Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/UBxeqE_3q4Whw4Wr89PER8o1WvQ.roa
File: UBxeqE_3q4Whw4Wr89PER8o1WvQ.roa (raw, json)
Hash identifier: nF/iA875/YKBVtx4zBBNkcRaNQD1A51hTGP7LTwBpkw=
Subject key identifier: 50:1C:5E:A8:4F:F7:AB:85:A1:C3:85:AB:F3:D3:C4:47:CA:35:5A:F4
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018E615419B703058746E3A4183C68DA0DC6
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/UBxeqE_3q4Whw4Wr89PER8o1WvQ.roa
Signing time: Thu 21 Mar 2024 14:04:45 +0000
ROA not before: Thu 21 Mar 2024 14:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 45.130.54.0/23 maxlen: 23
45.138.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:54:19:b7:03:05:87:46:e3:a4:18:3c:68:da:0d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 21 14:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=501c5ea84ff7ab85a1c385abf3d3c447ca355af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b9:49:ff:dd:1f:0c:32:3f:d0:d5:2e:48:6b:
25:40:8c:d5:67:52:3b:b7:9e:39:8b:36:45:71:77:
e4:e9:3d:60:56:9c:49:3a:81:01:06:46:b1:6b:51:
d7:22:66:b9:bb:7b:62:35:5b:7e:ed:f6:1c:be:d0:
28:b7:a5:06:47:45:77:26:8a:f4:ca:c4:9d:f2:6d:
03:00:15:09:62:3c:f8:e3:18:3d:4c:e1:32:c6:5d:
4d:de:dc:e0:83:f6:17:65:a3:d9:02:74:87:14:dc:
a3:df:28:ea:37:46:c9:4e:a3:78:9f:d4:05:99:0e:
ef:f0:dd:48:f4:1b:b8:67:47:18:cb:05:ba:fa:28:
14:b1:a0:83:95:3b:a8:11:cd:f9:cb:e1:d2:ca:c2:
14:76:73:71:de:fe:93:55:fa:1a:4e:00:1b:f5:cc:
e1:c9:06:c8:ed:42:cb:9d:a2:1d:03:7c:d0:1e:a1:
36:7d:b9:9a:23:f3:b1:f6:95:48:dd:90:7c:e4:38:
b1:2e:26:c0:0e:1f:d3:33:58:09:6e:f6:5c:df:84:
24:12:a7:81:00:ed:08:b5:8c:22:3a:00:e8:37:8f:
01:d7:dc:1b:aa:a8:02:04:05:00:75:ef:c2:0e:c9:
72:88:f1:8f:f3:ef:ae:46:6e:ed:38:d3:6a:a0:cd:
44:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1C:5E:A8:4F:F7:AB:85:A1:C3:85:AB:F3:D3:C4:47:CA:35:5A:F4
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/UBxeqE_3q4Whw4Wr89PER8o1WvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.54.0/23
45.138.2.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:17:3a:0b:9c:b3:fd:c8:d5:88:c1:d0:b8:e5:ad:76:3a:ad:
ea:f8:3c:46:8c:34:af:27:5a:9b:d8:11:9f:40:38:11:a3:cc:
78:bc:b1:7d:ae:6a:69:2f:32:41:1f:5c:74:62:14:f6:d9:b3:
ba:bf:16:4f:91:26:ba:70:d9:a5:d5:89:8b:42:f4:a2:ec:49:
71:af:ba:09:5d:4d:36:3e:ec:34:8c:e0:95:23:30:af:48:52:
c4:b1:fd:99:cb:de:6a:d3:98:43:36:01:0a:5f:c0:a8:64:0c:
e0:c6:d2:29:7f:a6:77:76:67:16:03:d1:ca:3f:53:81:87:9e:
d7:77:c3:c7:f4:cc:3c:ba:fc:b0:59:8c:07:d9:04:21:51:21:
e6:ab:a5:b9:d2:19:e3:e3:71:37:87:97:64:bc:ee:6a:3d:1f:
a4:b4:68:e2:53:c3:4c:e1:9b:9c:f7:a4:92:64:50:ee:10:1e:
a6:94:73:85:28:81:ff:97:8a:d8:61:c4:d2:f9:45:c5:0e:29:
d4:35:22:dc:e6:8f:1c:32:f2:30:cf:b7:6b:a8:5a:ed:00:04:
0a:65:63:e0:2a:ac:a2:65:09:29:f3:f7:f3:ca:5d:7c:f5:f0:
f0:3e:fb:e4:41:7a:c2:22:7b:ae:89:99:0d:2c:65:e4:dc:9f:
bd:15:60:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:58:04 2024 by rpki-client on console-fra.rpki-client.org