Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/KlfloXyEsziTD0BHrYP_7eK_Dy8.roa
File: KlfloXyEsziTD0BHrYP_7eK_Dy8.roa (raw, json)
Hash identifier: qRDVJBg6JJRXCVTBVbf0q/bBfvGm7+Rr0HHO8eXBMnI=
Subject key identifier: 2A:57:E5:A1:7C:84:B3:38:93:0F:40:47:AD:83:FF:ED:E2:BF:0F:2F
Certificate issuer: /CN=32010f70276e418d58f08c56a79a82b99aca1763
Certificate serial: 018CC4938460BF4678FB5BF92939FAEFAA9A
Authority key identifier: 32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/KlfloXyEsziTD0BHrYP_7eK_Dy8.roa
Signing time: Mon 01 Jan 2024 10:30:51 +0000
ROA not before: Mon 01 Jan 2024 10:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 45.88.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:84:60:bf:46:78:fb:5b:f9:29:39:fa:ef:aa:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32010f70276e418d58f08c56a79a82b99aca1763
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a57e5a17c84b338930f4047ad83ffede2bf0f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:00:28:b6:a3:29:35:13:88:b4:45:18:16:fd:
41:a7:e1:60:71:5f:00:92:ba:7f:32:e0:58:6f:fc:
5a:c8:c4:f3:28:06:df:6f:30:85:27:01:da:8a:bd:
e1:b3:14:3a:95:f2:01:0e:08:eb:e2:ec:e5:aa:22:
21:50:dc:02:68:ea:ae:7e:f8:9d:51:17:eb:91:55:
5e:ac:30:b1:68:88:25:a5:a3:7a:96:04:5d:96:de:
ac:14:5b:9e:d2:63:1d:33:d4:29:53:5d:11:22:2e:
43:97:03:41:5d:11:ed:c0:fe:dc:f6:52:b4:66:15:
2f:76:c8:50:76:a5:f6:4c:f9:12:a9:95:75:8d:6d:
e0:3a:85:69:4e:4b:29:5e:23:fd:d7:0d:d5:6d:d8:
a0:1a:67:2a:7a:f2:bd:16:18:c2:cd:da:c6:3e:f7:
ce:c9:79:d8:75:3d:44:fd:eb:7b:f9:e2:b9:da:26:
3e:9e:57:70:62:43:3e:19:f5:54:d0:5c:14:ac:eb:
c4:15:78:5b:d5:0c:ac:b1:3b:21:46:94:bb:61:47:
f9:5f:70:fe:55:f1:4d:0e:1c:81:28:e9:f1:bb:6e:
58:fc:4d:83:1c:47:45:63:44:c9:f6:f1:97:22:c0:
ba:3f:92:56:eb:8e:35:44:0a:b2:89:36:8d:c9:51:
ff:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:57:E5:A1:7C:84:B3:38:93:0F:40:47:AD:83:FF:ED:E2:BF:0F:2F
X509v3 Authority Key Identifier:
keyid:32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/KlfloXyEsziTD0BHrYP_7eK_Dy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.248.0/22
Signature Algorithm: sha256WithRSAEncryption
07:40:82:bc:9d:e6:b9:22:2f:0b:f5:ca:06:3b:08:6f:3a:0e:
79:89:39:c3:47:da:4b:e0:d5:72:8c:4e:75:c5:c3:1b:7e:9e:
cc:95:7d:a3:8b:72:bd:c6:ea:4c:20:85:31:d8:e2:1f:70:c9:
eb:9d:ae:f4:ae:b4:c9:37:68:a2:ab:d3:27:6d:55:76:f0:e5:
4c:64:60:e0:5b:c0:b5:37:b7:a7:cc:1d:39:36:ba:d6:bf:dd:
50:76:be:e7:54:a3:95:90:8a:40:d3:1a:db:b7:97:e4:20:61:
56:09:cd:b0:40:fa:44:24:6a:69:77:6b:f2:ed:7c:99:7b:ea:
59:17:d0:42:7d:92:e6:58:11:a4:e1:c7:39:04:51:8c:2b:c4:
28:41:39:34:af:6c:73:0e:13:b8:63:ca:04:a0:e1:8e:a5:3d:
de:bb:3a:6b:1d:09:60:52:1c:7e:35:59:fc:1f:3f:77:9c:cc:
81:bc:64:ea:59:bf:cf:42:26:ed:70:db:21:09:45:0b:89:8a:
62:a7:23:3a:cd:88:4e:c7:95:63:b4:d1:04:24:4d:73:1d:57:
0b:1f:48:12:6b:35:4c:de:31:84:91:a6:4c:e0:24:b4:69:6a:
8f:67:fc:94:6e:d4:ca:6c:f0:1a:ee:f7:1a:c6:7c:96:b2:dc:
c7:0f:46:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:06:11 2024 by rpki-client on console-ams.rpki-client.org