Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/aWJmy7eZjXNpTNBBnBsJ5G4u3J0.roa
File: aWJmy7eZjXNpTNBBnBsJ5G4u3J0.roa (raw, json)
Hash identifier: M2UyYCggo0cqyhaYYy/RxzVF6vrePM7qFBUzSFaQkZk=
Subject key identifier: 69:62:66:CB:B7:99:8D:73:69:4C:D0:41:9C:1B:09:E4:6E:2E:DC:9D
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DF98156331B6E5692426863A9A4CBA
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/aWJmy7eZjXNpTNBBnBsJ5G4u3J0.roa
Signing time: Tue 02 Jan 2024 06:32:25 +0000
ROA not before: Tue 02 Jan 2024 06:32:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47895
IP address blocks: 45.132.252.0/24 maxlen: 24
45.132.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:98:15:63:31:b6:e5:69:24:26:86:3a:9a:4c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=696266cbb7998d73694cd0419c1b09e46e2edc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:17:01:b4:23:c2:10:f3:43:81:b7:a9:7d:
e6:99:00:1a:e6:56:f1:86:7f:bd:7f:72:dd:4b:d5:
43:ba:38:8f:1d:8e:34:73:de:fb:5d:89:f8:af:75:
33:b4:ad:ba:c4:58:3b:6b:07:fd:92:60:7d:4e:97:
f6:67:fb:65:07:37:18:fb:22:86:4d:d4:b1:98:32:
65:08:12:98:8b:a6:db:aa:f4:cf:84:61:dd:35:e5:
6b:22:42:ce:ac:96:dd:6c:55:aa:61:9f:c9:f5:e1:
ab:71:63:ab:04:a8:1f:91:ed:9e:67:94:09:e4:65:
fc:7e:b3:70:fe:55:ee:e5:33:e8:6c:25:c6:a2:6d:
23:1a:87:f1:84:cc:aa:26:48:9b:6f:b3:84:e7:58:
56:c1:67:23:4a:fc:e7:8b:f9:f0:f4:1d:b9:14:ac:
32:df:64:9c:02:c7:3c:f0:68:03:a3:2d:67:77:0a:
84:06:0e:b5:b8:28:c7:d7:0b:2d:9c:fe:f0:14:c0:
80:3a:11:75:29:c3:0a:a2:5c:fe:36:9d:fa:3b:57:
12:86:bc:e6:47:66:46:04:b2:7c:1a:0a:46:ab:dd:
3c:6e:91:1d:8b:a4:b9:b7:2a:4a:28:91:f3:57:11:
50:a4:47:e9:13:63:84:db:27:50:0e:62:25:85:41:
d8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:62:66:CB:B7:99:8D:73:69:4C:D0:41:9C:1B:09:E4:6E:2E:DC:9D
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/aWJmy7eZjXNpTNBBnBsJ5G4u3J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:4d:1a:e4:5b:ac:2a:fd:7e:6f:df:1d:e5:0d:c1:c9:e1:8d:
09:b2:94:6a:c0:77:6c:18:c0:88:5d:2d:0f:95:4e:f0:ee:c5:
e1:d2:f2:8d:d1:57:92:d4:5a:31:85:01:d4:53:a1:da:83:05:
4d:cc:1e:c3:09:33:d3:fa:30:79:30:6f:84:c3:a8:53:d6:b6:
2b:df:47:b5:89:cd:26:79:88:e6:3b:6e:8f:c0:d9:4e:61:7b:
d3:77:98:8a:3e:7f:14:02:f1:5d:59:d9:00:34:4d:0a:5c:3a:
34:25:8f:58:26:d6:74:6b:3c:52:e6:47:7d:9c:90:df:c7:9c:
f7:16:22:6b:10:29:6b:ab:e2:36:82:1b:19:38:a1:06:52:fa:
c0:76:69:91:e6:75:b1:bd:f0:2c:1a:e9:57:b1:e0:25:24:d5:
c3:20:a5:e2:e9:c0:d4:f4:92:bd:49:b4:27:59:18:85:50:0f:
b4:b9:29:59:2e:fb:71:5a:ec:06:78:bd:02:42:2a:b1:6c:88:
32:6a:8e:80:6f:36:ed:d1:42:1c:80:36:31:6a:71:67:4b:90:
60:16:90:84:07:99:db:66:04:31:1d:3c:73:b5:c4:a6:a6:e1:
17:09:72:e1:2e:4b:91:2a:a3:b8:b3:14:7b:19:ee:e0:d8:8e:
d9:78:7f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 16:54:28 2024 by rpki-client on console-fra.rpki-client.org