Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/U44f0Esp89YGYMsCr5L_WhuoYPs.roa
File: U44f0Esp89YGYMsCr5L_WhuoYPs.roa (raw, json)
Hash identifier: it5x4R4Sgb4MOAFRVJXf29dJr2GfGnQmDtpHT8UhDSI=
Subject key identifier: 53:8E:1F:D0:4B:29:F3:D6:06:60:CB:02:AF:92:FF:5A:1B:A8:60:FB
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: 018CC2DB43B663065EC4E8CDDDC4E26C7F74
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/U44f0Esp89YGYMsCr5L_WhuoYPs.roa
Signing time: Mon 01 Jan 2024 02:29:58 +0000
ROA not before: Mon 01 Jan 2024 02:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397423
IP address blocks: 45.11.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:43:b6:63:06:5e:c4:e8:cd:dd:c4:e2:6c:7f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: Jan 1 02:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=538e1fd04b29f3d60660cb02af92ff5a1ba860fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:76:04:21:2f:1d:d9:39:03:95:c4:30:48:
66:ba:66:2e:46:1c:f0:7f:ce:9a:35:f5:c4:f6:06:
b7:91:e0:10:b9:00:e3:22:c3:a4:d6:40:2f:5f:72:
d1:93:16:1b:84:23:04:9c:32:e1:f9:db:23:67:9d:
f6:32:48:54:46:66:07:df:06:de:5e:bc:d8:c1:c0:
df:4d:bf:3c:b8:ad:4e:a6:69:30:3d:10:57:92:16:
ec:fb:03:6b:42:07:47:78:d4:ed:73:2b:90:49:54:
aa:10:33:b2:62:91:2d:d3:d7:c9:cf:1a:43:54:9f:
89:51:c8:c8:c0:2f:63:b3:4f:8e:7c:dd:89:1e:e7:
98:16:64:31:0e:91:03:73:ee:60:ae:19:ea:40:ea:
af:bb:41:92:43:56:60:d0:6e:2c:d4:1d:a7:59:04:
1c:b3:c4:90:4e:a3:20:09:d9:f4:ec:cb:94:ae:ce:
a0:52:66:ad:2d:3e:5a:9b:f4:4e:ac:ab:ca:32:87:
82:4a:9e:d9:56:78:68:f9:11:7b:09:3f:eb:bb:f1:
f6:ef:a0:ef:b5:1f:9e:47:7f:cc:88:45:f9:df:31:
6b:ef:7e:16:f0:6c:41:94:59:83:da:fe:02:a4:18:
89:0c:37:38:84:30:ba:c2:93:65:b5:99:a5:4f:e5:
e8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8E:1F:D0:4B:29:F3:D6:06:60:CB:02:AF:92:FF:5A:1B:A8:60:FB
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/U44f0Esp89YGYMsCr5L_WhuoYPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.186.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:bc:37:eb:87:5b:d2:4c:6b:5d:6f:4e:26:f3:ad:01:2e:fd:
09:b5:b6:48:a7:35:2a:86:71:a0:e6:ce:24:60:50:18:f9:41:
35:35:6b:31:6a:16:6f:12:39:2e:cf:00:d4:d6:2c:fd:47:a4:
89:39:a2:50:57:4e:e9:ea:d6:ec:30:ab:6b:50:c4:c7:8d:ca:
57:6c:89:62:da:57:ca:07:86:0d:5f:4f:54:ab:58:2d:41:3b:
d7:d3:c1:af:6d:d7:49:09:15:de:f4:f8:38:48:ec:14:4d:c2:
6f:0a:e2:0a:50:be:4e:0b:77:42:2c:d2:c0:1d:48:50:d1:0b:
30:38:fa:1a:77:1d:cd:8e:2d:59:03:6d:1e:80:22:48:2e:cc:
07:5e:10:48:30:09:0c:23:47:5d:10:bf:d8:5b:51:b6:6d:0c:
d5:df:29:6e:b5:b5:38:d5:00:e8:94:f6:e0:11:7f:6a:18:c2:
e8:95:5a:33:73:1d:d8:64:4c:9c:b5:2f:d6:a2:34:5e:97:a7:
49:d4:82:2d:d3:ab:1e:98:23:5b:7b:d2:f8:62:b6:62:ed:4c:
30:a5:1b:6c:79:79:e6:70:87:77:a0:df:f3:3c:c4:a6:1d:a5:
62:d2:a5:14:6e:80:ec:0c:2c:1b:24:69:d4:a2:fc:8f:8c:e7:
f3:6d:76:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:50:58 2024 by rpki-client on console-fra.rpki-client.org