Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/XWUCdbcUoqyGTnzozScOVFuZdc8.roa
File: XWUCdbcUoqyGTnzozScOVFuZdc8.roa (raw, json)
Hash identifier: IIZn1h1mv6EN9BQjZE+XMdyxO5DhYws8rm7iS1kMn1s=
Subject key identifier: 5D:65:02:75:B7:14:A2:AC:86:4E:7C:E8:CD:27:0E:54:5B:99:75:CF
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 018CC4244FFB68607CC35F05DE11D220C527
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/XWUCdbcUoqyGTnzozScOVFuZdc8.roa
Signing time: Mon 01 Jan 2024 08:29:23 +0000
ROA not before: Mon 01 Jan 2024 08:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9051
IP address blocks: 45.155.132.0/22 maxlen: 22
45.155.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:4f:fb:68:60:7c:c3:5f:05:de:11:d2:20:c5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Jan 1 08:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d650275b714a2ac864e7ce8cd270e545b9975cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cf:31:1f:27:15:50:c6:dc:9a:5a:81:4f:c7:
00:6d:0a:3f:2d:7d:87:af:0b:8e:37:d2:dc:ba:ec:
49:d0:d4:43:e1:82:ba:70:31:c7:65:1c:fb:94:d1:
b9:0c:8f:97:8b:01:f0:75:c0:f5:c9:21:6b:4f:64:
89:13:34:8c:b0:a3:e9:81:89:55:86:9f:28:64:10:
e0:03:d4:eb:95:38:c4:a4:9f:4c:53:b5:cf:94:63:
03:a5:48:6b:79:3a:f3:16:f3:c7:af:d6:e6:7c:8b:
d0:9e:45:ea:9a:75:15:a4:92:bf:38:70:1c:bd:08:
ac:c6:67:2b:7d:64:8d:52:1b:55:45:ef:2c:86:98:
e0:a9:40:c3:7b:7a:fe:2e:05:14:44:27:56:87:9c:
12:30:f7:b8:97:d8:07:74:fc:95:36:30:e6:9b:ea:
0a:24:50:e2:9f:6f:4c:21:80:ce:c0:e5:e9:c1:48:
8d:f8:79:7e:25:1a:7e:1c:96:15:60:2c:31:f3:34:
89:c1:3a:11:5d:aa:9a:85:5b:b2:17:b9:bf:62:9f:
10:e8:0f:a0:38:9c:d2:65:a6:b8:5a:54:0d:ec:65:
0c:1d:7a:7b:dd:fb:a7:2a:4a:0f:9b:83:2e:c2:31:
4d:bd:91:6a:fb:ff:84:7d:46:1b:15:29:4d:a9:ea:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:65:02:75:B7:14:A2:AC:86:4E:7C:E8:CD:27:0E:54:5B:99:75:CF
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/XWUCdbcUoqyGTnzozScOVFuZdc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.132.0/22
Signature Algorithm: sha256WithRSAEncryption
14:11:c4:d1:3b:ac:94:4a:2d:95:d9:b4:45:f5:21:f6:e0:75:
65:1e:d0:28:32:b2:cf:9f:eb:51:5f:22:cf:fc:3f:7e:3e:34:
79:4b:66:fd:e7:20:64:aa:1c:0c:45:e2:e0:c8:17:df:a6:eb:
92:df:68:74:4b:e3:af:6d:81:f8:c6:f6:13:7b:7b:70:d2:69:
88:d8:1d:ee:cd:4c:21:9a:b5:28:93:6d:5f:98:40:83:0f:7f:
06:d4:c3:b9:77:4f:7a:d6:c1:f5:8b:42:50:61:b6:ec:86:13:
b4:fa:3d:47:cf:bc:81:6f:86:e7:55:18:10:c5:50:4e:af:7c:
dc:60:bd:ae:fb:d0:d0:a8:1f:ac:62:64:84:ee:54:c8:4a:cd:
27:5d:6e:e2:20:56:8b:c6:e4:9c:25:a7:3b:8a:e8:0d:2a:ff:
b1:2b:9b:12:41:dc:d5:fc:5d:f4:02:de:23:c3:ea:39:11:23:
bc:8a:25:98:bf:64:5a:9b:ca:97:10:2e:cb:0e:9a:48:74:92:
57:eb:68:56:2f:30:6f:85:ad:54:29:ca:d5:7f:3a:94:a8:89:
58:be:f4:92:b3:b9:a5:84:bc:e3:2b:8a:fc:97:98:f2:5a:9c:
4e:08:17:b0:07:0c:90:f1:d3:7b:88:14:07:18:4d:d1:9d:aa:
37:b0:87:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:39:57 2024 by rpki-client on console-ams.rpki-client.org