Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/LH4kKyYgZqHypMiZh2S_R9qDsoY.roa
File: LH4kKyYgZqHypMiZh2S_R9qDsoY.roa (raw, json)
Hash identifier: 0Zz2HrB/JnveoMq7SRxxwSfNGE+ceIZiw4H8BmykzZQ=
Subject key identifier: 2C:7E:24:2B:26:20:66:A1:F2:A4:C8:99:87:64:BF:47:DA:83:B2:86
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 018CC500E1A508F07B8175658700AE38DFA8
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/LH4kKyYgZqHypMiZh2S_R9qDsoY.roa
Signing time: Mon 01 Jan 2024 12:30:18 +0000
ROA not before: Mon 01 Jan 2024 12:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56309
IP address blocks: 45.136.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e1:a5:08:f0:7b:81:75:65:87:00:ae:38:df:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 12:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c7e242b262066a1f2a4c8998764bf47da83b286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ee:86:a5:07:3e:2c:40:52:68:22:e6:8b:aa:
4a:31:88:83:80:ca:58:75:52:42:7c:3d:2b:2f:00:
44:07:c3:95:f7:89:72:c7:de:7a:2d:1c:ad:62:e8:
77:0f:93:0b:77:cc:7a:69:d8:45:36:44:ad:42:0c:
66:88:91:1b:a9:07:97:f7:43:ef:3b:13:3a:4a:2e:
82:55:ab:5e:de:45:6d:a5:ac:5d:4a:23:4c:c7:bb:
00:47:10:ff:66:fd:bc:12:2b:eb:3b:dd:de:63:e7:
92:80:a7:af:ed:c3:8e:39:d7:90:2a:9f:1d:86:6b:
10:0b:95:c0:ea:9a:4a:10:e7:92:e2:f6:d4:52:a9:
3e:e8:14:0a:83:9c:8c:8d:1f:c4:4a:f1:27:e8:d2:
cb:be:72:b1:13:19:dc:d8:86:10:cc:7c:c6:d8:c4:
09:ac:aa:40:14:f6:67:a8:b6:02:a4:7c:43:6d:7c:
3f:a5:cd:bf:9a:07:17:62:2b:3c:8a:f2:2a:0f:11:
a5:dc:f1:f2:1a:38:ce:a5:60:14:81:2e:0f:6d:c1:
c9:2c:9f:8a:a2:bd:f0:e9:e8:67:ca:29:bd:33:51:
14:f6:90:58:c1:c0:63:f8:c0:59:2a:3b:a7:fe:aa:
53:99:90:a4:f2:b1:cc:d2:50:78:a6:54:58:47:5e:
b7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7E:24:2B:26:20:66:A1:F2:A4:C8:99:87:64:BF:47:DA:83:B2:86
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/LH4kKyYgZqHypMiZh2S_R9qDsoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.236.0/22
Signature Algorithm: sha256WithRSAEncryption
61:f8:03:0c:e6:99:fc:22:0c:95:3a:a7:05:43:42:fa:e9:94:
30:e2:d7:ca:94:6a:4a:b2:eb:3d:e7:f8:6b:a9:94:51:38:52:
9d:92:c4:1e:75:bd:18:95:14:5d:72:32:04:f3:87:64:08:e9:
2f:11:ad:30:71:c6:bc:99:14:6c:fa:4b:79:06:f6:69:da:c1:
a5:71:8f:ea:51:94:e5:52:04:07:2d:e6:1a:0d:e7:fe:4f:50:
fe:b9:7a:a9:de:87:6e:90:8d:e2:fb:eb:42:31:c9:01:7a:ff:
8f:6c:99:c7:86:e5:26:c3:28:23:53:c0:90:d7:9b:36:9e:16:
b9:ac:99:fe:76:bc:cf:b8:b5:61:16:92:40:a6:98:5e:78:1c:
ce:3b:25:8b:72:19:05:4f:aa:82:37:a1:87:e7:b8:1d:82:79:
0b:d9:63:a9:85:6d:af:02:b2:e8:ee:69:e9:da:33:63:e6:30:
c3:b7:69:a8:19:62:16:25:63:ee:2b:41:25:5f:1c:7d:84:dd:
72:78:f1:4a:9b:aa:31:d8:81:af:fe:2a:49:c8:3d:f4:8e:02:
9c:ed:d5:c8:ea:03:c8:7a:d8:0e:44:e0:ce:1b:3b:b5:bf:65:
6c:39:ce:3a:9b:cb:4b:f2:9f:53:a9:1f:c5:2b:23:77:4a:46:
d6:dd:10:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:06:23 2024 by rpki-client on console-ams.rpki-client.org