50:43:f9:42:50:
13:e6:60:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:40:36 2024 by rpki-client on console-fra.rpki-client.org