Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/jO-V0f7GA4fOEWb20-4_t4pJ5Rg.roa
File: jO-V0f7GA4fOEWb20-4_t4pJ5Rg.roa (raw, json)
Hash identifier: h2KqJxX+xdGpGNslXDiYmoBfr1soy2toBPqs2bemrtU=
Subject key identifier: 8C:EF:95:D1:FE:C6:03:87:CE:11:66:F6:D3:EE:3F:B7:8A:49:E5:18
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018CC794FA6750FAE468AC6C843835E11EBA
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/jO-V0f7GA4fOEWb20-4_t4pJ5Rg.roa
Signing time: Tue 02 Jan 2024 00:31:18 +0000
ROA not before: Tue 02 Jan 2024 00:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135392
IP address blocks: 45.84.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:fa:67:50:fa:e4:68:ac:6c:84:38:35:e1:1e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 2 00:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cef95d1fec60387ce1166f6d3ee3fb78a49e518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:c3:12:f4:71:ca:e3:b3:f7:f9:ca:2c:38:
d6:f1:e7:f9:f5:f8:a2:7c:62:53:7c:25:de:5d:22:
46:4b:e2:22:dc:3d:46:56:ab:f6:a4:21:43:89:39:
59:05:17:39:c8:90:9e:6d:28:cd:7b:ed:6f:72:79:
68:42:90:bd:14:61:de:44:19:17:bb:cc:d3:e8:28:
b5:2e:9a:08:6a:e9:46:67:cf:10:a6:d7:56:b2:a6:
a4:ca:07:44:f6:d0:48:25:41:81:79:4c:be:c6:09:
66:0c:bd:87:94:93:59:79:94:9d:c0:12:fb:bc:99:
23:ee:a2:c1:7c:d1:9d:04:da:0d:5d:8c:66:12:5a:
e5:eb:b6:fb:0f:8b:76:d5:9d:3b:4c:31:2b:b5:f1:
73:55:74:5f:5b:38:84:f9:e5:28:b9:41:98:86:c6:
ad:b4:6b:d9:70:47:d4:c2:3b:d6:71:07:ad:01:d7:
5e:17:65:aa:88:5b:a8:92:71:c3:d3:bc:00:63:0f:
c2:b8:72:4c:6d:15:de:e3:9a:ee:1b:6a:52:18:bb:
35:0d:7b:2b:5a:01:a0:b5:9d:6e:82:57:36:28:f0:
8e:12:c3:5f:93:4c:f6:ad:6c:91:11:89:5c:fa:72:
80:fe:bf:2e:58:c4:b8:11:e9:1b:44:a8:68:5c:32:
8a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EF:95:D1:FE:C6:03:87:CE:11:66:F6:D3:EE:3F:B7:8A:49:E5:18
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/jO-V0f7GA4fOEWb20-4_t4pJ5Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.242.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5b:cf:b2:8d:0a:2c:29:0a:0c:8a:e5:5c:7e:5b:67:7c:60:
a5:91:2e:55:13:d5:2f:4e:27:a3:66:86:a7:9f:5a:8a:94:12:
20:3a:92:0d:cb:76:f8:6f:27:77:81:42:c0:82:38:ea:69:0b:
2a:0b:b7:d6:98:be:80:aa:ca:8e:a1:4c:2b:dd:16:0f:46:cf:
02:87:8d:ab:8e:2e:e3:54:df:6b:30:3d:62:f0:52:5a:27:41:
bd:ee:fb:1f:db:81:1c:53:9d:35:b5:1c:3c:c9:8a:38:7a:f0:
91:7d:4a:9c:8d:3f:4d:83:10:c6:21:1e:e2:18:84:4b:0f:ab:
65:1b:5a:66:9b:58:23:d6:91:aa:e6:5c:60:ce:71:45:fa:b0:
4b:e2:a8:ee:3b:8b:43:07:34:b1:fa:4b:e6:71:af:4f:01:4d:
2e:12:9f:b9:f5:a4:21:4d:d7:d2:0f:41:34:79:72:f3:68:e9:
f7:dc:13:56:cd:76:95:cd:86:3b:69:02:19:ef:e6:dc:13:5c:
63:d8:40:e3:31:4a:7a:0b:4b:f3:6f:c2:ef:5a:18:d0:8b:a7:
76:d3:68:de:af:c4:b0:e3:9e:27:29:dc:c9:94:a1:22:7d:e6:
04:1f:ca:4f:ee:2e:53:31:12:a5:67:cd:fe:86:04:d7:c0:5b:
db:44:4f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 07:37:41 2024 by rpki-client on console-ams.rpki-client.org