Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/b2b5xVLNvhTOZDh5ylp5ELt8Iw0.roa
File: b2b5xVLNvhTOZDh5ylp5ELt8Iw0.roa (raw, json)
Hash identifier: +5umBJqzwK277oLq3TMGXS5/3OZEWrI/GAwwdC1jpZo=
Subject key identifier: 6F:66:F9:C5:52:CD:BE:14:CE:64:38:79:CA:5A:79:10:BB:7C:23:0D
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 018CC9BA657F893986591FECB970CC6090DD
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/b2b5xVLNvhTOZDh5ylp5ELt8Iw0.roa
Signing time: Tue 02 Jan 2024 10:31:25 +0000
ROA not before: Tue 02 Jan 2024 10:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.129.54.0/24 maxlen: 32
45.129.55.0/24 maxlen: 32
45.129.52.0/24 maxlen: 32
45.129.53.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:65:7f:89:39:86:59:1f:ec:b9:70:cc:60:90:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Jan 2 10:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f66f9c552cdbe14ce643879ca5a7910bb7c230d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:30:dd:7a:79:fa:fc:7c:8b:6f:ec:3c:63:12:
28:62:4d:bd:00:4e:99:3e:21:1c:4d:f1:df:70:4f:
c9:77:d8:02:6a:e6:49:72:57:5e:a3:d0:2e:d0:a1:
f7:da:c2:ef:1b:d9:b4:5a:5f:35:f4:bf:6e:e1:75:
d6:03:b9:2b:36:72:c9:79:c7:f7:3b:db:ef:d3:17:
3f:82:f7:93:54:c2:ef:bc:77:bb:ea:d8:41:5c:00:
0d:10:24:a8:26:d7:ac:2f:49:91:3a:ba:6a:00:f2:
86:91:52:4f:37:a3:df:e3:79:87:28:c5:ed:e8:99:
44:7c:9a:5a:08:47:e7:fe:34:9d:28:4b:ea:5e:3c:
24:19:00:c6:2b:2c:aa:81:7a:59:41:fa:e6:e1:a3:
32:8f:75:a3:a7:94:9f:5e:9a:e5:0a:bd:8f:5b:37:
39:d1:9e:a8:95:fb:6f:e2:cb:47:fc:3d:a1:b6:92:
63:77:8c:54:97:48:73:18:be:75:50:2e:d3:54:95:
7c:66:5d:99:23:76:c7:60:89:52:24:a2:ea:55:e1:
1a:a4:7e:c3:9e:cf:33:f4:b4:2e:97:d3:c3:30:6e:
88:3f:ac:e1:37:21:01:c1:bf:22:78:a1:11:01:61:
b6:00:44:7b:e3:3a:24:fa:22:27:69:38:9e:8d:b2:
7f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:66:F9:C5:52:CD:BE:14:CE:64:38:79:CA:5A:79:10:BB:7C:23:0D
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/b2b5xVLNvhTOZDh5ylp5ELt8Iw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.52.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:ce:39:3b:ff:31:92:ba:43:29:b2:47:38:a6:1d:c8:ad:a9:
72:c0:c1:a2:7c:7d:c0:6a:2d:96:d0:a1:38:ed:bd:33:39:53:
f4:8e:26:6b:d3:83:81:6c:20:cf:66:42:c8:60:64:f7:b1:9f:
ff:48:bf:84:84:a7:26:60:30:dc:36:8a:99:f0:9f:98:59:08:
ab:b5:91:0e:44:8d:6d:86:f8:98:5b:35:5c:af:a4:b9:84:a9:
5e:4f:36:0c:58:39:4f:6e:3a:7e:65:b2:ce:d2:12:7f:cb:c9:
34:df:00:8d:32:31:21:63:ae:0c:ef:ad:03:ce:da:12:bf:a2:
13:82:fd:55:77:1c:d8:1f:8c:b6:f1:74:28:22:52:2a:d9:25:
bb:7f:f6:01:3b:bb:01:70:4b:33:b3:36:3f:da:e6:fe:8b:95:
38:e0:2b:3e:30:2e:76:0b:9d:0a:fe:02:a2:df:a1:8a:0e:a3:
d4:5d:21:e5:55:b3:c7:70:69:a1:cd:7e:e2:47:54:ae:5e:c1:
cb:3d:e2:59:2c:35:63:76:18:77:d1:ee:a3:f9:7f:a3:e6:b9:
d8:80:d8:47:ae:11:7c:c4:29:6b:74:54:ca:17:0e:17:2a:d9:
67:80:ed:df:e1:e5:ad:79:f0:89:52:af:c5:12:8f:d0:3f:1e:
e4:73:6e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:16:15 2024 by rpki-client on console-ams.rpki-client.org