Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1iID7KVUoTWtc3yD80K6j8U2K6g.roa
File: 1iID7KVUoTWtc3yD80K6j8U2K6g.roa (raw, json)
Hash identifier: DOFm7mcjYGb+FZEUyLjFz1b/pTnx+MQA5l1uhv2U3wE=
Subject key identifier: D6:22:03:EC:A5:54:A1:35:AD:73:7C:83:F3:42:BA:8F:C5:36:2B:A8
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018CC2DB3AC0CD50C426F1987CC02712049A
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1iID7KVUoTWtc3yD80K6j8U2K6g.roa
Signing time: Mon 01 Jan 2024 02:29:56 +0000
ROA not before: Mon 01 Jan 2024 02:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400039
IP address blocks: 45.11.189.0/24 maxlen: 24
45.154.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3a:c0:cd:50:c4:26:f1:98:7c:c0:27:12:04:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d62203eca554a135ad737c83f342ba8fc5362ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:2f:3f:00:c8:76:cf:69:8d:6d:e9:6b:cb:
b0:61:c4:d8:13:10:d2:20:b8:99:6c:6d:ba:7a:87:
d7:0d:e2:12:86:9e:da:f8:72:61:d4:fe:bf:71:1e:
52:d2:72:b4:7f:a1:ac:88:54:1d:7a:48:5c:b4:dc:
17:86:af:da:e6:45:94:17:c2:74:c2:a1:36:69:a2:
52:d9:b7:55:3d:8a:fd:8b:83:3a:cf:87:39:d5:27:
63:c6:3b:2e:60:7e:6c:f1:6a:2b:d3:7e:f2:6e:a2:
aa:09:c1:20:45:6b:a9:f8:23:a7:16:05:ed:b8:bb:
d0:18:76:f9:cc:8b:38:a4:85:07:dc:97:68:35:7d:
27:90:85:26:75:22:1a:11:47:5f:cf:83:5b:43:f5:
c8:bb:c9:6b:3a:a0:ea:c8:51:01:3e:39:ba:8e:e7:
8f:de:3f:8e:08:b9:17:c3:27:66:42:e4:35:61:4c:
fa:ad:db:10:21:fd:0d:e6:f6:31:a5:f0:33:3f:c9:
0b:cb:b9:6e:78:1c:bf:97:0d:db:11:fc:db:62:d8:
e1:d0:fa:3e:10:e2:03:69:24:9b:6f:9e:fe:87:80:
d1:ed:13:11:b3:33:80:a8:f2:3b:6c:9f:8f:2f:61:
35:6c:80:f4:89:91:b7:01:48:5d:d3:d8:d2:fe:b0:
43:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:22:03:EC:A5:54:A1:35:AD:73:7C:83:F3:42:BA:8F:C5:36:2B:A8
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1iID7KVUoTWtc3yD80K6j8U2K6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.189.0/24
45.154.158.0/24
Signature Algorithm: sha256WithRSAEncryption
02:94:69:d0:05:83:a8:f9:56:9b:45:a5:5f:1a:5f:15:40:32:
34:40:6f:1d:71:dd:ec:a4:89:21:ee:57:f8:4d:2f:22:3f:5a:
9f:a8:fe:68:d8:d0:62:af:c5:4f:67:97:d8:9a:df:0e:a1:0f:
85:a7:12:73:9d:f1:20:93:ee:db:81:df:76:fc:39:81:f1:39:
1d:97:43:3f:9d:b4:1e:fb:af:88:47:77:eb:23:d7:1a:c6:9b:
98:40:4e:81:91:1f:1b:74:bf:59:f0:03:75:7a:46:02:3b:7a:
76:13:46:e5:d3:68:ec:a0:c6:b2:94:e8:67:15:96:7a:53:27:
10:88:67:f2:b3:e3:8e:b8:ce:32:c6:8f:3e:6f:5d:df:40:eb:
fe:bd:ac:3b:de:5e:03:f9:13:b1:b5:9d:9e:9f:10:7e:ae:db:
af:d5:3c:b3:d8:ed:e9:83:c0:3c:4c:2f:7e:b5:bb:33:1e:d9:
47:38:c8:de:e5:5c:57:c6:a3:1e:cd:9d:12:15:c9:49:a0:9c:
cf:1d:48:6f:70:42:73:2b:30:d8:a5:41:f0:d3:f3:af:90:bf:
44:e3:8a:c4:6c:b7:20:bc:a2:62:b8:54:31:b8:4c:f8:41:3b:
e4:92:9c:13:7b:78:fa:0e:a3:62:ef:9b:60:8b:4f:5a:da:ea:
12:5a:bc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:16:53 2024 by rpki-client on console-fra.rpki-client.org