Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/SCa4ExxVRo76877msRmtlU-CbAA.roa
File: SCa4ExxVRo76877msRmtlU-CbAA.roa (raw, json)
Hash identifier: EJv3Zn2DVqqdevmQ3S2QsEkb66Ou3P1X/BcuDrg7EIw=
Subject key identifier: 48:26:B8:13:1C:55:46:8E:FA:F3:BE:E6:B1:19:AD:95:4F:82:6C:00
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018CC2DB396B8BF0501870BC280481DB96CB
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/SCa4ExxVRo76877msRmtlU-CbAA.roa
Signing time: Mon 01 Jan 2024 02:29:56 +0000
ROA not before: Mon 01 Jan 2024 02:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211826
IP address blocks: 45.65.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:39:6b:8b:f0:50:18:70:bc:28:04:81:db:96:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4826b8131c55468efaf3bee6b119ad954f826c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:21:41:ec:e7:c5:f4:72:30:d0:1e:b7:db:3c:
3a:b1:e1:29:56:58:5a:6d:ec:34:e9:68:49:53:d3:
8a:78:fa:21:b5:cc:e6:4d:13:0e:12:24:bb:80:84:
b5:a0:12:01:33:7f:8c:55:0d:00:84:6e:54:15:10:
f7:cf:dc:18:33:bc:c1:af:fe:1e:9f:fa:23:44:b5:
d5:fc:fc:ad:8e:7c:a6:ed:05:d3:88:5e:63:63:a0:
6d:a3:ca:1e:67:01:b5:12:89:81:50:d3:44:16:4b:
88:80:bc:71:5a:e6:da:56:f1:56:a3:f3:32:06:ab:
f0:6f:07:75:02:34:a1:5b:ef:30:4e:76:22:1b:b7:
a3:d4:8f:44:f8:04:17:40:45:64:57:e8:9e:41:97:
60:ae:ff:d0:a2:1b:b7:ec:39:73:b1:b1:a8:e4:b7:
31:c7:45:8d:77:fd:e8:9c:db:fd:c6:aa:1a:fd:a8:
02:e0:ab:d6:3f:b3:6f:6a:ee:96:c9:15:da:15:ac:
4d:ae:ea:ec:ac:a6:b7:ca:d2:0e:3f:fe:9a:49:8d:
60:a7:f6:8b:a4:7f:6f:dc:cb:b1:e0:47:83:07:2e:
76:13:a5:0d:e5:4a:01:f0:9d:55:48:55:62:a8:15:
c1:74:df:04:ab:36:43:75:8a:cf:56:9b:7d:65:9f:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:26:B8:13:1C:55:46:8E:FA:F3:BE:E6:B1:19:AD:95:4F:82:6C:00
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/SCa4ExxVRo76877msRmtlU-CbAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.112.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:35:8a:d2:eb:0b:bf:fb:98:12:c0:91:14:c7:90:b0:ca:7f:
be:22:78:fa:09:b1:2e:5c:a4:3e:3a:6b:38:68:f0:d0:00:25:
11:a4:6a:c5:63:a9:af:6c:ef:05:18:b5:70:3b:93:8c:ed:e0:
a8:f7:5b:fc:cd:c3:7d:02:6f:c5:32:0c:49:e3:86:8c:e5:8a:
9f:7f:fc:08:fe:39:f8:f0:2f:7d:6c:b1:7d:63:8b:a2:7c:df:
a5:63:22:8d:cf:5c:5d:f7:cd:b4:39:9e:f1:00:7a:58:b2:b4:
88:af:4c:a5:d8:22:81:dc:cc:8e:7b:4a:e2:6a:24:c9:df:16:
03:36:2d:40:31:9c:7b:2d:1e:b4:9c:bb:d5:15:1b:1d:a2:5a:
42:ef:89:72:ad:a0:5c:2c:7d:98:48:16:51:28:b2:e0:a3:fa:
db:8e:4d:c4:71:02:77:6c:0a:12:f2:e8:0f:18:eb:94:87:ed:
58:7c:24:17:2f:19:24:f7:50:35:bd:b7:84:96:52:77:60:39:
5b:48:02:a6:a0:f6:05:82:a4:50:64:81:d1:49:76:e3:58:46:
74:27:98:14:ba:b6:df:a7:a4:1b:09:3e:30:de:53:95:e7:1c:
56:50:f0:17:24:b8:34:bf:af:57:04:10:25:60:a0:6e:7e:25:
b8:15:f5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:47:04 2024 by rpki-client on console-ams.rpki-client.org