Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/hp8F4JwaBwdGDvjnclOlq8OtaJo.roa
File: hp8F4JwaBwdGDvjnclOlq8OtaJo.roa (raw, json)
Hash identifier: HhZKdKEgs+1me0SNNVtsngu4uuQ+BB0p4hxwQrHekfs=
Subject key identifier: 86:9F:05:E0:9C:1A:07:07:46:0E:F8:E7:72:53:A5:AB:C3:AD:68:9A
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 018CC79569F4E556EBBBA9788CCAF874AE2E
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/hp8F4JwaBwdGDvjnclOlq8OtaJo.roa
Signing time: Tue 02 Jan 2024 00:31:47 +0000
ROA not before: Tue 02 Jan 2024 00:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200918
IP address blocks: 45.145.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:69:f4:e5:56:eb:bb:a9:78:8c:ca:f8:74:ae:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 00:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=869f05e09c1a0707460ef8e77253a5abc3ad689a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:66:ab:ab:43:bc:8a:fc:70:50:02:be:78:5b:
36:29:fb:e4:ab:ba:a6:1f:08:4d:a2:46:2d:ee:cc:
8c:86:94:f8:52:57:69:6d:3d:98:14:ab:67:48:1a:
7e:ee:4e:e2:78:38:a2:d5:8a:5c:3b:00:0b:2e:91:
81:fa:5b:a0:51:f2:54:f3:77:5e:6f:fd:18:61:e7:
3f:b3:35:8c:86:22:25:57:99:11:a8:90:77:0b:49:
cd:69:c4:4e:bf:78:32:1b:64:77:8c:d5:35:90:92:
f8:f1:4b:fc:69:0d:fe:f4:53:aa:8e:54:bd:8a:06:
66:f5:b1:dc:92:f3:cf:24:a2:e5:d4:68:d2:58:e8:
1c:7d:06:08:e2:8c:0f:09:88:8e:d4:90:2c:43:57:
c4:7a:d1:65:6b:d7:a0:82:91:7e:94:7f:ab:57:8a:
c9:4b:ae:36:66:97:ef:db:7a:ed:83:54:f6:c5:70:
95:a4:60:6e:27:e5:58:3a:9c:b5:f3:1c:18:e6:27:
a1:4a:a1:c9:18:0b:af:31:1e:a7:4d:31:26:20:10:
a0:4b:c6:aa:2f:d9:6b:3a:83:6d:22:f1:a4:a0:e0:
3b:dd:7f:2b:a0:03:93:5f:b6:d9:40:2b:e0:13:53:
10:47:78:89:aa:21:72:f0:62:2f:8d:cd:54:1c:de:
42:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9F:05:E0:9C:1A:07:07:46:0E:F8:E7:72:53:A5:AB:C3:AD:68:9A
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/hp8F4JwaBwdGDvjnclOlq8OtaJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.220.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:cc:20:6b:d7:c0:f2:49:ec:47:08:fd:8f:af:7a:e1:c3:15:
e6:d3:92:46:2f:b9:2c:7f:5f:7e:87:00:91:ce:6a:82:28:6b:
ab:14:61:2f:d3:dc:63:c8:94:00:95:2e:29:8d:6b:bd:25:57:
d2:4b:81:02:d8:88:d8:ee:94:28:2e:ec:df:33:63:ea:52:23:
22:48:b0:8a:89:ce:59:aa:4e:b4:6d:b2:5c:0d:2d:f8:52:57:
af:4f:33:3e:0e:25:e1:08:43:5a:bf:0b:6b:e3:c7:cd:0c:b2:
38:47:c5:64:62:18:b4:d4:1c:dc:b1:51:80:78:77:1c:c1:c7:
5b:e8:94:b4:3f:e6:18:a5:a3:58:01:37:e1:d1:ec:18:18:81:
69:86:65:15:a2:fc:b6:3a:ae:ed:fd:ca:4e:78:74:56:5d:24:
4b:68:a9:44:b2:98:e8:b9:12:bc:50:3b:fc:1b:81:2b:c1:63:
56:06:fe:e5:99:38:6f:da:9c:d8:f1:97:ca:da:bf:f2:6d:1a:
5b:04:cb:37:00:1b:68:be:ff:c1:c2:c2:3b:eb:e9:6c:bf:74:
67:21:a0:d6:80:46:77:75:4c:4e:34:0d:22:46:5f:cf:b0:4f:
20:40:d7:79:c5:76:92:d1:0b:dd:b1:51:96:ff:b4:8a:b8:73:
f1:f3:90:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:43:42 2024 by rpki-client on console-ams.rpki-client.org