Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/8pqeMzU7QpJVnk8VXF6Ef7RuPAw.roa
File: 8pqeMzU7QpJVnk8VXF6Ef7RuPAw.roa (raw, json)
Hash identifier: W0+75dAH2qACm7FGE5t1PXcmU4sYY3/RBhs0ZQtMNiY=
Subject key identifier: F2:9A:9E:33:35:3B:42:92:55:9E:4F:15:5C:5E:84:7F:B4:6E:3C:0C
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 018CC3B72EE3220D9F67BA44B6796E5C2A05
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/8pqeMzU7QpJVnk8VXF6Ef7RuPAw.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 45.132.224.0/24 maxlen: 24
45.132.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2e:e3:22:0d:9f:67:ba:44:b6:79:6e:5c:2a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f29a9e33353b4292559e4f155c5e847fb46e3c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:18:48:41:5b:d0:0a:59:ed:ff:2a:25:75:
7a:00:24:d8:43:f8:5a:fa:f5:ea:1e:64:6c:5f:e2:
55:1a:fc:ce:fc:55:44:00:c6:86:b4:ae:84:06:45:
ca:19:e1:bc:70:7d:d3:13:a5:e8:1e:ea:fd:69:21:
1b:3c:c6:e5:a5:de:85:d1:b4:1a:71:cb:b2:89:57:
f8:eb:a3:ac:a8:b7:ab:8b:39:cd:6e:af:c4:16:3a:
5e:ea:3a:a2:06:cd:16:2d:52:79:1e:51:14:27:59:
a4:b2:00:0e:da:4e:32:3b:bd:a2:17:5a:49:39:c3:
9c:66:25:4f:89:85:22:99:6f:be:9a:34:17:df:99:
3f:20:c5:2b:ca:f8:70:39:36:20:59:77:7d:2f:a2:
03:25:7f:68:7c:b5:fd:53:cf:95:e9:ef:48:d9:af:
d1:3b:7e:7d:09:bc:2e:82:df:a6:f7:a8:e3:b8:53:
1e:8b:40:3b:3b:69:70:59:40:f9:33:ea:58:bb:cf:
d4:5c:bc:9f:df:b8:83:d2:1e:da:49:07:fb:93:b8:
b4:02:78:25:48:77:5f:4e:ef:cd:85:d2:4f:e5:c8:
53:63:98:25:3f:99:d8:ed:a5:d7:fb:d7:ab:85:ca:
f1:f1:0f:91:99:c4:cb:7b:4a:4f:4f:5c:fb:f0:b3:
a4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9A:9E:33:35:3B:42:92:55:9E:4F:15:5C:5E:84:7F:B4:6E:3C:0C
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/8pqeMzU7QpJVnk8VXF6Ef7RuPAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.224.0/23
Signature Algorithm: sha256WithRSAEncryption
19:8d:3a:70:f9:c1:3e:0c:10:c8:8e:3a:e2:6c:53:82:86:31:
e5:81:b5:a4:ba:15:db:96:6f:e2:e1:b0:d5:bf:b2:f3:31:fd:
4f:5b:48:7b:d8:06:5a:2f:7a:05:72:0d:6f:90:ac:09:86:ca:
24:92:62:81:48:fc:86:73:9b:d5:5c:53:ac:ac:73:7f:2f:1d:
25:8d:91:c0:54:c7:69:eb:a1:c5:b3:11:56:5c:c7:49:6d:e4:
f4:8f:68:1a:05:57:17:7e:b2:ca:42:55:d4:10:bd:c4:83:26:
26:a9:21:f4:f2:04:50:b4:c4:88:d4:97:2e:97:b8:7a:2f:9f:
01:90:c3:3b:ca:75:ab:58:24:2d:eb:d9:e2:e8:53:34:ca:65:
95:7c:95:41:7c:ac:b3:29:f4:83:74:16:4c:9f:e7:cc:e2:50:
52:6f:36:52:28:e7:75:20:b8:e0:d2:fd:21:a0:fa:36:80:fe:
f7:9c:41:3d:c5:35:ff:12:17:ec:2c:4e:19:ca:41:7e:21:6d:
0d:0a:59:dd:7d:f3:6c:46:b6:43:68:f7:20:a8:2d:43:74:28:
57:d9:77:1b:08:9a:68:81:29:89:16:c4:d2:cd:47:3f:85:f5:
32:39:b1:df:f6:b1:5d:7c:70:6e:27:c7:d0:6e:20:37:40:9a:
0e:d0:f3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 11:57:50 2024 by rpki-client on console-ams.rpki-client.org