Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/XiDpk0CbAmTYXQSxE8ULZhQLORs.roa
File: XiDpk0CbAmTYXQSxE8ULZhQLORs.roa (raw, json)
Hash identifier: 02Z00Cyfu0jFMrfS9y2om7ORFMWSQGLOwVA9B9eFBBM=
Subject key identifier: 5E:20:E9:93:40:9B:02:64:D8:5D:04:B1:13:C5:0B:66:14:0B:39:1B
Certificate issuer: /CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Certificate serial: 018CC94DDD6C5B08F9DBCC62BF23510CC0C7
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/XiDpk0CbAmTYXQSxE8ULZhQLORs.roa
Signing time: Tue 02 Jan 2024 08:32:52 +0000
ROA not before: Tue 02 Jan 2024 08:32:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208804
IP address blocks: 45.13.152.0/24 maxlen: 24
45.13.153.0/24 maxlen: 24
45.13.154.0/24 maxlen: 24
45.13.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:dd:6c:5b:08:f9:db:cc:62:bf:23:51:0c:c0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Validity
Not Before: Jan 2 08:32:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e20e993409b0264d85d04b113c50b66140b391b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0e:43:1a:83:e0:41:08:de:90:20:0a:9d:f9:
27:7d:40:f8:a3:ef:df:e2:9f:be:5b:37:36:eb:87:
f6:9c:5a:c3:e3:8b:4c:98:0a:b7:10:78:11:c2:4b:
51:6a:6d:42:81:57:a4:46:a8:c6:20:d2:cf:ce:4f:
6a:58:5b:16:b3:8c:a0:02:79:93:62:ad:bc:c9:90:
be:94:da:b0:ca:6b:04:20:ff:38:1d:9e:9a:76:8c:
9b:b5:65:3a:87:30:3c:68:c0:c5:87:44:b1:99:e8:
02:a6:6e:eb:e7:1b:bf:80:96:03:36:8e:83:a0:69:
11:b5:cb:e2:7f:19:38:84:71:f0:7e:5c:f8:b4:66:
45:a5:22:18:05:04:1c:71:1d:82:69:aa:93:22:27:
a7:f8:ad:56:56:50:3e:82:27:10:25:96:1c:8d:85:
f9:c1:fb:8e:73:3c:63:d8:95:10:4f:b3:be:d4:4a:
34:05:1f:4e:93:02:3f:0d:11:22:b4:f6:a7:1d:43:
9f:75:4e:72:34:c4:89:d5:64:a9:85:26:d2:c7:2b:
79:08:92:c1:69:8d:f7:93:c9:c6:d9:73:bf:d6:7b:
cb:7d:e0:9b:af:e9:1d:35:ff:e5:d7:33:73:27:68:
e0:e4:11:c9:5d:f8:d5:cb:68:70:96:29:92:b9:67:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:20:E9:93:40:9B:02:64:D8:5D:04:B1:13:C5:0B:66:14:0B:39:1B
X509v3 Authority Key Identifier:
keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/XiDpk0CbAmTYXQSxE8ULZhQLORs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.152.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:3c:05:9a:9d:97:a1:9b:52:95:e4:f3:7a:22:75:c7:6a:3e:
65:61:fe:1b:41:9d:c7:93:80:3e:ea:69:18:1b:a4:66:82:2d:
d1:b6:be:83:79:66:73:84:9e:92:44:07:7c:8c:70:b3:a1:f0:
8a:05:e2:8c:8e:dc:8a:e9:17:6f:48:84:d4:93:c0:d1:26:45:
e9:39:e9:a9:c3:13:5e:98:04:a3:ba:e8:4a:09:c1:c2:4b:b4:
6a:b5:f9:3c:29:14:9e:9c:c8:e4:68:aa:16:70:25:07:7e:79:
e5:ae:c1:b7:7a:32:31:a3:e1:8f:ca:5d:01:ec:5b:99:92:68:
63:0c:e8:bf:de:aa:6e:8c:3e:90:cd:2a:9c:04:31:9a:63:8a:
b3:2f:3a:fa:a4:22:89:00:2a:55:15:89:94:fd:f3:af:91:a8:
e0:31:7a:9c:fd:3b:2e:a7:11:4d:5f:6c:60:e4:cd:4d:d7:5b:
2b:3f:86:93:c1:d0:52:b3:87:28:ca:ab:ff:cb:11:90:a1:1a:
05:56:eb:5b:c1:e9:24:39:77:fd:20:16:e3:ac:b1:98:f5:d5:
90:cb:67:78:40:c3:d4:63:b4:83:9c:ae:33:e2:e9:65:71:9d:
c6:6a:ca:56:65:3b:51:39:d6:f8:b2:4e:c7:96:24:65:57:7c:
a3:3e:0e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 10:20:13 2024 by rpki-client on console-ams.rpki-client.org