Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/hVtuEp3gqHniHLR5Ayof1VLmNcQ.roa
File: hVtuEp3gqHniHLR5Ayof1VLmNcQ.roa (raw, json)
Hash identifier: 2Otmx5KJwqaJkPJXpX+wFbH5YXUCkcyChRa+vmc/pRo=
Subject key identifier: 85:5B:6E:12:9D:E0:A8:79:E2:1C:B4:79:03:2A:1F:D5:52:E6:35:C4
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 018CC348AD7D6627E84253FA7722018D7C1D
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/hVtuEp3gqHniHLR5Ayof1VLmNcQ.roa
Signing time: Mon 01 Jan 2024 04:29:29 +0000
ROA not before: Mon 01 Jan 2024 04:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201838
IP address blocks: 45.136.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ad:7d:66:27:e8:42:53:fa:77:22:01:8d:7c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 04:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=855b6e129de0a879e21cb479032a1fd552e635c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6f:38:72:28:e3:ea:fe:10:19:d8:c1:0b:da:
da:24:92:b0:6d:40:e5:4a:23:7d:dd:93:04:47:64:
f0:c4:4f:9b:c7:02:c5:b4:13:f4:c1:72:f1:96:a6:
7d:71:e3:aa:f8:ba:16:87:b0:50:18:96:20:5e:86:
90:ae:91:28:51:ba:7a:68:f4:24:4d:9f:ad:06:12:
f3:33:76:34:a5:42:9b:db:29:82:ba:69:0c:b9:32:
cf:de:7a:6b:11:07:13:10:c9:3e:f2:f8:0b:4f:6e:
98:f7:c9:6e:29:9d:ba:ce:2b:80:23:1a:13:46:ab:
e2:b1:19:cf:48:3b:c7:3d:66:ab:b5:23:47:38:86:
c1:78:8b:41:0f:7f:50:0b:d1:c0:71:80:d7:3f:0c:
97:14:a3:bf:80:1c:5b:cd:5d:ee:06:f6:20:55:3a:
c9:f7:db:c4:96:db:22:0b:bc:ad:f0:0b:26:b4:71:
af:7e:38:05:63:f7:bc:6b:aa:9b:73:30:9a:a6:c7:
96:51:2f:16:a4:b6:1f:d5:8c:ad:95:c0:15:16:0c:
a3:ee:a8:98:c4:aa:7e:12:06:16:4e:92:84:83:11:
6f:7d:46:1d:99:65:92:e5:8e:0a:96:eb:43:e4:12:
3f:48:a1:84:10:05:bd:61:bd:39:35:b1:83:66:f1:
8d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5B:6E:12:9D:E0:A8:79:E2:1C:B4:79:03:2A:1F:D5:52:E6:35:C4
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/hVtuEp3gqHniHLR5Ayof1VLmNcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.232.0/22
Signature Algorithm: sha256WithRSAEncryption
53:87:d4:bf:13:01:13:12:95:1b:8b:c8:3c:30:51:10:41:b3:
be:c4:48:38:d2:8a:19:d1:3b:e1:6b:c4:8f:ce:01:79:19:ad:
4b:ea:4d:fa:1e:95:5a:c6:64:06:09:58:5f:39:40:93:cd:df:
38:43:40:bc:ea:d2:c5:8d:79:16:d9:7c:8e:17:b4:71:c1:cb:
fa:8c:1a:7e:4e:64:72:90:88:dd:cd:02:96:4f:63:1d:bf:62:
64:be:76:d4:89:63:9a:9b:d2:3c:b5:12:8c:6e:49:f7:ee:35:
67:13:13:08:20:42:0f:79:f7:33:68:18:2e:96:08:05:15:27:
ba:02:ce:4e:f8:06:1c:5c:8f:de:92:29:df:36:13:75:fc:7f:
4c:17:6f:9f:2a:1a:4c:b4:24:9a:77:42:83:9a:be:cf:9a:bf:
48:24:b6:d6:cd:c5:9a:9b:cd:f9:b3:ed:25:99:66:e2:ef:4a:
f5:70:ea:0e:80:e1:46:20:09:41:9c:be:a4:1a:ed:6b:08:81:
81:c5:bc:e3:04:7c:ed:80:03:8c:ca:97:b1:ef:2a:b8:4e:a5:
47:8c:03:64:17:0c:8f:41:3e:06:c9:64:58:45:40:e3:32:52:
5c:34:88:8b:7c:e1:08:ee:96:d5:cf:54:d2:f6:9d:4d:2f:26:
85:a1:77:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 00:59:50 2024 by rpki-client on console-fra.rpki-client.org