Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/1gxd8nuArTW51glECizj2B2u20A.roa
File: 1gxd8nuArTW51glECizj2B2u20A.roa (raw, json)
Hash identifier: jttAaNvz+uWu9hH3uZjmnG8cQhm8N0YzZPp/n11Wj90=
Subject key identifier: D6:0C:5D:F2:7B:80:AD:35:B9:D6:09:44:0A:2C:E3:D8:1D:AE:DB:40
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 018CC2DB3B73475B3CCBC310D783CDEA2927
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/1gxd8nuArTW51glECizj2B2u20A.roa
Signing time: Mon 01 Jan 2024 02:29:56 +0000
ROA not before: Mon 01 Jan 2024 02:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3249
IP address blocks: 45.139.107.0/24 maxlen: 24
2a13:cec0::/48 maxlen: 48
2a13:cec1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3b:73:47:5b:3c:cb:c3:10:d7:83:cd:ea:29:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Jan 1 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d60c5df27b80ad35b9d609440a2ce3d81daedb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:33:8e:0c:6b:d1:1b:ea:38:2b:3c:3c:83:af:
34:31:52:7d:6e:50:22:c8:74:0b:71:7a:4e:dd:fd:
e9:04:29:a7:ef:90:13:b3:f7:41:70:e5:4a:20:9b:
44:94:c1:17:74:d2:ec:b7:36:71:96:52:63:2d:e8:
6b:82:ed:6f:88:e4:22:95:63:27:5c:3d:e1:d7:63:
f6:c0:88:76:17:2e:b3:1a:f5:35:c7:41:dd:92:89:
64:59:de:b4:8d:92:5b:7d:57:b6:4a:d2:1c:32:f5:
1a:bd:7d:fa:56:0e:b4:5d:5d:d6:da:34:46:55:48:
69:82:ee:ff:43:5e:45:f5:39:58:ea:12:9b:50:ae:
5b:cf:f9:ae:7b:3e:eb:d0:a2:c8:a6:86:39:34:1c:
ad:d1:9c:a2:2f:5f:36:eb:06:a7:b6:6c:35:61:44:
05:d8:7a:b2:59:df:e7:2f:31:dc:37:4e:53:7c:c4:
6a:73:80:14:c3:04:67:c3:3d:0b:c0:ff:c0:20:4a:
2f:b1:3a:9f:77:4b:32:3f:6f:04:db:b9:7b:38:f7:
3f:2b:48:86:ab:be:81:0e:b1:51:01:d2:00:07:51:
31:97:a8:f8:15:e1:bc:91:75:da:82:3a:9e:18:53:
57:32:a4:43:60:04:bf:b4:f6:0f:15:05:c7:1a:12:
0f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0C:5D:F2:7B:80:AD:35:B9:D6:09:44:0A:2C:E3:D8:1D:AE:DB:40
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/1gxd8nuArTW51glECizj2B2u20A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.107.0/24
IPv6:
2a13:cec0::/48
2a13:cec1::/48
Signature Algorithm: sha256WithRSAEncryption
4d:0f:33:39:c5:b5:a0:59:77:07:22:66:50:e5:a5:84:80:3d:
e1:38:73:1c:93:58:75:f5:32:37:17:5e:61:04:60:c4:97:d2:
1b:44:30:24:a7:fe:27:8b:4e:ec:8f:fa:f3:60:0f:ac:55:e6:
89:a6:1b:ee:fc:60:95:38:63:db:9f:c8:99:18:95:a5:cc:4d:
a1:ba:8a:c0:f1:81:5c:ed:09:8b:bb:ba:58:6b:26:df:41:6d:
34:16:0b:10:60:24:11:12:59:35:27:bb:17:a9:3a:41:e5:b6:
ea:ac:c5:87:16:3f:40:d9:30:3e:d3:93:51:67:82:d3:50:4c:
d4:ee:c0:05:40:87:78:01:05:a4:a6:6d:44:9b:1a:dd:d8:e0:
74:d0:17:b9:f7:08:5d:91:f2:a7:1c:5a:fb:fa:f2:2a:d1:f4:
36:02:2d:a2:a8:92:01:ce:b4:dd:3a:75:dc:64:d2:da:2c:98:
e1:dc:62:cd:d3:3c:cc:87:2e:96:60:30:9a:68:36:ba:f8:7a:
bc:f7:5e:ed:17:20:98:e0:d7:09:39:4e:ba:cc:3c:1e:18:af:
f6:99:f3:78:9e:85:1e:93:b8:2d:3a:54:27:67:40:10:3d:a0:
ca:44:5e:dd:4b:98:ec:b2:ac:65:d7:9b:fb:5b:63:aa:36:07:
28:94:dc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:51:15 2024 by rpki-client on console-ams.rpki-client.org