Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/8iMVH1niMlNTpkT0JomcP-iiv5M.roa
File: 8iMVH1niMlNTpkT0JomcP-iiv5M.roa (raw, json)
Hash identifier: +m3jR2gHg/q/N7Mg99y7hewVffvge00T+3iDHU4mMZM=
Subject key identifier: F2:23:15:1F:59:E2:32:53:53:A6:44:F4:26:89:9C:3F:E8:A2:BF:93
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 018CC64B6958C29B8DB3DBECB6226EAE15A6
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/8iMVH1niMlNTpkT0JomcP-iiv5M.roa
Signing time: Mon 01 Jan 2024 18:31:20 +0000
ROA not before: Mon 01 Jan 2024 18:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136933
IP address blocks: 45.131.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:69:58:c2:9b:8d:b3:db:ec:b6:22:6e:ae:15:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 18:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f223151f59e2325353a644f426899c3fe8a2bf93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:15:14:f4:34:7d:37:fc:85:0f:40:c0:ff:
0d:69:0e:d8:92:0e:6e:02:4b:da:9d:58:79:0f:27:
57:c7:a5:ae:94:64:07:7c:ae:58:f0:39:26:17:ac:
53:58:ed:f6:ac:d5:9c:25:73:cd:1d:41:5a:13:54:
50:6b:3f:6b:e9:9c:d1:63:77:b7:df:7a:be:d2:02:
41:3d:ad:0c:85:9b:65:b1:a4:07:ef:51:53:15:5d:
b7:8e:a0:f1:82:2f:b0:d1:4a:d8:2b:2f:85:ad:b9:
f1:60:e6:94:45:09:44:ad:79:48:b1:ae:7e:d3:af:
73:9c:69:9e:b9:d7:fb:43:b4:f6:ee:35:8d:64:ec:
4c:41:e2:14:12:5d:57:97:e6:e6:e4:d5:7c:8b:a3:
51:73:a9:c8:44:93:c1:31:f2:16:d6:3e:c1:73:94:
0c:fc:e0:af:db:1a:22:6d:65:4d:33:74:b9:af:d9:
c7:f2:a6:f9:1a:bb:da:a7:7a:b1:23:df:38:56:fc:
d8:39:91:30:ae:e6:30:01:cf:54:82:b3:f3:d2:fd:
02:d3:d7:d0:56:d4:3e:5b:04:30:7c:e3:60:4b:27:
99:12:76:9e:1c:68:4a:d6:b2:6c:5e:de:19:4d:9e:
c3:35:35:c4:df:8a:69:00:46:b9:c1:11:d2:dd:a4:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:23:15:1F:59:E2:32:53:53:A6:44:F4:26:89:9C:3F:E8:A2:BF:93
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/8iMVH1niMlNTpkT0JomcP-iiv5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.178.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:13:79:ff:36:ee:36:7e:b7:25:12:b5:8b:b5:04:ec:33:0c:
0d:54:06:16:91:45:b3:f2:29:d7:a3:0a:d7:0d:77:91:b9:40:
43:5e:29:14:5f:81:b1:fc:14:a1:c5:7e:14:74:80:ae:1b:e5:
95:b9:0a:2f:f9:c3:d6:e4:cc:05:49:21:45:73:59:8d:95:0d:
e4:d8:d7:fd:7f:ef:fa:4d:4e:b7:48:7e:5c:a8:48:46:5c:91:
0c:87:10:f8:42:1d:78:32:d8:be:89:01:90:b1:a1:1f:76:0e:
67:02:dd:f7:83:a9:81:3e:f2:03:c8:e5:8f:e3:ed:8a:a7:a4:
1f:f0:4c:53:16:e4:db:0a:b0:bf:61:ab:dd:22:2f:b2:13:45:
d4:04:7e:bd:a4:00:60:dc:62:b7:32:05:81:b2:a0:7a:19:b2:
b4:2f:dd:f7:29:f6:fa:9c:4e:75:c1:72:e8:13:dc:54:49:52:
0b:e9:82:0e:36:0c:bf:13:93:ef:1c:7c:91:69:f7:e6:dc:dc:
71:25:dd:66:11:f8:e1:71:d5:05:ce:d5:98:fc:ea:97:3c:b4:
fd:77:da:e6:c3:d9:e8:a1:07:10:4b:89:f2:37:15:68:b2:21:
95:22:ed:e0:93:33:c3:59:0c:8d:d3:0c:92:35:6b:0a:44:0e:
19:89:6f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:11:37 2024 by rpki-client on console-ams.rpki-client.org