Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/HmYbr_8TMNKPaRQYeDVv6g_F3h4.roa
File: HmYbr_8TMNKPaRQYeDVv6g_F3h4.roa (raw, json)
Hash identifier: 2qqjz/7uTV0/B37gAhdhLBIlqgpKYw5vco/nYCd4SuE=
Subject key identifier: 1E:66:1B:AF:FF:13:30:D2:8F:69:14:18:78:35:6F:EA:0F:C5:DE:1E
Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial: 018D5B9EA31CB754A96D62518762C1632E3C
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/HmYbr_8TMNKPaRQYeDVv6g_F3h4.roa
Signing time: Tue 30 Jan 2024 18:25:39 +0000
ROA not before: Tue 30 Jan 2024 18:25:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 45.157.138.0/24 maxlen: 24
193.56.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5b:9e:a3:1c:b7:54:a9:6d:62:51:87:62:c1:63:2e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Validity
Not Before: Jan 30 18:25:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e661bafff1330d28f69141878356fea0fc5de1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ba:2f:fb:94:c5:e2:03:33:34:8d:6a:6b:e1:
45:da:5d:6e:04:44:4a:81:ff:3b:03:89:e3:28:f3:
be:c1:c7:e2:c8:e4:fa:2d:c8:b9:ad:ef:eb:f4:40:
83:c1:54:56:ee:3e:ee:64:7e:1c:fd:8d:0a:a5:9f:
40:c4:a3:0b:88:53:44:df:d1:aa:60:09:d1:4a:a1:
82:7e:0b:72:d5:3d:78:6d:2a:e7:ae:23:c9:8d:36:
95:e1:c8:e7:cb:39:c9:df:65:20:31:7b:0c:a6:1c:
0b:80:e5:12:ea:c7:68:b1:41:4c:66:f1:ce:2a:55:
59:16:5c:d6:2c:27:ef:e6:de:11:ee:2e:5b:85:b4:
19:ad:e0:ef:6f:b9:ca:b8:f5:e0:7a:19:ab:6f:3c:
d4:f5:5b:29:1f:0b:9f:89:9c:f6:5c:63:10:17:1c:
83:e3:e0:19:55:1c:d1:18:c9:ef:3f:77:67:c6:38:
48:7a:f5:35:fe:e1:6a:89:ff:78:42:b1:d5:88:55:
46:72:46:fb:f5:40:8c:f0:50:78:8e:48:bd:81:2d:
a2:74:b0:dd:f1:31:bb:81:f4:1d:a5:d4:56:6b:75:
76:af:8d:66:d3:66:36:d1:6c:64:e1:0f:6a:ac:b4:
b1:67:0f:f5:d1:88:04:75:35:80:8d:42:a4:b4:fb:
3d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:66:1B:AF:FF:13:30:D2:8F:69:14:18:78:35:6F:EA:0F:C5:DE:1E
X509v3 Authority Key Identifier:
keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/HmYbr_8TMNKPaRQYeDVv6g_F3h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.138.0/24
193.56.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:8b:00:02:b6:bc:c0:58:c7:22:e9:a0:eb:24:63:aa:85:e5:
2d:e0:5b:0b:52:79:74:28:68:30:23:e0:73:6f:80:2f:e6:4a:
33:ed:ad:84:fb:96:11:96:76:98:57:b0:f4:f4:64:df:07:88:
3c:af:59:0f:28:46:53:5c:7b:81:f1:65:58:90:7c:4e:93:f5:
ce:d4:af:50:1b:9a:ef:ae:7c:59:7d:ce:6f:69:08:a9:2a:1f:
de:a8:47:0f:73:f3:ab:b2:24:a9:b3:48:25:50:26:1a:1b:17:
8c:22:5e:cc:49:b4:46:58:93:fe:e6:7b:e6:81:ea:93:e6:f0:
f5:4a:6c:2f:d7:3c:0a:54:d2:b0:72:ad:e6:54:56:b9:46:27:
53:fc:7a:2d:1f:f1:b3:2b:d0:44:0f:9c:d1:40:34:7a:5f:cd:
37:b9:cb:b0:7c:ad:24:74:9b:dd:46:8d:f8:95:7e:13:68:24:
0f:94:a2:ef:3b:b2:3c:19:e9:be:f0:2d:07:97:f0:a1:ce:d6:
1d:62:be:e8:45:6a:52:c8:9d:c9:c2:ce:62:b9:c6:a8:d5:fd:
6e:0f:67:66:d3:cc:94:e6:d8:45:27:bf:86:6e:ae:61:fd:fc:
6e:0a:2f:ab:f0:53:40:93:f4:af:a9:ef:d5:31:29:33:48:e7:
15:fd:fa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:01:06 2024 by rpki-client on console-ams.rpki-client.org