Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/rjgRiNL12Wpc7Lga-tiqyglcM0M.roa
File: rjgRiNL12Wpc7Lga-tiqyglcM0M.roa (raw, json)
Hash identifier: Z0iF9foLcaNGZrDf8YxZHpV8JCh7ZLKSPC2Osu1T1jw=
Subject key identifier: AE:38:11:88:D2:F5:D9:6A:5C:EC:B8:1A:FA:D8:AA:CA:09:5C:33:43
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 0190DD04D357A2EFAA29905BD1534A841460
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/rjgRiNL12Wpc7Lga-tiqyglcM0M.roa
Signing time: Tue 23 Jul 2024 00:36:39 +0000
ROA not before: Tue 23 Jul 2024 00:36:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 11325
IP address blocks: 45.80.96.0/22 maxlen: 22
45.85.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:dd:04:d3:57:a2:ef:aa:29:90:5b:d1:53:4a:84:14:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Jul 23 00:36:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae381188d2f5d96a5cecb81afad8aaca095c3343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:d0:5d:f3:f8:7b:06:72:5f:f2:8c:4b:64:
8e:7d:dd:71:3c:15:31:3c:16:f4:d1:ef:2e:1f:6b:
b6:c3:04:31:fc:7d:b2:3c:22:af:7e:16:43:fa:74:
ee:16:84:94:60:51:a8:c3:08:cc:04:4a:4f:55:d7:
bd:cc:84:04:43:13:7e:ab:1c:c2:0d:84:0a:2b:86:
c1:e8:35:d8:65:ae:a9:a3:ab:43:1c:05:a7:c7:55:
a7:99:0a:d3:22:e8:45:8c:c7:2a:94:08:86:f3:d1:
fb:7e:49:b0:1f:32:51:00:17:e6:57:10:e5:d3:1f:
6e:d2:b4:6a:21:06:e5:8c:6d:c4:12:58:91:51:a2:
e3:07:a0:26:44:4a:78:4e:f8:44:bf:48:35:fb:19:
71:2c:9f:d7:28:ec:70:0b:cf:ea:da:85:ab:c0:df:
23:cf:2e:1f:67:6f:32:9e:45:96:3d:11:90:35:9a:
1a:8c:6e:33:a0:c7:6e:00:ee:1d:3e:9a:f6:9b:e9:
4d:a6:c9:57:d4:a8:a4:02:55:4c:5c:67:25:50:51:
3a:54:4a:e4:36:01:6c:dc:a9:09:00:09:8e:0b:bd:
c3:f3:4f:c7:34:17:58:a2:18:d5:cd:48:26:d1:ff:
ec:a3:dd:b8:94:1e:5b:4e:99:7b:c7:f6:01:ef:a4:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:38:11:88:D2:F5:D9:6A:5C:EC:B8:1A:FA:D8:AA:CA:09:5C:33:43
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/rjgRiNL12Wpc7Lga-tiqyglcM0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.96.0/22
45.85.128.0/23
Signature Algorithm: sha256WithRSAEncryption
42:c8:fa:4a:f3:e1:cc:e8:cc:0f:81:a9:8c:21:c9:2d:b9:6d:
4e:93:0e:ec:a9:19:e2:62:b8:28:0e:af:e9:cc:58:f3:f6:b0:
aa:d6:b9:f5:f0:1e:bc:72:ed:e4:fb:c6:95:41:ca:aa:72:0d:
dc:b0:26:27:5a:cd:ad:c3:93:06:dd:ca:ae:85:61:d8:7d:10:
e7:6f:52:a8:c3:1b:9b:76:75:e2:9b:fd:94:17:96:ea:30:aa:
98:a7:99:c9:c6:c1:96:c8:dc:6a:29:b4:27:31:77:cf:4e:c8:
cd:d5:df:39:d9:09:25:3f:b9:ce:e6:a2:11:11:7d:1f:13:f0:
af:b2:7c:83:0c:78:4e:e1:8d:c6:35:e9:9a:b0:18:85:9a:e6:
65:a9:4e:6a:42:a6:94:67:35:3c:5d:bb:ce:13:48:7f:5c:e7:
b5:ba:0a:4e:24:55:a4:2b:ff:d2:2a:0d:69:1d:a5:5a:77:1a:
11:2e:cb:5b:d0:a6:d5:5d:1c:ae:00:75:39:bf:63:33:5c:a4:
44:75:d3:d2:8d:1c:ae:de:f7:49:10:7e:d4:cb:99:9e:9b:48:
e0:93:aa:cc:35:9a:42:77:3b:51:cc:60:a5:6f:31:19:7b:98:
52:7f:42:ec:9c:3b:8c:1c:32:80:ee:b7:93:e9:a5:45:4b:07:
b5:8e:73:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:15:22 2024 by rpki-client on console-ams.rpki-client.org