Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/gX2O5YdaW5pGGuBB3Pm6dGJswec.roa
File: gX2O5YdaW5pGGuBB3Pm6dGJswec.roa (raw, json)
Hash identifier: xXSvsOAikuiU/cbpEKXTIjYoYofHOSA6Z9NNGe/7zrE=
Subject key identifier: 81:7D:8E:E5:87:5A:5B:9A:46:1A:E0:41:DC:F9:BA:74:62:6C:C1:E7
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 018CC801E91C08D35D48AA93DD6B0B5B6899
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/gX2O5YdaW5pGGuBB3Pm6dGJswec.roa
Signing time: Tue 02 Jan 2024 02:30:17 +0000
ROA not before: Tue 02 Jan 2024 02:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.11.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:e9:1c:08:d3:5d:48:aa:93:dd:6b:0b:5b:68:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Jan 2 02:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=817d8ee5875a5b9a461ae041dcf9ba74626cc1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:b7:48:97:ed:f1:42:3d:ff:30:b2:29:86:
54:34:ed:44:90:e9:f2:bc:36:e1:73:e0:f7:e4:c3:
a3:e8:5b:db:2f:8e:31:f7:b6:a3:c8:3e:a5:c8:cd:
7f:5c:0b:a9:a2:d6:dd:4d:2b:4c:a9:4b:72:10:c8:
d8:3f:52:ce:00:7c:ff:3d:28:a0:63:56:fe:35:9f:
88:b3:43:5c:66:86:d7:99:3d:bf:b8:27:bd:53:3f:
be:ca:e4:ab:3d:43:97:78:10:a4:98:0d:54:e3:79:
cb:da:d0:43:97:d7:40:29:13:1a:a7:35:b9:47:63:
72:fd:38:89:0c:fe:5d:11:40:b1:3a:50:7d:35:a5:
3a:0d:78:91:0a:b5:5a:b7:5e:c6:ef:e2:c9:50:ba:
98:61:e1:62:90:3c:c8:5d:3f:4e:54:96:ce:56:04:
3d:bd:1e:91:3a:0e:d3:f0:2e:e1:3f:63:4e:59:9b:
07:60:62:fe:1c:a2:b2:a8:41:31:f1:2d:21:ca:0c:
9c:2f:ca:a9:83:71:15:0a:41:c3:a6:40:5d:30:85:
34:38:ed:27:f3:9a:1d:fc:67:f6:98:21:65:b5:8e:
ce:6d:51:96:94:b6:c9:ff:70:c7:e3:be:55:e1:d2:
f1:16:e2:61:a8:93:b3:f0:c6:17:5e:99:54:d4:61:
e5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7D:8E:E5:87:5A:5B:9A:46:1A:E0:41:DC:F9:BA:74:62:6C:C1:E7
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/gX2O5YdaW5pGGuBB3Pm6dGJswec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.252.0/22
Signature Algorithm: sha256WithRSAEncryption
06:4e:b2:86:f8:68:b7:6c:05:96:4a:1f:cf:37:4b:75:c8:39:
52:9e:13:d4:59:cf:5e:9d:d0:58:5f:d0:cf:35:49:c5:16:1f:
1e:1e:90:79:f2:8e:dc:3c:08:1d:c4:3e:0b:70:ba:56:a9:f4:
b8:a6:c6:0a:d8:51:55:d1:96:af:9f:aa:b8:32:20:0e:8c:6e:
51:b6:41:43:bb:20:52:6a:bf:12:9f:b7:5c:cf:8c:66:3a:b9:
db:fa:9e:3b:07:55:b7:09:22:a0:25:2c:57:f2:29:73:08:a7:
79:6a:66:8f:94:4b:30:77:06:25:6b:af:81:12:a4:ff:6e:2a:
8f:d0:86:96:25:fd:8c:38:40:b8:97:f9:82:cb:73:7d:f1:a9:
c3:c9:a7:91:14:58:a2:cc:5e:d2:da:e3:7a:1c:79:a1:82:17:
93:be:c2:47:3a:b0:b9:e7:a4:a0:90:91:25:71:6a:84:c2:38:
58:32:55:cd:9c:99:4f:47:39:d2:c3:b7:71:13:e0:4a:de:b1:
64:86:b4:72:84:7d:67:fe:47:cc:47:34:71:dc:60:5b:53:09:
b9:ed:bb:a7:58:b4:e0:5b:ee:25:47:c7:f6:27:12:9a:c7:59:
88:ca:96:f3:fb:86:e7:4e:d3:0f:72:da:a5:4d:b4:6b:e0:37:
f4:d6:6b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:30:28 2024 by rpki-client on console-fra.rpki-client.org