Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/hy4z2Uos8XuJxYGMigaW2Yb30MI.roa
File: hy4z2Uos8XuJxYGMigaW2Yb30MI.roa (raw, json)
Hash identifier: Hrg1ofojYBRoM76pKd5RKTX2fsvvQPI/ZaDfrOa1ojE=
Subject key identifier: 87:2E:33:D9:4A:2C:F1:7B:89:C5:81:8C:8A:06:96:D9:86:F7:D0:C2
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018CC50155040D44AAA42E2CCAA4518E6A4B
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/hy4z2Uos8XuJxYGMigaW2Yb30MI.roa
Signing time: Mon 01 Jan 2024 12:30:48 +0000
ROA not before: Mon 01 Jan 2024 12:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210837
IP address blocks: 45.89.62.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:55:04:0d:44:aa:a4:2e:2c:ca:a4:51:8e:6a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 12:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=872e33d94a2cf17b89c5818c8a0696d986f7d0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:79:38:2b:92:0b:01:12:6e:67:33:fe:bd:00:
10:0a:b8:e2:05:af:f7:ed:4d:f1:49:87:fa:3a:fc:
51:df:d6:99:2f:63:b8:85:52:47:96:97:e2:ef:4b:
d1:81:20:01:09:36:09:0a:1b:ee:ee:0e:4f:7e:86:
e5:b4:97:32:56:44:5d:19:33:13:31:1e:34:0d:ed:
54:53:22:33:cc:62:e4:75:b0:0d:5b:d9:c7:67:17:
94:56:a2:d3:09:f8:ea:b2:cf:12:3f:d2:d0:9b:48:
df:e2:97:1d:2d:10:df:f2:0c:b6:81:3f:dd:9a:b5:
3d:79:3c:3f:a3:63:41:f4:46:38:33:87:55:28:ab:
0b:ff:94:2b:ab:cc:29:46:b8:66:26:16:4c:2b:af:
5a:fb:86:f9:3d:a5:0f:4b:09:22:bb:c8:d1:c6:41:
50:93:4c:54:50:a9:01:b2:40:41:aa:ff:7d:65:93:
71:c0:91:f3:a2:d2:e5:79:53:48:70:eb:d3:ac:43:
59:b0:87:df:33:6b:2e:b7:d7:a4:a7:18:84:3c:17:
3e:02:07:65:e7:91:3d:54:e6:47:2d:26:c9:b0:db:
ec:00:9b:2c:e7:c0:69:5b:c3:5c:5a:04:71:55:60:
dc:0f:8f:61:a6:b4:8b:c4:d5:ea:45:65:01:c8:3c:
88:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2E:33:D9:4A:2C:F1:7B:89:C5:81:8C:8A:06:96:D9:86:F7:D0:C2
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/hy4z2Uos8XuJxYGMigaW2Yb30MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.62.0/24
Signature Algorithm: sha256WithRSAEncryption
e8:11:26:70:ea:cb:90:37:7a:45:dd:d3:c5:40:c2:78:c7:5b:
65:c0:86:8c:6b:1d:11:0f:b4:c4:6b:5a:84:1a:c7:0e:d9:79:
c5:02:fb:2c:a4:f6:c1:1e:92:09:bf:44:8e:61:ea:df:29:31:
63:dd:28:e8:40:8e:30:4d:07:d8:66:4e:6d:e9:4c:57:b9:a6:
26:b1:7e:b4:09:63:45:e1:1e:cd:13:3b:f9:d7:8d:a4:a7:17:
a7:d7:bf:e6:7b:46:a8:22:5e:50:39:3e:0a:43:19:ae:6c:30:
57:54:e6:0e:1b:33:4b:d6:8f:d1:2c:96:53:8b:a6:66:6b:5b:
2a:31:e3:dc:28:74:f8:c8:24:6e:ff:db:17:35:69:17:9b:52:
bc:cd:6e:44:82:90:fa:d9:0b:d9:17:d7:3c:27:1b:cc:9d:53:
b3:f0:bc:2b:b4:54:69:52:2f:7f:82:26:e3:d9:bb:8b:d5:78:
6a:58:cd:71:bf:5c:b1:69:c8:e2:56:06:b7:a8:89:25:4f:00:
35:dd:25:21:e0:a9:1a:bc:0d:a2:95:d3:c7:88:5a:8a:14:73:
10:af:4e:e8:57:d2:47:fe:03:f7:d3:63:12:35:93:3b:70:52:
65:0c:5f:83:54:aa:22:b4:14:74:1c:d7:ef:77:b6:27:23:72:
af:9a:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 17:13:00 2024 by rpki-client on console-ams.rpki-client.org