Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xJRDdgU1QKvWLcDDvgD65_2zgH4.roa
File: xJRDdgU1QKvWLcDDvgD65_2zgH4.roa (raw, json)
Hash identifier: VGOKCDEQsA5H4jgg9RyTcHL7RXja6Sw6T7nUmI++BMY=
Subject key identifier: C4:94:43:76:05:35:40:AB:D6:2D:C0:C3:BE:00:FA:E7:FD:B3:80:7E
Certificate issuer: /CN=c4729af13d3d156f411976b176e554fa671d76f7
Certificate serial: 018CC56DFC2E9F84C50D686E958028E07A52
Authority key identifier: C4:72:9A:F1:3D:3D:15:6F:41:19:76:B1:76:E5:54:FA:67:1D:76:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xJRDdgU1QKvWLcDDvgD65_2zgH4.roa
Signing time: Mon 01 Jan 2024 14:29:28 +0000
ROA not before: Mon 01 Jan 2024 14:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202629
IP address blocks: 45.153.29.0/24 maxlen: 24
45.153.28.0/24 maxlen: 24
45.153.28.0/22 maxlen: 24
45.153.31.0/24 maxlen: 24
45.153.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:fc:2e:9f:84:c5:0d:68:6e:95:80:28:e0:7a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4729af13d3d156f411976b176e554fa671d76f7
Validity
Not Before: Jan 1 14:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4944376053540abd62dc0c3be00fae7fdb3807e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:b6:36:48:de:e4:2a:56:59:39:95:d7:b4:
b0:b5:cb:7b:c3:d1:ca:cb:a5:68:1f:6a:81:e9:2d:
36:de:8f:b3:d5:60:cd:e6:c8:8a:8e:2c:41:31:ff:
0d:64:35:de:c1:69:44:ee:34:04:5b:4d:20:5b:b9:
60:e7:38:40:a7:1b:16:c0:f1:1c:51:0a:7d:69:2d:
05:00:f0:8f:f3:b0:05:69:7d:ac:80:09:64:6a:8f:
22:23:cd:64:88:45:b2:da:33:12:97:74:ce:73:7e:
15:7b:82:0d:a6:34:f4:9b:b4:d1:7b:93:98:0f:ed:
22:ac:19:3d:e0:08:2a:8b:3d:6a:b3:98:c4:d3:c2:
2c:0e:bb:29:0e:f8:7a:0e:fb:c1:b3:cf:0e:d2:35:
ce:4c:35:9d:b4:da:69:88:8f:94:0b:a1:51:88:2b:
db:e6:5b:6b:b7:56:8a:e9:d9:03:cd:2c:5d:59:2f:
77:28:21:53:3a:10:e8:4e:a8:e5:08:d9:c5:91:23:
f9:1a:7d:7f:68:8f:c9:3c:9c:26:29:06:b4:ce:a5:
4b:1f:13:93:2c:da:df:4f:6d:01:82:89:f3:de:85:
9f:c9:62:82:5d:91:92:b0:95:7b:17:fc:47:97:08:
26:66:0c:e7:ad:b8:b2:d0:5f:1f:b6:e7:d7:58:9d:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:94:43:76:05:35:40:AB:D6:2D:C0:C3:BE:00:FA:E7:FD:B3:80:7E
X509v3 Authority Key Identifier:
keyid:C4:72:9A:F1:3D:3D:15:6F:41:19:76:B1:76:E5:54:FA:67:1D:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xJRDdgU1QKvWLcDDvgD65_2zgH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.28.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:61:5b:28:37:2f:3c:fc:0b:00:6d:b2:e3:a9:6e:6a:8e:76:
7c:27:6d:71:63:8a:dc:ba:bd:37:05:a2:95:8a:b9:d5:02:42:
c7:56:f7:85:98:d8:f6:f5:1a:ff:f9:39:cc:cf:f7:da:37:f9:
4d:61:94:77:7b:e7:d4:10:52:af:b8:a5:4a:35:f1:61:7e:3a:
9a:87:84:0b:9c:4f:6f:02:1d:79:72:01:75:ea:66:6c:69:18:
cb:06:58:df:ef:31:c2:ec:04:98:f6:29:59:74:4a:a2:11:32:
3e:91:75:4d:ad:3f:ef:05:cc:59:24:04:81:a3:c4:85:1d:ad:
98:57:fa:18:4b:aa:04:a9:45:8f:53:84:74:ef:fd:ac:28:e2:
45:cd:eb:60:99:9a:21:95:e9:12:e8:75:90:21:ef:a9:3a:c5:
16:72:60:7c:61:75:01:64:9b:60:bc:6b:2f:e6:2e:29:2f:0e:
e5:de:f2:24:68:04:ff:52:7f:fb:61:13:ae:2f:77:11:89:05:
27:7a:e8:f8:30:db:6c:f3:c7:bf:1b:05:de:bd:78:16:12:1e:
c6:46:e2:4c:80:4e:86:b7:ab:62:3e:e3:27:9a:8d:db:3b:ce:
77:b1:bc:38:b6:81:48:d9:68:a5:e4:f0:b1:ba:e1:7e:32:75:
53:5e:fc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:52:52 2024 by rpki-client on console-fra.rpki-client.org