Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/sqT7nmVkUkJvvyd5gC1xNotFgRk.roa
File: sqT7nmVkUkJvvyd5gC1xNotFgRk.roa (raw, json)
Hash identifier: fa4XHvNcdGHzF3qFul60yIUwjY9RaNaS/BPYdgc6h7w=
Subject key identifier: B2:A4:FB:9E:65:64:52:42:6F:BF:27:79:80:2D:71:36:8B:45:81:19
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E2F0EB3DD4ABD791706C164EE6DDF
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/sqT7nmVkUkJvvyd5gC1xNotFgRk.roa
Signing time: Tue 02 Jan 2024 08:33:13 +0000
ROA not before: Tue 02 Jan 2024 08:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29066
IP address blocks: 45.95.172.0/22 maxlen: 22
45.95.172.0/24 maxlen: 24
45.95.174.0/24 maxlen: 24
45.95.173.0/24 maxlen: 24
45.95.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:2f:0e:b3:dd:4a:bd:79:17:06:c1:64:ee:6d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2a4fb9e656452426fbf2779802d71368b458119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:67:2c:03:e2:d0:39:a0:16:6d:54:ba:b7:
e5:2b:29:fa:ca:7e:b8:92:31:b5:66:33:b1:1a:fd:
d5:76:36:e2:70:ef:5a:cb:f7:2a:87:95:13:68:99:
13:7c:33:09:b9:43:0a:94:75:9c:bb:c8:d3:67:16:
0e:16:c0:21:5b:65:e6:c7:56:5f:e9:db:f8:59:87:
6e:ce:5f:cd:b5:62:21:94:29:c6:a8:12:11:bf:37:
df:41:ac:cf:9b:37:55:00:54:6f:dd:13:ba:08:a2:
63:18:f2:68:7f:c0:7a:55:61:70:aa:5e:f9:d9:d0:
7c:e5:56:6f:12:35:81:93:9e:c6:97:09:af:04:36:
56:40:cc:f6:c3:ca:b8:e5:88:31:c6:86:f3:87:ac:
ea:92:90:4e:c2:c1:92:75:25:cb:92:2c:21:3f:76:
94:b6:2d:5e:8c:ab:18:a4:07:4e:42:78:5e:53:7e:
62:c0:a9:3a:7a:1e:9b:e8:87:07:13:b7:38:1d:2b:
c1:89:f2:f4:b7:7e:f0:fa:0b:f8:b7:34:03:9d:8e:
2b:5c:0f:7d:b2:a0:d0:c3:69:f4:55:d4:d8:73:c7:
77:16:19:5d:af:53:b8:6a:e9:1e:98:86:bf:f7:f4:
f6:15:fe:00:d1:8d:04:71:87:0d:d5:d2:f5:f7:4b:
82:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A4:FB:9E:65:64:52:42:6F:BF:27:79:80:2D:71:36:8B:45:81:19
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/sqT7nmVkUkJvvyd5gC1xNotFgRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.172.0/22
Signature Algorithm: sha256WithRSAEncryption
89:89:b4:71:98:46:e9:45:f6:bc:31:85:cb:3c:2a:4c:62:50:
85:ee:95:2f:21:4a:8d:06:1d:cf:a4:80:30:ad:b6:21:0f:ac:
d1:25:c0:7a:9f:61:a1:67:fa:92:7f:c1:76:f4:64:c0:dd:6c:
2a:04:05:ed:cc:54:6d:ee:74:af:d5:16:db:66:ff:fe:ac:01:
ed:71:5d:c1:8b:cf:26:44:55:4e:05:f4:be:23:4b:1d:21:20:
b3:67:4d:d6:01:fa:9d:e3:d8:e2:2a:ae:dd:6b:9c:ea:9d:87:
7a:6d:c9:e3:4a:f6:c6:79:a1:ff:f8:f8:74:eb:ac:9e:93:b7:
4f:ae:67:61:ec:b1:ab:5b:48:8b:0d:1a:39:b4:16:9b:5c:e3:
9c:35:33:c0:0e:c2:94:57:2c:65:73:85:40:a2:0e:6c:7c:48:
c7:55:85:b1:5b:c0:41:cc:11:9d:e9:c1:4e:15:86:f0:83:eb:
4d:de:ee:54:54:78:10:d6:82:50:20:c1:c4:70:10:d4:81:8d:
09:b1:90:35:aa:e4:37:5c:af:a4:96:f7:5b:86:b7:8f:b8:53:
04:f8:dd:9b:b6:52:29:e8:34:9b:e8:5a:e7:22:c0:fd:62:dd:
6e:72:fa:ef:41:92:4c:a9:df:d7:20:75:d6:50:bd:0b:30:40:
e6:89:9b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:45:33 2024 by rpki-client on console-ams.rpki-client.org