Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/ndPSPSpU2ABTDFk69DnGzO2CqI0.roa
File: ndPSPSpU2ABTDFk69DnGzO2CqI0.roa (raw, json)
Hash identifier: +IvNIU1Pvak6JKK1m7EcozXvT6C9YWy1R4B5moK5WOw=
Subject key identifier: 9D:D3:D2:3D:2A:54:D8:00:53:0C:59:3A:F4:39:C6:CC:ED:82:A8:8D
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 018CC4247466A4C290AF3E1B1ACE13A2CCAB
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/ndPSPSpU2ABTDFk69DnGzO2CqI0.roa
Signing time: Mon 01 Jan 2024 08:29:32 +0000
ROA not before: Mon 01 Jan 2024 08:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35112
IP address blocks: 45.8.125.0/24 maxlen: 24
45.8.124.0/24 maxlen: 24
45.8.127.0/24 maxlen: 24
45.8.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:74:66:a4:c2:90:af:3e:1b:1a:ce:13:a2:cc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Jan 1 08:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dd3d23d2a54d800530c593af439c6cced82a88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:71:22:d0:8e:83:4d:e4:69:68:22:cc:7b:
0e:be:c5:7c:ab:ce:dc:7d:54:59:3f:c2:7f:be:b2:
da:e2:70:dc:6a:c5:82:82:de:bd:30:b5:a2:f1:8f:
4c:bb:b5:fe:a3:a6:b8:48:af:8f:19:ca:38:3e:87:
97:e8:6b:db:d5:be:83:3c:24:35:bd:c0:a1:5d:e7:
3a:1b:ec:42:2b:a1:fc:76:7d:6a:36:3d:d5:ba:ca:
fe:35:bf:ca:87:7e:40:86:1f:da:22:07:1b:30:15:
d9:7a:f7:cf:d1:08:89:0e:8f:20:1a:5a:01:d9:81:
8a:cc:90:58:5b:a3:e2:8f:0e:4e:b5:49:fb:bf:4f:
9f:a9:4d:0d:aa:3a:10:45:4b:93:cb:33:86:4d:fc:
8f:58:44:e9:5c:32:ec:bc:c4:04:fe:90:c0:65:45:
14:a2:3e:47:f6:ad:f5:93:b5:1a:64:d5:d1:97:ec:
bb:e0:35:d9:ea:5f:33:79:e8:b8:a8:28:94:f0:4b:
14:96:a8:b1:22:05:0f:70:3d:f3:3f:9b:9b:c7:d0:
1a:39:97:37:21:f1:69:5f:7e:4a:1a:6b:f8:98:f8:
12:c0:29:6a:d9:b8:a8:bc:41:d0:d9:32:2e:41:39:
87:44:57:f6:e0:e6:71:49:b1:c2:e3:c1:ed:b5:d1:
af:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D3:D2:3D:2A:54:D8:00:53:0C:59:3A:F4:39:C6:CC:ED:82:A8:8D
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/ndPSPSpU2ABTDFk69DnGzO2CqI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.124.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:ff:eb:3a:81:8e:e2:b7:32:1d:e4:6a:4a:d2:89:cf:d5:fc:
9f:c3:23:a5:f6:bd:6d:7f:51:4c:3d:7b:0b:2b:e7:18:71:5e:
12:9b:b4:d9:4a:2e:27:56:ad:6a:9d:05:9b:8c:72:31:9c:8d:
75:a8:28:6b:3e:77:ac:ae:32:c9:b8:1a:18:9e:34:06:86:6d:
3e:9f:11:b0:ad:f0:b3:d3:5e:ea:b4:9c:23:3b:7a:0e:51:d4:
cb:d9:78:66:61:cb:5e:b7:ba:ca:eb:dd:ef:82:52:a7:ac:64:
ad:ea:a1:50:46:e7:b6:7c:dc:52:42:e8:3d:54:f3:a8:48:4b:
ca:03:19:03:87:52:c7:19:0f:cb:f7:d2:e6:ee:82:19:1e:ce:
58:ce:d0:6b:d8:1c:6c:4c:6d:7d:0d:e6:ea:fa:53:c9:b0:5a:
e9:65:25:e1:c8:23:96:25:44:06:db:4f:9c:79:f8:50:2e:30:
9f:cd:53:b0:f1:95:85:be:67:71:df:27:04:cc:c2:05:b0:29:
ad:de:b6:9b:e2:cf:e8:0d:f1:57:03:14:f6:b6:5f:7e:0f:ad:
47:5b:a2:8f:84:e6:d9:33:48:aa:94:0b:a5:1f:d1:09:90:82:
cd:fe:65:af:a0:8a:8a:a0:0c:ad:d0:47:00:33:b7:7f:21:63:
7e:dc:e8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:26:45 2024 by rpki-client on console-ams.rpki-client.org