Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/d9MfxV0MqlPk55u3YHSonFrAWNw.roa
File: d9MfxV0MqlPk55u3YHSonFrAWNw.roa (raw, json)
Hash identifier: amgyzSwF/r2YhaGKcphsq62MxVgaXOhOibJWN+XiPZo=
Subject key identifier: 77:D3:1F:C5:5D:0C:AA:53:E4:E7:9B:B7:60:74:A8:9C:5A:C0:58:DC
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 018CC64B6738412DADC2F0AA5FECF0E18BF2
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/d9MfxV0MqlPk55u3YHSonFrAWNw.roa
Signing time: Mon 01 Jan 2024 18:31:19 +0000
ROA not before: Mon 01 Jan 2024 18:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55000
IP address blocks: 45.132.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:67:38:41:2d:ad:c2:f0:aa:5f:ec:f0:e1:8b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 18:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77d31fc55d0caa53e4e79bb76074a89c5ac058dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3b:45:b7:f7:4e:cb:3c:0c:7c:dd:31:7b:f0:
80:71:21:50:fd:97:7c:c8:4d:ef:2c:77:ac:9c:d4:
66:16:ea:fd:1b:66:e7:86:66:f2:22:c6:44:ae:2d:
85:63:b4:40:ef:2b:ca:62:48:17:b5:d0:6c:45:8f:
83:65:cd:b9:2d:f9:b6:b5:d2:ac:7f:ca:7b:7f:ce:
92:9a:05:db:1f:dc:07:da:1e:84:be:b1:e5:af:76:
7e:29:28:44:16:e4:ae:25:21:2f:71:e8:f3:41:20:
16:72:d2:1a:2c:f2:78:1b:47:e3:7d:d2:0b:dd:02:
d4:22:35:27:59:88:b6:8b:60:84:2f:2d:7e:a3:49:
59:4f:1a:f0:58:bd:17:f5:2d:20:0c:0c:46:0b:24:
0c:4e:8f:1a:b9:6a:6a:ba:e2:71:18:82:98:b7:5a:
cc:f4:94:18:fc:ad:95:87:a4:4f:02:f9:14:0b:88:
82:a0:89:c9:56:cb:e4:ee:1b:69:70:fb:10:af:17:
92:05:14:81:6c:c3:4c:1a:c4:f1:4a:e6:55:d5:cb:
ae:58:3e:7c:f4:94:1d:1c:54:b7:f4:b9:52:d2:62:
ef:27:17:13:4a:28:f9:51:55:59:f8:cf:a5:9a:c0:
fb:2d:9a:5b:fa:3d:13:d1:83:72:55:96:0e:61:0b:
79:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D3:1F:C5:5D:0C:AA:53:E4:E7:9B:B7:60:74:A8:9C:5A:C0:58:DC
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/d9MfxV0MqlPk55u3YHSonFrAWNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.236.0/22
Signature Algorithm: sha256WithRSAEncryption
89:a8:6b:e8:1b:d9:82:19:67:09:20:8c:57:42:c6:d6:c9:a5:
50:34:fc:a9:f4:42:18:7e:c1:7c:5f:ef:27:62:65:a7:9f:54:
c0:cf:88:fd:cd:2a:4d:64:89:11:ba:c3:a9:4c:4d:40:88:a8:
c8:bb:09:0b:51:4e:7b:b9:8e:99:c6:f9:c8:65:7b:79:01:16:
14:87:16:11:fb:a1:74:d6:7d:1c:05:86:f5:41:91:47:43:0b:
f2:dd:a1:a1:b1:19:ab:a2:ad:3c:08:96:a5:fc:ec:a3:b5:39:
93:6e:12:bd:5f:53:f4:43:21:10:58:77:4a:06:d3:df:06:ae:
27:d5:51:a2:32:3e:d2:e4:1e:66:06:87:23:4d:4a:e2:13:07:
50:52:6b:38:b1:8b:58:a1:16:ca:a6:5b:7e:75:de:84:85:a2:
a5:e0:d6:44:a2:81:d5:37:04:28:58:21:74:38:55:cb:ae:83:
7e:53:3f:de:30:2c:60:c8:4d:67:44:8e:3e:a0:16:37:3f:20:
ff:48:4d:43:51:56:dd:80:75:67:ce:bc:66:a1:e6:b8:d1:da:
7e:22:cd:76:79:0e:c5:12:2a:c0:9f:c9:ef:a0:8e:a6:f8:9e:
37:55:32:ca:a7:9b:09:ae:15:92:d5:c2:65:c2:27:11:03:d5:
39:83:9d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:04:28 2024 by rpki-client on console-ams.rpki-client.org