Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/Epf6wARWQ9ZLvYJ1ZELE3KraEwI.roa
File: Epf6wARWQ9ZLvYJ1ZELE3KraEwI.roa (raw, json)
Hash identifier: b9HpcfCWpDPkPycAk/wdOcXKXR6Tzczg+Nafv7LlJpY=
Subject key identifier: 12:97:FA:C0:04:56:43:D6:4B:BD:82:75:64:42:C4:DC:AA:DA:13:02
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 018CC72738009A0E9FB1CE607A3A8A1ED1C2
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/Epf6wARWQ9ZLvYJ1ZELE3KraEwI.roa
Signing time: Mon 01 Jan 2024 22:31:25 +0000
ROA not before: Mon 01 Jan 2024 22:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203061
IP address blocks: 45.11.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:38:00:9a:0e:9f:b1:ce:60:7a:3a:8a:1e:d1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Jan 1 22:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1297fac0045643d64bbd82756442c4dcaada1302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:b6:d4:75:ca:99:2a:b2:8d:38:77:1e:5a:
39:ed:23:33:59:9f:97:71:5f:89:d1:85:0b:fb:4e:
07:6d:6a:b0:81:de:b5:2c:fb:d3:ca:cd:99:08:8e:
0b:15:01:63:ac:91:fc:29:f8:00:17:42:2d:e4:51:
2c:c1:2d:90:a7:21:54:a6:09:93:1a:bf:d2:b7:b7:
80:af:d9:94:3b:c6:26:79:44:00:46:24:cc:d6:bf:
ce:77:bb:94:20:f3:b9:7b:64:60:f0:7d:8a:b6:a5:
19:b8:6d:6f:0c:ed:de:44:a1:48:9c:8d:e8:05:89:
6b:c9:f8:6e:27:60:9e:29:55:5a:4b:c6:c7:f2:a2:
b0:15:9a:70:37:83:d1:fc:c7:5d:29:65:96:6b:c1:
d3:3e:95:63:83:49:cd:9a:62:41:fa:fa:e0:1c:a9:
97:3b:e0:3c:42:8b:af:bc:a0:7c:2c:92:41:e7:b8:
5a:97:4d:d7:e5:88:3d:e4:15:d7:ea:de:84:15:a0:
41:78:b6:a6:ce:78:22:33:39:db:0e:57:69:1e:cf:
0f:46:d4:cb:af:cf:8c:57:e0:50:e3:a7:3e:2b:20:
66:78:ab:5f:3c:7a:13:5c:62:9a:2e:a8:64:9e:ef:
4d:8f:0f:3b:de:0d:48:a2:9c:23:3e:b3:43:7f:a6:
cf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:97:FA:C0:04:56:43:D6:4B:BD:82:75:64:42:C4:DC:AA:DA:13:02
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/Epf6wARWQ9ZLvYJ1ZELE3KraEwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.240.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:a9:1e:8f:61:60:ab:fb:71:3e:1b:5a:fb:a0:27:aa:4f:d4:
91:75:ec:55:e4:ae:25:2b:32:31:d0:bd:51:70:a8:2b:70:fc:
7a:38:a3:47:36:96:89:2f:1a:96:c9:37:e3:21:89:cc:df:84:
4a:9a:c7:de:c5:f2:df:7a:18:72:ba:2b:05:07:5b:09:b7:01:
0b:12:15:96:ce:64:5b:f4:3c:14:6e:e4:8d:7f:c9:30:00:90:
01:03:7b:ec:4d:d0:7e:e2:d3:d4:f5:3c:7a:87:02:2d:21:bd:
62:fd:1e:56:34:9e:7b:c7:47:79:45:45:ec:7f:52:17:c9:27:
aa:15:0e:19:de:2c:7e:0a:0a:8c:f2:d1:3a:eb:76:12:51:a6:
f0:ac:c1:98:09:47:bb:1e:b0:08:83:60:ec:b2:c5:83:12:79:
0a:84:8b:22:20:57:1d:5b:22:23:be:8f:c4:18:92:fa:da:61:
f0:cf:c3:33:47:49:72:c2:19:1e:b5:d8:83:21:c3:ca:f0:3b:
00:1b:e4:b2:53:e6:c8:e7:5c:a2:7a:e5:9e:66:aa:b4:1b:27:
c3:cd:43:3c:2f:f8:50:81:1a:5e:52:83:08:4e:d8:20:75:70:
25:f5:cb:ba:13:bd:14:10:62:b5:9d:8e:1b:fc:29:10:dc:1f:
3b:26:7e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:36:19 2024 by rpki-client on console-ams.rpki-client.org