Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/heh2so4looMZ0v5MP1N-fG3TBEw.roa
File: heh2so4looMZ0v5MP1N-fG3TBEw.roa (raw, json)
Hash identifier: fU2kZkzTOMI/Qq8IjeSXF0dqMb2Ysnpe2CPhFx0C7do=
Subject key identifier: 85:E8:76:B2:8E:25:A2:83:19:D2:FE:4C:3F:53:7E:7C:6D:D3:04:4C
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 018CC492FEE6C86FBA8BDF81FE04EDEB4160
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/heh2so4looMZ0v5MP1N-fG3TBEw.roa
Signing time: Mon 01 Jan 2024 10:30:17 +0000
ROA not before: Mon 01 Jan 2024 10:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 45.85.204.0/22 maxlen: 22
45.134.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 08:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:fe:e6:c8:6f:ba:8b:df:81:fe:04:ed:eb:41:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Jan 1 10:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85e876b28e25a28319d2fe4c3f537e7c6dd3044c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e4:4e:09:d2:b2:06:46:e7:5d:3d:0b:6d:c0:
ea:06:51:c3:1d:95:90:0a:ca:f9:46:e7:53:16:0a:
6f:5d:09:20:07:35:d2:88:12:d1:e7:0f:33:e9:a6:
75:cc:cc:58:d1:1a:3f:f7:65:e7:54:99:6e:76:f4:
b0:47:dc:28:53:c3:34:c3:6e:54:b0:d8:e1:23:1d:
65:6d:b9:af:95:32:14:ad:77:c2:77:f4:01:83:d0:
f6:c0:09:b2:5e:57:b4:db:08:66:a2:e3:03:da:30:
08:87:b1:f3:9c:14:c8:83:60:48:42:c0:3a:bd:02:
ef:61:cc:22:3a:8a:fc:04:80:d8:a0:a6:47:4e:d8:
9a:5f:3f:44:65:23:27:02:74:d8:b7:f3:c0:96:6a:
23:28:db:8f:95:b8:e2:75:c7:b3:f6:f2:68:a4:23:
ea:03:11:3b:c6:6c:1b:c6:71:01:89:36:f1:d8:d6:
4f:28:81:10:b8:ac:da:18:b2:90:02:5c:99:ee:7b:
b4:32:2b:89:eb:82:fa:d2:9c:fa:01:fb:db:5e:0a:
93:9e:be:ce:19:3f:0c:3f:08:6c:ed:0c:99:c3:2d:
87:df:4b:b0:22:85:38:19:79:9a:2c:a2:a2:94:87:
8e:e4:9b:75:de:f2:22:78:f9:dd:98:cf:96:c8:83:
9b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E8:76:B2:8E:25:A2:83:19:D2:FE:4C:3F:53:7E:7C:6D:D3:04:4C
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/heh2so4looMZ0v5MP1N-fG3TBEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.204.0/22
45.134.92.0/22
Signature Algorithm: sha256WithRSAEncryption
24:ef:09:0c:3f:ad:3a:5a:d8:bc:c6:0a:da:2c:9e:58:78:53:
ff:da:f8:14:3c:93:99:dd:e6:8d:eb:d2:ef:ef:bc:28:9b:13:
d0:1f:05:02:9b:e3:96:53:d8:63:1f:b4:53:c5:80:2b:f0:2a:
62:da:c9:f0:9a:13:89:2e:e2:42:5e:34:b0:fc:ac:87:b1:5d:
36:5e:d3:08:18:40:e5:72:08:dc:34:1c:4d:88:b5:03:e6:11:
91:c0:f6:53:0d:de:54:8d:97:b8:93:cd:81:6d:69:fb:96:39:
a8:70:d2:03:a9:86:a1:46:53:34:93:c6:d6:27:07:4b:5d:4d:
4b:9b:ba:2e:49:12:34:b1:cd:4e:9c:7e:cd:36:3f:73:dd:43:
05:58:87:7a:a9:f1:35:2d:0c:26:5a:96:ee:05:bf:10:70:56:
96:44:ec:68:1f:fd:19:67:78:23:fe:12:8d:ed:3d:d7:f9:c5:
56:a4:d4:3a:27:3a:7c:22:f1:2d:05:2b:de:64:38:69:af:f7:
55:9d:0c:6e:29:dc:c8:38:35:d9:dc:e4:32:b2:5b:69:d2:d1:
b3:58:3d:e8:de:cc:e3:51:37:c4:ed:37:af:78:8a:6a:09:a9:
c0:ff:7b:40:8b:71:a1:e4:a2:4d:9a:c1:37:cd:7f:a5:27:1e:
92:5f:e8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 14:35:14 2024 by rpki-client on console-fra.rpki-client.org