Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/azhiLo128j0cBU8_53v923jlGWw.roa
File: azhiLo128j0cBU8_53v923jlGWw.roa (raw, json)
Hash identifier: zvBdGqckpqcJ0IufS6pDfKsSXBy5EgKCHjf6mkzz86g=
Subject key identifier: 6B:38:62:2E:8D:76:F2:3D:1C:05:4F:3F:E7:7B:FD:DB:78:E5:19:6C
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CD92A2A2A2499D20F68E2708AE4CA15EF
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/azhiLo128j0cBU8_53v923jlGWw.roa
Signing time: Fri 05 Jan 2024 10:27:48 +0000
ROA not before: Fri 05 Jan 2024 10:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 45.12.161.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d9:2a:2a:2a:24:99:d2:0f:68:e2:70:8a:e4:ca:15:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 5 10:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b38622e8d76f23d1c054f3fe77bfddb78e5196c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5e:2f:9e:bc:62:cc:83:4d:a6:db:2d:3e:88:
70:47:a8:e3:88:11:c9:a1:b6:c8:57:3f:75:63:d5:
98:c7:f6:31:13:c3:ca:53:6b:f2:a9:2f:4d:df:b9:
70:05:af:04:f5:4c:fb:33:cb:6a:d5:f5:d2:58:f4:
49:93:e8:66:69:f4:7d:4c:4e:a1:48:68:c6:20:a8:
76:e7:6e:5f:99:cd:e3:7b:a0:3a:b0:f6:f9:81:bb:
56:93:ca:52:d0:86:f4:e0:ea:52:18:cd:03:fa:1a:
05:c5:c9:ca:18:dd:6e:a1:26:0f:11:69:cf:8e:0a:
28:f2:9b:c0:51:fb:e5:56:78:2b:b7:7d:45:27:ab:
c9:a3:2d:22:51:f4:5a:f3:55:e4:03:6d:a2:68:dc:
5e:dd:0f:57:aa:08:36:31:da:a0:6d:6c:85:ec:db:
65:17:59:1d:32:5c:ae:da:5c:0a:ff:cc:ee:75:02:
a8:e6:01:e0:fd:70:65:24:cd:ed:b4:c0:53:23:97:
9c:da:59:42:0f:0a:fc:6f:48:f7:dd:cb:78:fa:ef:
3d:2e:b2:06:a8:d6:fd:89:ba:7e:b4:05:9c:95:50:
f7:97:92:e1:86:30:9c:35:4b:b9:93:40:19:bf:7c:
72:10:12:c6:6c:58:7e:6c:16:77:fc:d2:79:d4:4a:
fb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:38:62:2E:8D:76:F2:3D:1C:05:4F:3F:E7:7B:FD:DB:78:E5:19:6C
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/azhiLo128j0cBU8_53v923jlGWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.161.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:06:82:21:c6:15:d5:a3:2d:09:a3:75:63:04:a8:1b:c3:64:
09:cd:c3:11:b4:b8:29:db:29:b6:40:d1:de:5e:38:45:d8:74:
a2:d6:70:75:51:f5:5c:9c:7f:e2:0e:33:65:c2:32:75:81:30:
03:70:9f:0a:f7:bc:e2:4c:9f:5a:39:15:a7:0b:c8:56:3d:38:
fb:be:2e:68:3b:82:89:6e:aa:75:b8:76:f2:23:5b:96:15:ae:
be:74:b4:cc:c6:74:3a:bf:63:3d:3e:ae:bd:40:44:2a:b2:a3:
4c:30:c1:99:19:44:7c:6c:84:0e:bf:e3:9b:5b:21:59:3f:c1:
23:37:89:11:68:33:0a:cf:29:4a:4c:9c:cb:ec:89:ea:2d:ac:
c5:05:a8:ff:d4:cc:0b:df:d6:a9:13:8d:fb:08:de:61:21:48:
e9:76:62:e4:c5:e4:42:c0:57:1e:64:62:89:a0:1a:3a:5c:f3:
77:cf:78:f3:3b:1c:57:5e:1f:d8:3f:6c:fc:af:4e:89:cd:5a:
fe:f7:7c:e2:12:93:85:b5:2f:5e:29:07:5f:4b:11:82:b1:15:
8c:d0:4a:f6:28:d8:c1:f3:d8:f2:d3:67:94:8a:4b:c5:bc:4e:
d4:cd:18:12:5c:ef:98:76:e6:f8:4c:18:56:c2:80:7e:fc:2f:
3d:d3:e4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:19:15 2024 by rpki-client on console-ams.rpki-client.org