Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ErO4r5-b-IWQcLmptj95z8zZsvU.roa
File: ErO4r5-b-IWQcLmptj95z8zZsvU.roa (raw, json)
Hash identifier: XQOE6m22CySG1lYxQqsOMmtlLBREYPNZox2xsUJQNJs=
Subject key identifier: 12:B3:B8:AF:9F:9B:F8:85:90:70:B9:A9:B6:3F:79:CF:CC:D9:B2:F5
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018DE629641B48F075C4B9B60A4D006138E7
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ErO4r5-b-IWQcLmptj95z8zZsvU.roa
Signing time: Mon 26 Feb 2024 16:04:48 +0000
ROA not before: Mon 26 Feb 2024 16:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212128
IP address blocks: 147.45.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e6:29:64:1b:48:f0:75:c4:b9:b6:0a:4d:00:61:38:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 26 16:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12b3b8af9f9bf8859070b9a9b63f79cfccd9b2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a5:54:71:60:44:41:97:4d:43:4d:48:24:9e:
c0:da:0d:c9:3e:43:14:44:2c:85:55:8c:8f:0d:ac:
db:68:85:a1:15:3f:17:6c:b8:0f:a3:9a:48:7d:6f:
14:8a:74:74:38:09:21:92:35:d0:b4:25:ca:dd:54:
39:e7:9f:80:ee:80:75:1b:6c:64:5b:ec:c4:d2:e6:
14:a5:b3:2f:5d:29:c4:29:5e:1e:51:4c:ea:dd:cc:
94:28:3d:47:d7:3f:af:25:e7:f5:59:0c:e8:db:36:
36:0a:e9:eb:74:25:ee:c7:0c:e3:8a:38:2d:8a:0f:
2c:54:4f:d1:12:8b:7d:92:44:13:00:03:69:76:ce:
1d:1a:dd:f5:91:59:ab:8b:26:db:f9:fe:36:25:f4:
5b:51:f5:be:56:3c:c2:90:65:a3:3e:13:fb:7d:47:
68:28:b2:7b:1d:5b:e5:4a:0b:90:05:dc:6f:b3:2f:
5a:84:48:2d:ef:eb:8e:d2:2a:8a:72:64:2a:e0:5a:
2b:98:8e:b3:52:52:35:ae:aa:d2:7b:a7:0d:6d:54:
d8:62:f3:9d:b3:b6:f0:30:6d:31:45:40:14:16:62:
b6:e8:e2:03:bf:b0:73:ca:f1:f3:bd:e2:78:b8:5e:
3b:b7:95:46:59:f4:e1:13:c8:8b:31:b9:52:6e:5f:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B3:B8:AF:9F:9B:F8:85:90:70:B9:A9:B6:3F:79:CF:CC:D9:B2:F5
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ErO4r5-b-IWQcLmptj95z8zZsvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.128.0/22
Signature Algorithm: sha256WithRSAEncryption
65:ef:8f:ce:8b:13:13:3e:54:ed:df:a8:3e:61:12:3b:b3:53:
19:ba:58:d4:5f:26:a5:73:0a:6a:e4:b8:1d:f8:ac:22:bd:b1:
15:15:da:71:41:3f:bd:e0:25:cf:5e:33:49:02:cc:72:f7:0e:
2f:86:70:89:3f:99:13:b1:ff:83:31:86:76:fa:b6:2b:02:7b:
4a:6d:b1:27:32:9d:95:4e:df:01:81:b9:ba:64:79:da:73:7a:
f3:66:8b:84:fb:31:b8:11:16:89:2f:b1:22:0f:53:74:1e:04:
ad:8a:bc:c7:3a:f6:68:44:a5:19:98:60:a0:0a:01:1a:84:2d:
76:cc:55:1c:ed:a6:51:58:42:92:21:c7:4b:40:59:2c:47:2f:
43:4d:6a:6e:15:7b:9d:d9:9a:38:9f:42:21:3e:6f:3d:dd:6c:
1c:f2:02:c2:e2:a6:1c:fa:69:a1:ff:09:4c:9a:24:27:9e:da:
de:27:43:11:c7:ca:a0:e6:e8:5d:77:71:e4:1b:49:b4:11:dc:
2b:2f:e1:ba:de:6a:c6:a5:5a:38:44:5d:07:7a:dd:9a:43:b0:
eb:cf:2a:4a:cd:e5:11:37:05:cb:1e:ed:36:c5:83:bb:32:1d:
22:4a:43:47:ca:6a:ef:e3:a9:54:a2:0d:0c:c6:d7:90:51:d1:
1e:05:ad:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:15:45 2024 by rpki-client on console-fra.rpki-client.org