Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/osAskbvjAc3q7pIFIuTMN5t1kgE.roa
File: osAskbvjAc3q7pIFIuTMN5t1kgE.roa (raw, json)
Hash identifier: TofNtkYjwKc281rCTm348ME5GCfGL8fX9+fQ1y7cIvQ=
Subject key identifier: A2:C0:2C:91:BB:E3:01:CD:EA:EE:92:05:22:E4:CC:37:9B:75:92:01
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018CC50152D632DDDD0F246DAE416F84FB6B
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/osAskbvjAc3q7pIFIuTMN5t1kgE.roa
Signing time: Mon 01 Jan 2024 12:30:47 +0000
ROA not before: Mon 01 Jan 2024 12:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203735
IP address blocks: 45.89.62.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:52:d6:32:dd:dd:0f:24:6d:ae:41:6f:84:fb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 12:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2c02c91bbe301cdeaee920522e4cc379b759201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:eb:9f:ea:4a:a0:53:85:66:54:28:b5:31:
f7:73:a1:94:cc:23:f7:73:52:dc:4a:7b:d8:04:96:
7c:61:7f:e2:ed:96:86:90:f0:1b:74:79:a3:7e:3c:
02:c2:ec:e4:69:fa:5b:8a:ba:38:c6:f3:cb:4a:a0:
a1:ab:d7:e3:5f:6c:59:40:bd:aa:c5:59:82:dd:6e:
13:24:9d:6f:6d:66:26:e3:e0:7d:5f:c9:03:1d:89:
28:31:e4:bd:49:9f:55:da:3a:90:1c:c9:41:c7:b6:
3e:7a:b5:cb:b8:f1:85:a5:c2:82:d5:8a:55:ad:8f:
a5:b9:63:6f:1b:5d:40:c5:90:a6:00:c9:f2:5d:dc:
2e:08:d7:04:8d:02:a5:a5:e8:00:1f:b4:a3:84:99:
a1:ad:7d:ea:59:1e:41:73:c0:a9:1a:60:3f:42:e7:
6a:d8:6b:38:69:9a:26:0c:7d:f8:bd:d0:bc:9d:8d:
b9:ca:d2:f9:e8:b8:bc:c7:24:47:c5:4d:91:b2:20:
a3:06:bd:ea:59:04:28:ca:e5:b3:58:6e:4e:69:a3:
3f:a3:11:42:f6:9d:ce:a7:4a:20:81:84:28:29:ca:
a4:30:5b:04:7b:5f:ce:c8:8a:c9:46:6f:2d:9f:83:
a0:6e:56:c5:a5:58:b4:ab:e1:0f:41:db:92:13:ed:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C0:2C:91:BB:E3:01:CD:EA:EE:92:05:22:E4:CC:37:9B:75:92:01
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/osAskbvjAc3q7pIFIuTMN5t1kgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.62.0/24
Signature Algorithm: sha256WithRSAEncryption
62:5d:8c:d2:f1:93:0b:d2:ec:48:80:72:6f:72:bb:e5:0e:38:
f1:aa:42:d3:84:b6:4f:fb:ed:f8:b9:2d:72:71:88:b2:1f:60:
ea:da:d6:23:ef:8a:26:71:47:92:7b:6d:07:12:8b:0d:24:62:
86:f6:9b:76:07:2f:a9:9a:a4:bb:23:6a:d8:27:ec:57:3d:41:
f9:b0:a6:39:b5:a6:86:17:76:df:dd:f2:e1:fa:88:8a:05:8c:
d7:8a:66:fc:d5:51:94:5c:9d:be:b2:40:5c:df:91:25:9e:78:
89:1a:9b:ce:6d:50:6f:82:e2:b4:7c:08:1c:11:9f:e7:a5:97:
31:63:15:70:4a:35:51:db:a2:f1:4d:4d:22:c2:2f:dd:9d:83:
e3:96:a4:58:56:15:96:69:11:a7:bb:1c:ee:ae:6e:e2:fd:7d:
3a:5e:fd:13:8d:c0:69:b1:f0:f8:3c:f2:83:fa:72:02:ef:9a:
3d:50:01:5a:03:ff:2b:67:c9:3a:55:77:71:e3:95:3f:44:44:
10:ae:2d:ba:5f:b8:ab:a8:58:3e:38:dd:54:53:04:9f:ec:2e:
92:a8:3a:42:c7:65:7e:d3:64:9e:6c:3f:27:40:62:65:40:b0:
5b:e1:60:18:a7:66:7c:6a:94:79:0c:4e:ca:18:cd:3b:5b:5a:
d4:1a:09:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:36:45 2024 by rpki-client on console-ams.rpki-client.org