Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XzINvzhpwoCuZjsc4gXLvrbdCXU.roa
File: XzINvzhpwoCuZjsc4gXLvrbdCXU.roa (raw, json)
Hash identifier: nC1iyVAJA4JmxZnXEbs9meeBXPB9V9LgCRCDsG4KqJE=
Subject key identifier: 5F:32:0D:BF:38:69:C2:80:AE:66:3B:1C:E2:05:CB:BE:B6:DD:09:75
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E3BC6279129EF6DB91329C18AF1326984
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XzINvzhpwoCuZjsc4gXLvrbdCXU.roa
Signing time: Thu 14 Mar 2024 07:03:45 +0000
ROA not before: Thu 14 Mar 2024 07:03:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197450
IP address blocks: 45.128.233.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
185.221.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3b:c6:27:91:29:ef:6d:b9:13:29:c1:8a:f1:32:69:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 14 07:03:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f320dbf3869c280ae663b1ce205cbbeb6dd0975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f1:5f:f0:11:ce:4b:3f:88:45:43:f5:ad:21:
18:df:68:1a:d3:79:f0:13:4c:82:83:c0:75:8a:cd:
e4:5d:1a:27:49:52:ec:f6:d8:5a:a4:1e:7e:28:dc:
74:5e:55:18:22:6b:49:a2:99:de:4e:e0:74:09:56:
e0:42:81:21:6d:03:1c:57:0d:56:a4:53:b7:41:de:
a6:80:86:47:40:fc:e0:54:32:ee:69:87:7f:66:c6:
d3:40:f8:c6:34:dc:a3:52:88:32:24:f8:c2:57:9f:
b2:26:59:5c:f8:80:4a:a5:c0:8a:1a:71:82:78:66:
ba:a3:cb:15:00:9f:d9:1e:cb:03:68:a4:70:6f:ce:
a1:23:b5:a3:1b:86:11:5d:8d:0e:b6:59:58:fe:eb:
0b:8f:7b:6c:e0:81:e1:d5:9d:7e:5f:a2:97:f7:84:
d2:c4:d0:25:7e:e1:74:d3:35:1d:7c:66:3b:be:83:
e4:9a:54:62:21:70:37:c1:76:87:7e:a9:31:7c:6e:
45:f4:32:ac:7a:ce:b1:50:39:71:75:dd:59:e8:48:
47:b0:0e:b4:32:6f:a4:b8:ee:a0:f3:5f:87:ac:42:
9c:f7:82:ec:bd:78:0e:06:f4:c3:7a:96:ac:08:3d:
bd:18:28:49:4f:d9:b6:fc:59:cb:c1:68:18:84:ea:
a2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:32:0D:BF:38:69:C2:80:AE:66:3B:1C:E2:05:CB:BE:B6:DD:09:75
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XzINvzhpwoCuZjsc4gXLvrbdCXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.233.0/24
45.144.152.0/24
178.215.239.0/24
185.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
62:7a:d4:4c:85:54:4d:e7:a7:4e:2c:1f:a4:5c:e0:0f:79:69:
5b:ad:53:04:03:9c:b4:53:a7:77:de:a6:b5:07:f5:65:97:38:
1f:7b:b3:93:d8:df:10:51:30:c0:cd:9c:3c:cc:e4:53:61:6b:
9b:f2:03:d1:fd:52:67:44:fb:6e:b3:4a:e9:ed:82:87:c9:d4:
ee:a8:51:c5:76:31:0d:d3:77:2b:2c:eb:49:ba:88:40:36:97:
94:83:c4:f1:d8:19:a5:99:30:5d:07:87:51:db:ec:b6:2f:ff:
7e:a5:a2:03:06:66:9e:6d:c7:f3:08:d8:16:b1:53:5f:59:ed:
a6:fb:c1:12:7b:e3:d8:0e:e0:a5:4a:d2:70:37:20:9b:fb:76:
7f:3a:1c:a2:84:fb:08:e0:94:f9:30:47:47:b7:6d:0d:14:b4:
a6:f5:fa:f8:5f:4b:4e:9c:a2:a2:f7:60:a0:74:24:43:2f:fa:
53:50:d0:d3:d5:99:2e:4b:3e:4d:45:88:61:94:07:13:f0:8b:
d3:41:ff:da:39:3f:75:0e:b6:71:33:66:8d:a7:a9:54:11:6e:
dc:66:df:18:0b:2b:9c:70:02:df:bd:0f:99:50:03:01:65:b6:
b2:36:3f:df:a6:e6:9c:41:99:f0:e4:f1:8d:78:58:bc:ae:a8:
52:de:b7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:45 2024 by rpki-client on console-ams.rpki-client.org