Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/5iLHJ5UfIh2MolJxL4B9IcEIt20.roa
File: 5iLHJ5UfIh2MolJxL4B9IcEIt20.roa (raw, json)
Hash identifier: XtxM8fJv9sC2GmFCvpTFz7fdCddVOsoHQrbgPRjOhTo=
Subject key identifier: E6:22:C7:27:95:1F:22:1D:8C:A2:52:71:2F:80:7D:21:C1:08:B7:6D
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 018F057C13A5649AF00D3C79233D3FC29E46
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/5iLHJ5UfIh2MolJxL4B9IcEIt20.roa
Signing time: Mon 22 Apr 2024 11:06:08 +0000
ROA not before: Mon 22 Apr 2024 11:06:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210015
IP address blocks: 45.80.248.0/23 maxlen: 23
193.151.160.0/23 maxlen: 23
2a0d:e7c7:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:7c:13:a5:64:9a:f0:0d:3c:79:23:3d:3f:c2:9e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: Apr 22 11:06:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e622c727951f221d8ca252712f807d21c108b76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:38:64:9c:5c:da:94:f3:6f:4f:bb:b5:f7:
9d:4f:6f:3c:9c:c9:06:9d:28:01:d8:70:55:dc:fc:
d0:8f:9d:8a:7a:80:7b:31:0d:c7:01:4d:ec:fa:3d:
55:d4:98:da:6c:86:b5:40:48:69:78:df:53:c4:14:
d1:31:ce:72:a0:34:73:44:43:9f:44:67:71:09:fe:
d8:c0:ae:92:20:85:56:55:44:e2:9a:d0:fd:d0:cc:
e4:e0:33:90:71:e6:06:a6:0c:bd:88:f0:c5:f9:8a:
9d:6e:4f:19:84:2d:76:6f:10:1c:ec:18:a9:e0:70:
29:eb:ec:37:bf:be:ce:7d:61:3f:2a:25:d3:60:5b:
3d:c4:48:77:bd:93:85:e4:58:4c:b0:7a:f5:2c:15:
07:a6:72:b8:ba:e2:b3:8e:33:a3:d9:a9:d2:eb:be:
38:c7:90:52:f7:05:e0:63:e6:8c:e7:93:7f:85:7a:
7a:52:bb:42:07:dc:5c:f8:78:d3:7a:84:79:84:6d:
fc:1b:b5:bf:a5:34:35:0a:23:4f:65:5f:f4:e8:55:
dd:e8:bb:4b:e0:8a:df:f8:37:ac:5f:cf:8c:3b:79:
55:c1:48:e0:36:8a:f8:b0:10:83:11:c0:e7:87:64:
52:20:c8:1e:f9:d6:d3:3e:00:5d:ab:1c:8e:1f:3b:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:22:C7:27:95:1F:22:1D:8C:A2:52:71:2F:80:7D:21:C1:08:B7:6D
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/5iLHJ5UfIh2MolJxL4B9IcEIt20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.248.0/23
193.151.160.0/23
IPv6:
2a0d:e7c7:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
b9:3d:28:61:0a:33:ed:c2:74:a9:67:12:66:b4:8c:4b:8d:13:
5f:7c:6b:bd:3c:38:c0:47:02:08:10:e7:0f:76:ed:e2:52:e9:
3b:d2:43:25:18:6e:b0:67:5b:db:f2:16:f0:c4:43:a7:e4:b6:
a5:57:e6:52:b7:4c:ff:b5:16:69:e2:02:6c:0e:c1:ed:aa:a7:
c1:1f:e1:ab:8e:ce:cd:76:8a:7c:74:f7:e6:f9:77:5d:05:30:
e3:94:2f:bd:a3:c2:3c:52:d4:5a:bd:90:c5:89:51:59:37:56:
4c:88:22:57:43:8d:9b:73:63:75:ab:ac:eb:e1:aa:88:5d:4a:
3a:3f:99:fa:06:c8:01:f3:8a:fa:27:58:7a:30:de:17:f6:9d:
34:b1:39:b1:26:4d:60:a0:b4:6b:59:84:45:49:c2:7f:b3:0d:
77:4a:76:4f:dd:59:8e:fd:5d:f2:66:2d:7c:69:2a:2a:83:77:
10:e9:f4:56:f1:5a:dd:e9:db:fc:e9:30:f4:41:c7:f1:5a:71:
8e:43:b0:c7:d7:80:f3:20:7d:f5:32:6f:a3:f0:ca:fa:0e:06:
45:e1:64:f9:f8:d0:56:66:54:a9:3f:97:a0:77:df:5e:22:b5:
4e:c3:a8:f0:6b:42:8c:44:5a:bb:c7:96:db:07:b4:ab:5d:a9:
76:4c:84:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:20:37 2024 by rpki-client on console-ams.rpki-client.org