Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/MxDLIarvwGoqvokR4mCkxjZdZDg.roa
File: MxDLIarvwGoqvokR4mCkxjZdZDg.roa (raw, json)
Hash identifier: ZTstS/S1fSCcXPLTS5MTZzs0m4K+ZWYpfpaWNPhu9fU=
Subject key identifier: 33:10:CB:21:AA:EF:C0:6A:2A:BE:89:11:E2:60:A4:C6:36:5D:64:38
Certificate issuer: /CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Certificate serial: 018CC3B69908E5FE403E73E1C79239F69907
Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/MxDLIarvwGoqvokR4mCkxjZdZDg.roa
Signing time: Mon 01 Jan 2024 06:29:32 +0000
ROA not before: Mon 01 Jan 2024 06:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208899
IP address blocks: 45.15.228.0/24 maxlen: 24
45.15.229.0/24 maxlen: 24
45.15.230.0/24 maxlen: 24
45.15.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:99:08:e5:fe:40:3e:73:e1:c7:92:39:f6:99:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Validity
Not Before: Jan 1 06:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3310cb21aaefc06a2abe8911e260a4c6365d6438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e6:6d:c2:53:e0:1f:ff:31:d3:91:0e:f3:de:
4d:7e:a9:a0:1a:88:3f:0f:33:5d:65:b4:be:48:2a:
a5:7d:89:0f:2e:9d:be:4d:a2:e4:e3:2f:07:0a:5e:
c6:f0:6a:06:5d:1d:c5:13:cb:7d:f9:85:15:c5:b7:
b3:b7:34:d3:e9:bf:2e:4e:13:2f:da:0f:a6:9d:b4:
bc:5e:0d:bf:cf:5d:ea:5a:d6:fa:15:fa:e5:09:da:
d9:95:c1:8c:45:2d:11:7b:33:08:f6:38:69:6e:4a:
0c:00:11:5b:2a:67:2e:e0:6f:ac:64:9c:b3:e6:21:
98:1c:0c:74:8c:e1:1a:78:c3:83:c8:86:8f:80:78:
97:61:b3:e8:12:71:31:3b:c4:dd:51:13:b4:e2:23:
fb:07:2d:d5:2c:06:f4:9f:d3:6d:be:c3:93:08:1c:
f3:fc:51:6f:e2:de:1b:70:b6:12:f7:3e:95:59:88:
bf:3b:b5:3a:c1:20:57:cf:d1:18:fc:6c:f1:1f:7b:
7b:61:60:d1:47:0e:28:28:ea:cc:10:b0:59:29:0c:
8d:d0:54:4b:47:be:f4:fd:71:f5:72:dd:8d:0e:d2:
92:29:1e:5f:5a:e0:e2:14:b7:f4:0b:6e:32:54:98:
4c:38:9e:c7:58:2c:e2:8b:3c:ca:ac:bc:34:8d:1b:
db:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:10:CB:21:AA:EF:C0:6A:2A:BE:89:11:E2:60:A4:C6:36:5D:64:38
X509v3 Authority Key Identifier:
keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/MxDLIarvwGoqvokR4mCkxjZdZDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.228.0/22
Signature Algorithm: sha256WithRSAEncryption
25:17:50:84:06:20:78:27:0a:8c:fd:14:28:ad:2b:b5:1f:af:
4b:02:b2:eb:39:0b:f5:23:8b:99:a5:e3:8c:32:75:e8:ba:a3:
63:f8:8e:15:31:0d:8c:b1:c5:f5:48:5a:af:01:ee:ea:3e:bc:
92:c9:57:bf:04:30:bb:aa:13:17:75:c0:25:84:38:d9:96:35:
eb:c5:36:96:52:6c:aa:1f:ae:bd:8f:04:c1:01:97:de:a9:0e:
06:e7:fa:75:1f:da:00:da:cc:80:a2:ff:1f:e8:9a:82:2a:ee:
05:05:c0:ab:a5:95:91:69:f8:2c:96:10:d6:41:5d:ce:cd:fb:
d0:42:17:98:e8:d9:96:23:db:0e:66:59:99:56:85:f4:c3:aa:
d9:bf:b4:8c:16:b9:c7:22:ae:cc:68:05:ef:46:5e:bf:8a:ac:
37:bd:80:eb:61:65:a8:9e:c0:d5:f1:41:8f:c0:d1:53:63:3d:
e0:40:f1:77:d9:69:6a:63:f2:3b:d4:fd:c5:e0:ea:bd:83:0c:
0f:6c:53:4e:6e:76:8f:d8:77:ac:2c:84:95:e3:26:ae:2a:26:
09:7e:aa:af:55:61:bc:08:53:55:6a:e4:cb:2f:3e:b4:1b:89:
90:fa:b0:1a:32:2c:f5:bd:e2:28:84:f9:73:c9:ee:ce:ed:8c:
79:b3:74:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:50:12 2024 by rpki-client on console-fra.rpki-client.org