Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/d8UY1xlKOS8PDLsKbNdTJqx7uJQ.roa
File: d8UY1xlKOS8PDLsKbNdTJqx7uJQ.roa (raw, json)
Hash identifier: lbL3APpx/7nLNrlokOfg21kPkJpXCBSg9YgsqIqakgM=
Subject key identifier: 77:C5:18:D7:19:4A:39:2F:0F:0C:BB:0A:6C:D7:53:26:AC:7B:B8:94
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 018CC492FFAFB4D8EBFD02BF4B61DDD474EF
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/d8UY1xlKOS8PDLsKbNdTJqx7uJQ.roa
Signing time: Mon 01 Jan 2024 10:30:17 +0000
ROA not before: Mon 01 Jan 2024 10:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20454
IP address blocks: 45.131.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:ff:af:b4:d8:eb:fd:02:bf:4b:61:dd:d4:74:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Jan 1 10:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77c518d7194a392f0f0cbb0a6cd75326ac7bb894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:bd:8b:83:f0:b2:1a:13:6d:b5:8b:dc:eb:
58:10:9b:4f:11:07:c6:1d:9d:73:d5:e3:e6:db:1c:
81:2b:44:ea:4a:2f:dd:5d:2c:e6:d1:27:21:e2:12:
c3:20:32:9d:2a:76:ed:b3:77:e0:f4:4f:e0:da:b5:
06:b8:90:64:89:7a:a9:bc:37:4e:fa:f5:7f:27:2e:
2a:42:ba:92:6c:84:b6:4d:9a:87:3a:69:ed:cd:ac:
5a:28:c9:7d:94:5c:9c:6b:1e:31:a7:ab:b3:bf:54:
90:3c:7d:0e:76:52:f5:46:68:0c:70:9c:38:a5:d8:
2a:d3:81:e7:51:28:6c:16:e7:34:18:87:19:65:dc:
a1:13:81:96:89:b6:70:11:6b:5d:fc:20:71:4b:0c:
52:0f:bd:23:d2:30:11:4c:51:f0:14:d9:a5:77:5b:
e0:98:3b:e6:b5:94:65:40:f5:be:63:d1:89:60:b3:
27:c5:b2:2e:21:4b:49:ec:59:99:19:56:2c:49:b0:
e0:1e:5d:e4:fe:80:cd:67:74:3d:b7:26:9c:a8:d3:
b8:fa:99:65:34:60:90:41:5a:fe:f4:c0:25:a7:60:
43:fb:06:da:78:39:39:b6:2a:81:1a:58:ad:d0:ee:
cb:51:29:36:59:74:17:22:67:01:bc:b4:9c:f8:19:
bb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C5:18:D7:19:4A:39:2F:0F:0C:BB:0A:6C:D7:53:26:AC:7B:B8:94
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/d8UY1xlKOS8PDLsKbNdTJqx7uJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.12.0/22
Signature Algorithm: sha256WithRSAEncryption
20:dc:8f:aa:a2:42:1d:54:a2:d4:7e:7a:c2:2b:21:b5:6b:54:
b1:56:9d:44:5e:96:b6:e5:9a:e1:1d:e4:96:98:47:36:10:8a:
78:f8:60:e8:34:67:df:41:1f:c8:90:23:ec:e2:33:89:e6:d8:
02:de:e1:ee:f3:c9:e6:fc:f1:5e:49:cd:64:58:5f:45:af:bc:
01:d5:83:36:77:d2:6e:0e:e2:fd:fd:5d:79:e9:bc:8e:9d:f8:
2a:15:45:7f:13:e2:03:6d:42:04:e1:0b:1a:53:b0:e6:ae:81:
a0:ca:c3:71:46:90:d6:32:16:b9:62:8e:f6:6a:6f:ba:7f:4d:
2f:0b:1b:81:6e:7e:59:de:5a:45:d3:7d:f1:46:03:3b:cf:f4:
17:34:48:d3:42:d4:d1:c8:7b:65:c9:60:0c:11:0c:ac:3a:00:
6b:e1:4a:77:cc:07:a9:2f:0f:ca:ca:1e:74:de:bd:59:c6:76:
8a:63:91:24:d7:c3:c0:65:40:d9:e2:65:1b:65:ca:b7:c0:19:
4c:4d:25:c8:be:18:2c:84:ee:2b:35:99:06:28:8e:f5:03:8e:
d7:53:04:d3:69:7b:81:55:3e:d9:b2:6b:34:9a:8d:47:0a:23:
58:3f:b2:24:90:dc:94:d4:c7:bf:79:66:f1:53:2b:4b:e0:09:
ff:6b:32:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:34:32 2024 by rpki-client on console-fra.rpki-client.org