Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/DwNPCBue1Jf0iyGVvw_N9rL0JYw.roa
File: DwNPCBue1Jf0iyGVvw_N9rL0JYw.roa (raw, json)
Hash identifier: ZQwsCdIrP7hz1GNiymCD6U+ym8UBnpYSTh6NuhRvcBc=
Subject key identifier: 0F:03:4F:08:1B:9E:D4:97:F4:8B:21:95:BF:0F:CD:F6:B2:F4:25:8C
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 018E99CE1A82BAFD09EAD01ECA865F6AA7D1
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/DwNPCBue1Jf0iyGVvw_N9rL0JYw.roa
Signing time: Mon 01 Apr 2024 13:16:44 +0000
ROA not before: Mon 01 Apr 2024 13:16:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212853
IP address blocks: 45.81.252.0/24 maxlen: 24
45.81.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:99:ce:1a:82:ba:fd:09:ea:d0:1e:ca:86:5f:6a:a7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Apr 1 13:16:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f034f081b9ed497f48b2195bf0fcdf6b2f4258c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e6:9c:e5:da:4f:c5:2b:06:7c:b4:c7:28:fc:
64:ed:24:04:c6:97:a3:b7:ef:f7:29:1f:b6:c4:b7:
4e:04:2c:c2:42:8e:20:5f:04:f9:df:d2:4d:4f:3b:
29:e3:f1:96:11:28:55:01:10:cd:23:14:21:23:e2:
3c:10:23:83:01:74:14:02:6a:5b:5f:bf:96:e3:0f:
09:c2:48:90:a0:1f:10:21:e9:ff:80:a6:3f:e2:28:
61:58:e2:04:19:9e:4f:06:8a:7b:a8:97:8f:49:a9:
3f:be:4c:41:60:3e:f0:7f:f2:48:71:25:aa:da:22:
68:ee:ec:2d:45:59:2f:8e:4f:b8:db:84:c7:0a:50:
43:fd:02:68:81:42:7b:f6:b7:1f:bb:04:e5:b7:0b:
58:a8:a9:f3:5f:44:40:e2:3f:d0:3e:9b:b8:6b:f1:
98:e7:03:cb:5b:47:df:ea:79:e0:5c:53:eb:72:b4:
ac:2d:a2:87:7b:03:8f:ff:7a:28:27:14:b9:30:78:
bc:75:51:7f:47:f0:7c:1e:6d:f0:cb:58:ec:66:8f:
ef:57:58:ba:78:f0:b4:52:2a:c2:dc:bb:3b:85:cf:
81:8a:e5:0b:45:9f:e8:19:eb:d5:c4:5b:c3:91:0a:
96:2b:f9:22:2e:74:cf:e0:28:d2:04:87:10:58:70:
bc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:03:4F:08:1B:9E:D4:97:F4:8B:21:95:BF:0F:CD:F6:B2:F4:25:8C
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/DwNPCBue1Jf0iyGVvw_N9rL0JYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.252.0/24
45.81.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ef:9a:76:d3:f0:92:50:16:14:6c:1a:f1:5b:71:f4:9e:cd:
ba:3a:75:d6:6b:55:4d:67:65:f2:f0:1e:90:77:31:23:fc:f2:
2b:aa:87:56:6a:dc:35:bb:39:d2:07:e6:97:71:e6:f8:b5:50:
b0:95:6d:15:5b:c5:eb:82:3c:db:cf:51:ee:67:76:da:5c:4b:
2a:9a:84:dc:2f:16:fb:ef:88:f4:2d:35:d4:25:58:dd:f9:de:
8d:33:5e:37:19:78:81:bc:9d:30:d5:f9:67:47:71:28:c2:53:
ae:c4:f0:01:d9:36:18:63:59:ce:fc:71:d0:a2:cd:27:6b:6a:
69:43:49:09:f8:17:90:be:fc:60:62:66:20:b4:72:b0:8c:19:
36:a8:84:c9:ea:58:6b:65:2a:97:21:1f:f8:53:13:e2:5b:69:
16:e4:10:e9:d5:2d:bc:13:d5:3a:b2:2b:83:1f:d6:4f:3f:8f:
4e:f4:0c:f6:4e:30:dd:c2:81:a5:cf:18:ae:73:f1:c7:72:c5:
4c:dc:e1:12:1d:2e:c0:e4:ef:41:d3:ef:ed:e5:09:c3:c6:3d:
ad:52:6c:4b:b3:a1:0b:e2:b0:6d:3b:74:e5:76:c2:7c:82:52:
d9:ba:ca:8d:c3:9d:46:b7:b5:66:47:1f:8a:d4:aa:80:a6:b7:
1d:18:80:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:14:24 2024 by rpki-client on console-ams.rpki-client.org