Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/kSlzpJ51NKEgyAxQ81nNruH7ius.roa
File: kSlzpJ51NKEgyAxQ81nNruH7ius.roa (raw, json)
Hash identifier: BUTKjjqSu7s+tPPjYo63lTIyjVNrQMGCD1zfIWV5HaM=
Subject key identifier: 91:29:73:A4:9E:75:34:A1:20:C8:0C:50:F3:59:CD:AE:E1:FB:8A:EB
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 018D6BBE40CA00A30652E0A8A486C96A10DB
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/kSlzpJ51NKEgyAxQ81nNruH7ius.roa
Signing time: Fri 02 Feb 2024 21:34:07 +0000
ROA not before: Fri 02 Feb 2024 21:34:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400696
IP address blocks: 45.152.148.0/24 maxlen: 24
2a11:f880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6b:be:40:ca:00:a3:06:52:e0:a8:a4:86:c9:6a:10:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Feb 2 21:34:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=912973a49e7534a120c80c50f359cdaee1fb8aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:14:73:ec:75:72:df:2b:13:29:41:a8:4b:
3c:d3:12:c3:2b:0a:47:eb:55:30:7b:c2:ee:e8:5e:
63:2b:36:fb:5a:be:d5:4d:2d:9a:d4:b9:93:05:41:
34:d3:5f:88:69:f7:a0:e4:e7:d2:c6:8c:5a:75:6f:
d6:00:c2:d3:6c:9f:40:71:e1:de:c2:1a:49:b1:04:
62:51:b5:9e:91:ff:6f:d7:81:15:0f:27:a4:10:88:
a3:95:7c:2d:cd:4c:b3:0c:74:a8:f0:e2:c1:85:bf:
ff:04:ab:e0:81:d8:bc:9d:38:32:b5:79:ae:f5:e4:
bb:e7:bf:0c:41:58:06:cc:26:bb:95:61:9d:d4:ce:
4c:ad:08:b2:fa:36:d0:54:2a:6a:ae:1f:11:a5:ca:
c1:04:66:1b:0a:b1:c1:d3:37:fc:4a:89:8e:44:bb:
6c:c8:fe:c4:f4:18:c7:bc:d4:37:da:99:5a:39:fc:
c0:da:b1:53:ed:22:b9:6b:6c:0b:e5:11:fc:75:28:
ad:41:0f:4d:ad:60:53:64:57:75:f5:11:e4:9c:a9:
1f:34:91:11:dd:1a:5f:03:b0:ec:38:42:bd:f2:8a:
92:16:00:b8:47:b2:4d:77:e1:b4:ec:95:c8:3b:cf:
f0:39:e0:57:8d:9b:40:e4:59:05:64:4a:1a:fe:5a:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:29:73:A4:9E:75:34:A1:20:C8:0C:50:F3:59:CD:AE:E1:FB:8A:EB
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/kSlzpJ51NKEgyAxQ81nNruH7ius.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.148.0/24
IPv6:
2a11:f880::/32
Signature Algorithm: sha256WithRSAEncryption
9e:5f:fb:d6:8e:f0:b8:eb:57:b6:c3:e7:e2:51:ac:02:61:a2:
59:21:f1:43:6d:56:a8:2d:71:35:69:83:3c:1d:01:21:f2:8a:
97:40:57:23:2e:48:56:4f:d1:a4:59:07:a3:77:00:4b:18:a1:
8f:f9:c6:67:4b:8f:ba:35:7f:27:a9:01:1b:16:7f:ea:14:5e:
1b:21:33:3d:86:58:cc:e9:a1:26:a5:ad:45:0c:ba:cb:5f:f1:
69:9c:c4:f1:87:72:48:fb:fe:d1:54:0c:bc:76:8b:f5:ec:ee:
57:dc:25:d2:84:cb:85:cb:94:29:73:03:9e:ab:d3:12:0d:b2:
69:a0:6b:96:bc:85:f2:45:a3:e5:38:09:2f:46:3c:b8:f2:f6:
89:00:66:70:55:c8:89:07:d9:20:ae:74:68:2c:c0:45:f6:40:
85:83:df:6a:1f:86:1d:d2:71:a4:a9:6e:d0:c1:a7:95:65:14:
85:80:a3:64:b6:26:05:ad:b4:22:30:6b:ad:1c:4b:fb:f8:76:
1e:a3:e7:55:a5:a7:69:88:c3:68:87:d4:e5:5d:b9:31:59:1b:
ea:d3:1b:c4:ed:ca:89:f3:a2:cf:ec:03:6e:a0:aa:24:6e:93:
59:45:81:59:fc:71:ea:e6:55:d6:cb:a2:dc:7d:11:99:b8:e5:
95:69:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:43:11 2024 by rpki-client on console-fra.rpki-client.org