Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/P4JKrHwnH8AHvUxRpOz9FBnBMXs.roa
File: P4JKrHwnH8AHvUxRpOz9FBnBMXs.roa (raw, json)
Hash identifier: 6iM9CoJxnmtP9DISKK2meysBmprx79Eg1uKf3Io4Gkg=
Subject key identifier: 3F:82:4A:AC:7C:27:1F:C0:07:BD:4C:51:A4:EC:FD:14:19:C1:31:7B
Certificate issuer: /CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
Certificate serial: 018CC794C5BA1394B77B37AE4B7163525290
Authority key identifier: E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/P4JKrHwnH8AHvUxRpOz9FBnBMXs.roa
Signing time: Tue 02 Jan 2024 00:31:04 +0000
ROA not before: Tue 02 Jan 2024 00:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35224
IP address blocks: 45.93.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 12:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:c5:ba:13:94:b7:7b:37:ae:4b:71:63:52:52:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
Validity
Not Before: Jan 2 00:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f824aac7c271fc007bd4c51a4ecfd1419c1317b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:42:e0:42:81:5d:79:72:25:50:a5:a7:1c:20:
a8:b4:83:02:05:3e:2d:c6:e5:a3:ae:7b:5e:50:6d:
d6:82:3d:27:6c:b5:c4:fa:f2:75:f3:ec:ae:a3:a2:
47:5d:9c:b1:d8:93:b2:3a:bd:d3:fb:f1:77:b6:1e:
df:7b:f5:bf:01:0b:c3:82:26:6b:b4:c0:4d:51:f9:
e9:01:1e:0c:81:40:33:57:03:e2:12:8a:ce:24:20:
46:6e:fc:e5:dd:34:d2:8a:3a:8d:8a:3d:fc:cc:b9:
43:88:d6:0e:53:61:3e:cb:d4:df:88:26:55:ce:06:
11:41:fc:d2:d0:85:b1:38:c8:a2:31:3c:fe:74:69:
51:41:a6:61:00:11:9a:16:ef:17:c3:a5:10:92:05:
20:13:38:c3:7f:54:28:4f:e1:0d:a5:b0:72:a4:e6:
a3:1b:4e:5e:a9:f7:83:07:29:a9:85:20:ca:36:05:
4e:29:25:b4:93:53:5d:9e:bc:18:35:8d:00:7a:63:
9e:11:0c:5c:d5:62:90:ba:84:f1:ee:8e:3d:b9:34:
a0:75:a5:15:11:16:b6:88:27:ef:89:31:17:c6:73:
ff:06:62:6f:34:1b:45:75:93:7a:4c:eb:93:90:59:
36:4b:5b:d8:53:38:85:4e:ef:f5:97:4a:19:29:35:
3c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:82:4A:AC:7C:27:1F:C0:07:BD:4C:51:A4:EC:FD:14:19:C1:31:7B
X509v3 Authority Key Identifier:
keyid:E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/P4JKrHwnH8AHvUxRpOz9FBnBMXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.72.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:e5:f3:fe:d7:86:d9:db:1a:cc:5d:f6:fa:26:0f:f0:c9:9d:
0c:83:59:7b:4e:5d:a6:4a:36:a6:59:7b:b7:78:0f:9f:6a:e1:
7e:be:8d:f3:63:33:00:40:ff:77:e8:b9:9c:b9:51:ca:2a:b9:
63:c7:b7:2f:71:0c:90:c3:09:2b:37:7c:ce:23:69:5e:a3:ac:
75:ff:86:2e:91:52:e0:f5:f1:b7:11:27:47:63:19:04:0f:17:
c7:85:d8:70:1d:45:36:7c:95:d8:1c:72:02:41:a3:f7:d3:47:
67:af:e6:6c:8b:59:7f:1f:9f:34:e4:82:19:7a:69:ae:24:26:
97:93:00:c7:1f:50:fa:ae:86:ed:55:74:da:22:dd:00:07:b1:
fd:f6:ee:4e:e9:1f:1c:e3:f2:a1:2c:8e:fc:b9:cc:6c:60:54:
90:3c:78:69:66:5f:8c:d5:d8:e0:eb:f2:8f:19:cb:a8:5d:43:
14:97:11:9f:5d:e1:16:67:44:4e:57:51:58:cc:3f:4c:5a:a8:
eb:d0:64:2c:eb:f8:36:7f:66:85:e4:d1:ba:5b:cb:2f:1e:89:
9a:d2:18:24:c6:87:6e:08:61:3e:f0:cd:6d:c9:e9:b7:53:7f:
86:17:cd:b6:e0:ca:f1:e7:90:f9:0d:81:38:ff:b3:88:3b:2d:
2d:92:72:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:02:09 2024 by rpki-client on console-ams.rpki-client.org