Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/QrsxFuX8qVNl4hrZtV8LeWEn6E4.roa
File: QrsxFuX8qVNl4hrZtV8LeWEn6E4.roa (raw, json)
Hash identifier: Y3KGG9mcWpFpaX8hd/rS5mO5V29UCVA8x5BjvsKXy78=
Subject key identifier: 42:BB:31:16:E5:FC:A9:53:65:E2:1A:D9:B5:5F:0B:79:61:27:E8:4E
Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial: 018CCA2A725ACC0B8D7C1343A2DE8802E6D3
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/QrsxFuX8qVNl4hrZtV8LeWEn6E4.roa
Signing time: Tue 02 Jan 2024 12:33:48 +0000
ROA not before: Tue 02 Jan 2024 12:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208183
IP address blocks: 45.152.229.0/24 maxlen: 24
45.152.228.0/22 maxlen: 22
45.152.228.0/24 maxlen: 24
2a0f:6500:1000::/36 maxlen: 36
2a0f:6500:2000::/36 maxlen: 36
2a0f:6500:3000::/36 maxlen: 36
2a0f:6500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:72:5a:cc:0b:8d:7c:13:43:a2:de:88:02:e6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
Validity
Not Before: Jan 2 12:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42bb3116e5fca95365e21ad9b55f0b796127e84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:c8:cf:96:2d:ea:50:ff:96:0d:c2:59:5a:
3b:fc:08:b9:95:dd:ca:fe:f2:e5:6f:b0:fb:f0:05:
e4:3f:dd:32:19:18:ec:82:08:20:6a:c8:21:f5:de:
06:a7:6d:3e:3e:a1:83:94:aa:ea:f4:99:bf:ce:c8:
3e:58:95:c6:45:80:e5:8f:83:51:d0:b9:0a:a4:92:
8f:f8:88:9d:4a:c6:86:e9:07:6a:7b:8f:3f:a8:0d:
82:75:a2:84:cc:ef:bf:86:76:07:64:fd:cc:9d:54:
cb:10:3e:65:2c:5f:d6:71:bc:02:25:c6:cc:f7:8c:
fe:96:02:05:f4:cb:5f:d6:19:ce:19:29:6a:f2:55:
45:ef:7f:9c:29:82:2a:8f:7f:d2:71:2f:c9:40:60:
4a:3a:b1:e4:d4:4f:7b:59:1b:84:ac:3d:90:c4:32:
7d:68:21:60:17:2e:ff:9d:45:ff:cd:aa:e6:5d:dd:
a2:ff:79:8e:a9:a9:02:d4:96:d3:f1:ef:10:61:80:
d3:68:ed:57:bd:a2:c5:43:1d:6e:78:40:97:f8:4e:
d5:9b:21:ab:a5:51:f8:d1:13:2f:e3:8c:30:14:a7:
59:03:f2:5e:02:c5:18:50:e6:d4:09:ed:89:7c:fd:
04:2b:67:fc:42:6f:2c:2b:3f:f7:02:dd:db:22:fb:
00:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BB:31:16:E5:FC:A9:53:65:E2:1A:D9:B5:5F:0B:79:61:27:E8:4E
X509v3 Authority Key Identifier:
keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/QrsxFuX8qVNl4hrZtV8LeWEn6E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.228.0/22
IPv6:
2a0f:6500::/32
Signature Algorithm: sha256WithRSAEncryption
69:56:a2:c3:a5:92:50:4c:55:75:15:e1:04:9e:35:7f:9f:cc:
52:5e:0f:f8:f8:89:e9:47:e5:8e:e1:21:71:d0:18:62:61:3b:
55:4d:e7:0a:11:cc:ad:40:ea:8e:95:c5:e0:9d:4f:33:48:72:
1d:d1:61:da:07:8d:62:28:e0:30:fd:f0:10:50:b6:50:44:4f:
2a:3f:e5:18:67:65:89:72:f6:f0:d0:a5:9a:a4:af:c7:3f:29:
19:db:a7:99:a4:7c:1a:dc:7a:8b:b9:09:a4:83:b9:76:1e:8d:
65:eb:a4:79:cc:a0:2f:a9:f6:dc:d7:76:9c:6f:59:c3:8e:d1:
c8:d6:ca:ed:22:3b:cb:62:67:64:92:41:49:ad:83:b9:c8:1d:
9b:dd:f3:54:0c:91:5f:13:0e:5d:da:10:01:17:be:11:e0:22:
f5:25:2a:d7:ce:1c:d8:c0:a8:2b:e0:ed:93:f1:23:51:2a:47:
8b:ec:2a:dc:62:de:45:16:5d:dc:40:75:45:ca:01:19:93:ba:
de:dc:80:64:c0:93:a0:4d:91:41:1a:88:18:7b:7e:f3:57:91:
b4:79:19:3b:fa:ab:16:d3:45:9c:a5:15:d1:99:a9:ef:7c:8a:
19:84:7c:2b:cd:0e:1f:71:7b:be:3b:75:17:23:9e:7e:d7:0c:
ae:08:5f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:07:10 2024 by rpki-client on console-ams.rpki-client.org