Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/cXfDxJN_mQjBwPAndy1rv4fKYBI.roa
File: cXfDxJN_mQjBwPAndy1rv4fKYBI.roa (raw, json)
Hash identifier: bbcG/BPsdQi31fTxEL+zlCg6HyPrAk13eeIT1OVI0Pw=
Subject key identifier: 71:77:C3:C4:93:7F:99:08:C1:C0:F0:27:77:2D:6B:BF:87:CA:60:12
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 018CC6B936851F0F1DA698DB9ED8F8B1BF0B
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/cXfDxJN_mQjBwPAndy1rv4fKYBI.roa
Signing time: Mon 01 Jan 2024 20:31:16 +0000
ROA not before: Mon 01 Jan 2024 20:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35758
IP address blocks: 45.84.46.0/24 maxlen: 24
45.14.73.0/24 maxlen: 24
85.209.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:36:85:1f:0f:1d:a6:98:db:9e:d8:f8:b1:bf:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7177c3c4937f9908c1c0f027772d6bbf87ca6012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:9b:97:ca:eb:c0:ee:6d:2d:5d:c4:44:ad:
6b:c8:40:66:a6:db:5c:67:51:4a:39:f9:89:ef:b8:
52:24:73:ff:04:6c:16:8d:67:41:fd:4d:ac:ec:44:
09:20:9a:d3:2c:f0:ad:7c:63:03:f8:72:8e:17:5b:
f7:a5:00:9a:fb:13:09:7c:97:01:99:d2:5a:1c:63:
4b:d3:d9:8b:9d:92:2a:1a:a3:9a:92:29:de:f5:7c:
75:7b:a0:1e:13:79:4c:07:1c:2b:6e:ac:f1:68:6f:
d1:63:57:17:39:0d:01:60:d0:54:1a:16:4e:92:26:
45:ba:68:29:d0:ee:2b:ee:e9:1a:1e:df:d7:c8:09:
12:4d:a1:3f:3b:92:cd:48:55:43:ae:8d:75:e2:8a:
64:ab:30:b4:a8:d5:6e:c2:21:27:ae:7b:d4:3c:92:
c4:b7:28:29:c7:34:05:d8:d0:2f:33:04:70:c1:29:
e1:8c:14:b6:b8:f6:dd:5d:78:0b:e5:c8:26:50:76:
0e:5f:60:b5:91:8c:b6:f3:25:74:45:94:8e:13:49:
7b:95:a1:9a:20:9f:ad:94:4c:dc:01:9a:96:31:69:
e4:7e:64:51:04:ef:8a:2c:c8:5b:e7:e7:88:d5:bc:
24:93:b8:6d:a3:a2:f8:b4:5d:0d:5b:c8:79:be:a9:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:77:C3:C4:93:7F:99:08:C1:C0:F0:27:77:2D:6B:BF:87:CA:60:12
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/cXfDxJN_mQjBwPAndy1rv4fKYBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.73.0/24
45.84.46.0/24
85.209.217.0/24
Signature Algorithm: sha256WithRSAEncryption
af:66:c0:cb:d9:49:46:41:d7:28:b6:f6:79:10:f6:58:22:2a:
66:41:2b:ed:e8:be:d2:6b:78:66:a4:a0:58:e2:3b:74:db:c6:
b3:21:0d:1f:56:98:1b:c1:17:56:b1:03:73:8f:40:7f:47:c4:
52:6a:76:2e:7c:48:c3:2c:02:e1:68:57:7f:73:b1:f7:6a:eb:
ed:97:1f:d9:e6:47:f9:73:4d:66:96:5f:77:7e:62:e3:c5:80:
4b:25:56:9e:ff:fa:48:00:ce:a9:ab:7a:68:b2:87:e5:f6:67:
8b:60:e9:eb:8e:8a:e7:6b:ef:be:a0:42:af:95:5d:e1:1c:a3:
07:ab:f9:5f:f1:3a:64:65:3a:73:b7:80:03:56:63:97:e9:b5:
f1:49:b0:8f:02:a3:1f:42:81:75:6c:4e:b0:63:f1:40:b3:3a:
c8:52:9c:45:51:e9:b0:a4:1b:85:b4:b1:68:b8:53:46:66:7f:
b1:3b:6f:af:24:2a:1b:77:fa:26:4e:aa:60:af:dc:33:d3:a0:
71:76:34:87:24:8e:74:33:f3:70:e4:c0:bc:3b:b4:89:1e:34:
9d:d3:17:97:e2:9f:4e:89:2b:4f:9b:da:e9:4e:c3:48:0f:ba:
39:6f:2d:8a:c4:24:a0:0f:27:9e:54:0b:7b:9c:7c:3f:71:6a:
23:69:8a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:29:15 2024 by rpki-client on console-ams.rpki-client.org