Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/2Oh2_zlfw2iB-f8x7qE99872F5I.roa
File: 2Oh2_zlfw2iB-f8x7qE99872F5I.roa (raw, json)
Hash identifier: U48wprAdUwSPcNgNi31ulJG/q256TnZ+HFwh8Jyqrn4=
Subject key identifier: D8:E8:76:FF:39:5F:C3:68:81:F9:FF:31:EE:A1:3D:F7:CE:F6:17:92
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DF9322EF7EFBAD4A4E0924944CA555
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/2Oh2_zlfw2iB-f8x7qE99872F5I.roa
Signing time: Tue 02 Jan 2024 06:32:24 +0000
ROA not before: Tue 02 Jan 2024 06:32:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7979
IP address blocks: 45.95.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:93:22:ef:7e:fb:ad:4a:4e:09:24:94:4c:a5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8e876ff395fc36881f9ff31eea13df7cef61792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:e0:8f:16:c6:18:fb:77:a0:33:7f:e3:19:
e1:23:99:d8:68:01:22:d6:0b:df:c1:b0:d4:ec:bb:
8e:da:90:24:0e:8e:d2:88:5e:c6:31:09:c7:83:9a:
5d:94:0f:a9:98:c2:78:f1:d4:7c:d1:36:ac:3d:aa:
4a:b9:dc:2f:7d:80:e4:1f:1a:85:82:df:13:ff:6a:
c0:41:67:ab:e3:61:bb:14:a7:c9:23:58:5d:e6:ad:
dc:99:6e:f5:70:90:31:4c:9f:99:ee:9f:6d:c0:e5:
46:49:9e:19:71:b2:8a:17:75:51:55:3b:38:2b:09:
43:80:7d:74:4d:40:2f:3f:26:c3:89:e1:99:aa:20:
16:43:5f:61:8c:c4:0d:b8:cc:a1:e3:9f:6f:a0:a6:
93:c8:51:94:25:f6:12:6b:4d:73:34:9e:ef:40:55:
0d:ab:90:8d:0f:af:5e:48:9d:89:c6:3d:32:d7:03:
2b:62:36:52:55:fd:06:46:01:bc:19:e0:54:0d:58:
6b:ed:82:5e:aa:fb:bb:b6:4d:82:d3:73:4b:cf:0a:
62:08:4e:68:ad:5c:9c:7d:a4:65:1f:fa:70:a2:79:
e0:c9:5c:b5:0c:80:1f:d4:c9:2a:72:40:41:01:36:
70:29:b0:52:de:07:78:63:41:1a:62:e9:60:18:2a:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E8:76:FF:39:5F:C3:68:81:F9:FF:31:EE:A1:3D:F7:CE:F6:17:92
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/2Oh2_zlfw2iB-f8x7qE99872F5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.200.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:b8:af:34:72:0f:f3:88:99:7f:bd:fd:63:e3:a6:f0:e9:c2:
59:3f:f3:78:60:31:e2:58:8e:36:4b:ef:a1:35:25:5b:fa:22:
2e:f1:ab:3a:01:1f:9f:1f:9c:93:d8:f0:08:10:39:b9:a3:1f:
b3:72:63:e3:a7:20:c1:62:3f:b0:a5:ea:cd:f8:b4:67:b7:1c:
a5:ec:e9:29:3e:5d:15:d8:b0:bf:76:47:5a:a2:54:d7:42:83:
81:17:62:4c:e3:1d:61:6a:75:36:29:9c:89:7e:e5:81:68:c2:
62:b9:a1:16:21:5a:d5:da:18:d0:66:76:8f:cd:03:0d:6a:3a:
04:15:c7:a6:98:54:90:d2:cc:c3:ce:c8:b2:5e:ec:d7:c7:22:
67:e2:7a:00:c3:e3:83:dd:17:5f:72:e2:b0:ae:e7:67:a5:df:
89:30:3f:23:3c:0e:c0:85:2e:a7:0a:b6:f8:e8:35:01:b9:5c:
ca:8a:03:01:29:ad:e6:67:e7:e8:71:c6:ba:1f:bb:0f:4c:01:
67:c2:06:19:ed:14:8d:5e:37:17:c0:d7:28:52:d9:dc:e3:37:
5a:47:99:b7:5b:57:5a:3a:4d:21:25:30:dd:2f:ef:18:21:a6:
f0:9f:e4:3a:8e:70:ca:95:05:86:fc:82:12:e1:1d:78:03:8f:
df:bb:1f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:41:09 2024 by rpki-client on console-fra.rpki-client.org