Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/OPyG9gQNe767Bw7fxhJVMkWBZrU.roa
File: OPyG9gQNe767Bw7fxhJVMkWBZrU.roa (raw, json)
Hash identifier: kumYWRRqLKFvct9mSNaliVeR/EMHCX7FEnynfX9VGWU=
Subject key identifier: 38:FC:86:F6:04:0D:7B:BE:BB:07:0E:DF:C6:12:55:32:45:81:66:B5
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: 018CC2DB42C273C8A470A601072F6106152D
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/OPyG9gQNe767Bw7fxhJVMkWBZrU.roa
Signing time: Mon 01 Jan 2024 02:29:58 +0000
ROA not before: Mon 01 Jan 2024 02:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45996
IP address blocks: 45.11.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:42:c2:73:c8:a4:70:a6:01:07:2f:61:06:15:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: Jan 1 02:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38fc86f6040d7bbebb070edfc6125532458166b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:23:0b:16:73:2a:e3:02:a6:57:cf:60:9c:
ec:f3:df:18:9a:96:fa:4f:48:23:c3:2c:64:2f:e5:
fd:cd:45:44:59:ca:d2:46:3e:a9:68:da:46:6f:ef:
b5:35:e5:7b:c0:cc:a3:32:bd:21:a6:a3:44:ed:da:
54:e5:0d:d3:6c:d6:d4:36:d5:b1:b6:88:9e:76:af:
02:93:b9:07:d5:4b:7d:e9:bf:a2:70:9f:9c:ce:21:
f8:f0:3d:ef:7c:6b:a8:88:65:fd:2d:5f:ce:04:5e:
ce:34:ff:ca:ad:39:d5:05:a4:f9:66:13:90:17:fe:
fa:17:00:89:b1:aa:2c:79:ef:e1:aa:5d:e6:55:a3:
31:72:d8:fc:cc:81:44:c1:36:18:f8:29:c2:7e:57:
6b:48:fc:78:7e:6e:bc:89:53:91:59:b6:08:f1:6a:
9a:21:c9:44:6c:88:f4:8c:a9:9a:4d:de:92:47:18:
9f:80:0e:4e:80:45:aa:3e:91:c7:e2:ae:9a:f6:9a:
57:e2:85:3f:d3:62:e7:79:01:a9:8c:bd:d7:3c:65:
8d:50:1a:b4:12:5e:b7:ce:38:23:9d:0d:a4:1a:b6:
02:50:3c:02:0f:a0:26:bc:bd:30:41:de:14:6c:1a:
0f:02:23:29:fd:e6:9a:6e:4c:29:72:b8:3d:9e:91:
8f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FC:86:F6:04:0D:7B:BE:BB:07:0E:DF:C6:12:55:32:45:81:66:B5
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/OPyG9gQNe767Bw7fxhJVMkWBZrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.184.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:d0:84:d4:90:a8:b6:d8:b9:31:fd:47:f0:8d:fb:53:05:a8:
99:a3:d3:ab:59:b1:0d:21:ee:60:e5:ba:89:99:db:7f:8d:d5:
a0:d4:0e:8a:1b:cb:ce:d4:87:51:fe:76:dd:25:6f:94:2b:6d:
65:70:90:a1:6e:f9:d4:1a:5d:d5:d5:1f:da:ba:a3:3a:e4:65:
53:7d:85:e1:a4:91:54:1f:59:76:d8:34:f3:43:1e:4f:a3:e7:
d2:87:71:59:e8:2b:e5:10:e7:f9:d2:b9:b2:3a:47:e7:6b:51:
12:46:ca:36:5f:83:49:6f:95:b4:6f:80:d3:bb:45:6d:6d:41:
e2:b1:31:dc:87:11:95:07:e4:d0:44:92:0c:4f:4b:28:e9:9d:
df:c9:d1:36:7d:56:6a:04:7f:2d:21:ba:1f:aa:e3:16:6d:7a:
bf:ac:a2:d3:82:7d:2b:ea:77:fb:98:c2:14:13:61:c6:7e:d7:
a7:70:ed:7b:2d:18:ce:72:40:95:5b:1b:be:db:34:c9:41:73:
29:ce:0e:29:da:94:54:e2:d9:93:cd:58:ec:9c:e5:38:98:27:
bd:bf:9b:e7:67:44:d0:de:92:74:61:2c:be:c8:3c:5a:dc:84:
7c:6c:d5:09:04:17:c4:e1:4f:bb:88:7d:a2:ad:f3:90:5a:b2:
8d:8c:d1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:40:44 2024 by rpki-client on console-ams.rpki-client.org