Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/TpyjtwQEdKzPwUWjG9GdF0qhC0A.roa
File: TpyjtwQEdKzPwUWjG9GdF0qhC0A.roa (raw, json)
Hash identifier: 16Maci+VJb49JEg/c0AH/koI1qMMXSZgTVncY+WqpGs=
Subject key identifier: 4E:9C:A3:B7:04:04:74:AC:CF:C1:45:A3:1B:D1:9D:17:4A:A1:0B:40
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 018CC4245079A55357CB3596DECB47FAAD8A
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/TpyjtwQEdKzPwUWjG9GdF0qhC0A.roa
Signing time: Mon 01 Jan 2024 08:29:23 +0000
ROA not before: Mon 01 Jan 2024 08:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208007
IP address blocks: 45.155.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:50:79:a5:53:57:cb:35:96:de:cb:47:fa:ad:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Jan 1 08:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e9ca3b7040474accfc145a31bd19d174aa10b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:b8:62:92:01:5c:ed:72:b0:9e:db:d0:f5:
29:08:08:2c:18:24:22:7f:c1:a4:58:01:74:7b:de:
e0:28:a6:ef:da:68:be:0c:94:92:a6:5a:af:0b:b3:
4f:2c:0e:4a:25:ff:d0:f7:8e:81:cd:ff:03:32:a8:
bc:f9:b8:73:99:90:93:6d:f6:63:d4:15:71:00:75:
3c:f9:25:21:da:df:94:42:e5:61:fc:0d:f2:2a:08:
73:89:54:94:61:d4:b3:f9:f5:84:d3:0d:f4:91:4c:
4b:c9:d4:6e:c7:09:b6:61:36:62:30:b8:9d:9e:0f:
e2:74:70:3c:74:e7:4e:cf:b8:c8:a4:b4:cf:0b:c5:
ef:f2:e6:29:0b:17:3d:19:69:6b:35:0d:8f:03:4d:
a5:22:44:dc:56:a6:f2:fe:b0:1f:c4:18:3a:de:bf:
23:44:49:85:39:38:31:a3:e7:17:4b:b0:2b:3d:fe:
5c:cb:cc:6e:84:e8:ac:9b:0b:e6:4b:f8:22:f0:3f:
21:37:92:1f:85:9d:f3:9a:90:5d:58:1e:8b:da:31:
d3:30:28:d9:98:22:8e:cf:66:02:10:b5:96:6a:17:
c9:bc:ca:28:08:64:3f:bf:85:c3:68:1e:58:5f:35:
ca:e1:bd:82:60:f8:45:de:54:54:5b:2f:b4:3a:14:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9C:A3:B7:04:04:74:AC:CF:C1:45:A3:1B:D1:9D:17:4A:A1:0B:40
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/TpyjtwQEdKzPwUWjG9GdF0qhC0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.135.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ad:26:1e:51:c0:f8:5e:6d:92:26:ff:d0:e3:61:cd:5d:45:
39:24:5b:be:c9:dd:ae:c4:72:4e:b3:54:2d:c4:04:42:54:88:
dd:fc:c1:77:28:20:7a:03:b3:e2:1f:0c:cd:64:d0:58:1c:27:
89:bc:d5:f5:d0:c0:04:98:db:93:36:32:4e:53:4f:32:e5:00:
1d:c9:7f:37:e5:d6:8a:5d:55:20:8f:07:cd:50:cd:27:7b:a4:
bd:90:c3:29:30:c4:1a:30:45:6c:2f:6d:fd:a6:63:16:3a:f0:
88:e7:0d:ef:2a:70:82:dc:37:54:d5:0d:8c:31:68:e4:0e:e9:
74:01:b2:72:0f:dd:3a:e0:89:8c:b4:5a:2c:f2:df:bf:55:ab:
cb:83:3e:d3:8e:11:74:c9:58:d7:eb:95:a7:f8:1a:78:68:55:
09:b5:bc:36:b9:b6:60:b0:88:8c:1a:21:6f:d4:ce:e0:bb:ed:
45:87:ce:bf:d7:d0:99:0b:f9:ef:67:dd:e5:3a:2d:2e:a0:cb:
f2:03:ba:59:08:7e:9f:8e:3c:01:87:c7:5a:e5:de:36:5d:12:
a2:00:0a:74:b3:82:ca:4a:f5:bf:d8:26:93:86:ce:e7:9b:ca:
26:c0:1b:cc:d9:d8:a2:7d:e8:71:1c:51:e5:41:24:f3:7d:d8:
49:ff:94:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 10:14:05 2024 by rpki-client on console-ams.rpki-client.org