Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/GRuEUjUNuAKJ3IWqx_UjE4_kzKc.roa
File: GRuEUjUNuAKJ3IWqx_UjE4_kzKc.roa (raw, json)
Hash identifier: uN7GGH34PbZuEORJnGANASuotTu3nY6kj77FUS2K61U=
Subject key identifier: 19:1B:84:52:35:0D:B8:02:89:DC:85:AA:C7:F5:23:13:8F:E4:CC:A7
Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial: 018CC94E42756DB3923F63EEC3E148B52762
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/GRuEUjUNuAKJ3IWqx_UjE4_kzKc.roa
Signing time: Tue 02 Jan 2024 08:33:18 +0000
ROA not before: Tue 02 Jan 2024 08:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208342
IP address blocks: 45.129.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:42:75:6d:b3:92:3f:63:ee:c3:e1:48:b5:27:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
Validity
Not Before: Jan 2 08:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=191b8452350db80289dc85aac7f523138fe4cca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a9:78:e5:25:31:0d:c0:86:37:01:65:77:f7:
49:8e:7e:7f:62:87:33:5b:5c:c1:67:5b:82:51:6b:
42:3e:98:77:03:64:13:80:54:b8:ea:d8:f9:f7:0d:
50:7c:27:3b:12:89:33:77:6f:f0:d2:a0:b6:6f:15:
ca:be:39:e0:d8:38:37:33:1b:f7:f7:ae:fc:3c:66:
71:d0:e6:4e:e3:3d:d7:04:4b:95:f5:a3:09:bf:cc:
93:75:df:e3:17:ac:eb:c4:30:56:63:66:28:63:7f:
9a:0b:1c:df:47:db:e7:3a:15:e9:f4:87:31:ac:cc:
2e:6b:b2:46:4f:53:2f:8a:c8:06:a7:13:90:8f:d8:
e5:25:36:46:d5:a7:45:82:c8:49:3d:64:9a:da:b9:
40:79:2d:d5:1d:eb:7f:a1:ac:68:95:b3:33:6b:b8:
d7:e2:cf:a2:84:24:c8:13:d3:1a:af:da:00:62:52:
74:c0:58:e8:ce:ed:4c:c1:46:ef:f8:1c:24:6f:4c:
e6:f8:e0:58:c2:73:38:56:18:ee:14:dc:e7:68:d1:
3f:6a:82:fd:42:9e:21:9a:24:46:f7:73:b5:03:86:
ce:d3:45:9e:bb:9c:57:98:75:0e:e8:d6:6f:75:78:
aa:7f:6b:5e:f1:65:3e:96:8f:dc:2f:94:0c:27:c8:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1B:84:52:35:0D:B8:02:89:DC:85:AA:C7:F5:23:13:8F:E4:CC:A7
X509v3 Authority Key Identifier:
keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/GRuEUjUNuAKJ3IWqx_UjE4_kzKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.244.0/22
Signature Algorithm: sha256WithRSAEncryption
75:94:78:c0:93:8b:4c:26:e9:f4:b0:17:2d:d4:7d:38:d1:67:
8d:71:22:a9:c2:c2:5e:6d:59:4a:8a:44:8a:15:37:d5:38:95:
cc:9f:c1:c9:45:12:ed:92:81:bb:8e:51:ef:fa:f1:06:36:5b:
dd:21:8f:47:ae:d6:32:cf:6a:bb:be:b6:ec:81:36:82:28:f5:
d5:8a:48:d5:b0:85:29:1b:8d:62:b0:1f:f2:26:c8:b2:ff:09:
84:6d:af:09:c5:6f:d3:04:01:8e:62:73:32:b2:6e:c6:e2:d9:
9f:f0:87:40:e2:67:dc:57:bd:ee:ac:8a:3b:67:82:44:da:4b:
a4:51:51:d8:2b:83:c9:a7:79:4b:d6:7d:b4:d7:38:41:9a:2e:
0c:de:bd:b9:bb:68:69:b3:99:62:63:ee:53:e3:97:f2:0e:71:
f2:a1:7b:41:01:2b:61:a6:65:76:76:fe:24:90:61:de:11:e0:
a8:0f:3f:18:14:e8:6e:7b:5e:f5:97:52:5c:8c:aa:7a:81:f1:
e0:f7:c9:8b:7d:75:9f:45:27:65:38:43:b9:21:e4:b2:8b:fc:
e2:a6:9e:73:8d:90:e0:47:fb:bd:f7:47:01:5a:eb:ff:68:53:
00:bc:b0:1d:af:01:97:fa:dc:72:4c:d4:43:a6:89:0d:0d:53:
86:29:c8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:43:54 2024 by rpki-client on console-fra.rpki-client.org