Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/aCvb0EYuYDj917tVsHZl5tKwyMM.roa
File: aCvb0EYuYDj917tVsHZl5tKwyMM.roa (raw, json)
Hash identifier: HSCt0AHMCiiQfNtI12iUCMjviq3LK8fcb4NX1CEPrh8=
Subject key identifier: 68:2B:DB:D0:46:2E:60:38:FD:D7:BB:55:B0:76:65:E6:D2:B0:C8:C3
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 018CC72746D1C79BF73CCD7F48D37C8DB9E7
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/aCvb0EYuYDj917tVsHZl5tKwyMM.roa
Signing time: Mon 01 Jan 2024 22:31:29 +0000
ROA not before: Mon 01 Jan 2024 22:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206158
IP address blocks: 45.15.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:46:d1:c7:9b:f7:3c:cd:7f:48:d3:7c:8d:b9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=682bdbd0462e6038fdd7bb55b07665e6d2b0c8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2d:8f:b3:85:4f:8b:68:1e:ba:8e:84:03:8d:
46:92:8e:f0:1a:dc:b8:5a:14:4a:aa:44:96:b3:0d:
71:08:51:f4:ca:45:8a:7b:c8:e2:16:1a:0b:a3:e9:
c0:dc:93:6b:3c:4c:17:96:1c:48:12:b1:ae:be:af:
0e:14:65:c6:27:51:52:ef:d4:9b:59:ca:3e:86:6b:
5d:fa:a6:9b:11:e7:26:ee:92:e5:d3:c0:e9:38:c2:
23:e4:1d:fc:35:38:55:5c:f8:02:f6:94:2a:d5:76:
50:60:58:d9:22:aa:c3:80:6d:9c:53:8f:f1:d0:fc:
39:5f:f6:0c:0c:a9:01:3a:8e:9f:1f:b8:07:ff:0a:
53:a2:46:66:2f:af:3c:0b:9b:ca:e5:40:90:f8:b4:
95:de:d3:70:d3:e4:f0:12:7f:47:7f:87:71:41:0e:
1c:1e:d8:0a:40:b9:82:ff:5f:48:83:7d:56:50:cd:
e8:82:42:99:06:0b:cd:c1:0f:63:5b:cc:56:43:2e:
f3:3f:3d:cf:bb:55:96:ab:2a:bf:3e:34:e0:81:b5:
ef:6c:ce:7f:70:24:3d:5f:d2:f7:9f:e4:3e:2f:77:
8e:d1:ec:27:b8:fa:d0:86:ed:f3:85:9f:f0:bf:4c:
dc:9f:fe:0e:10:6b:ad:aa:a5:a7:58:a9:29:6b:61:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2B:DB:D0:46:2E:60:38:FD:D7:BB:55:B0:76:65:E6:D2:B0:C8:C3
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/aCvb0EYuYDj917tVsHZl5tKwyMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.234.0/24
Signature Algorithm: sha256WithRSAEncryption
28:45:a4:48:42:4e:ed:58:53:b8:4d:d8:f3:01:fe:bf:ec:a8:
8b:3a:d7:e9:9c:2a:28:15:fd:d7:f1:5f:12:b0:54:4f:27:02:
0d:1e:45:d8:0e:28:d0:aa:06:e4:4c:15:8d:9c:9e:8c:4e:63:
ca:8e:e0:7f:60:5d:f3:fb:00:4f:dd:45:31:58:e7:e0:cc:23:
e9:bb:3a:9d:aa:38:90:89:61:5c:cd:02:7d:74:f3:06:93:6f:
0a:5a:f4:8a:23:4a:c1:d7:93:38:ad:cf:35:f4:37:04:9d:ff:
b2:cf:ce:93:14:17:84:77:75:00:bb:fe:94:ea:49:6a:7a:c7:
41:55:01:58:cd:5b:d0:dd:75:a3:89:ef:3b:89:eb:dd:95:ad:
88:1f:8b:68:0e:6f:7c:92:0d:61:e6:6a:6b:8d:0e:bf:d5:7e:
80:db:9e:fd:9c:aa:6f:f9:c4:cb:68:2c:e3:66:98:55:f2:67:
f3:31:e3:3e:05:27:37:43:23:51:5d:77:d2:dc:e3:7e:66:31:
a2:28:64:f6:5b:5c:84:19:9e:9b:96:8a:0a:70:31:64:80:f0:
d6:3a:ad:50:59:ce:e0:59:93:86:7f:92:ad:50:c1:ac:e8:46:
97:29:83:a5:2d:15:5d:ff:d2:10:b1:b5:75:93:f5:e4:40:84:
20:2f:ea:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:17:33 2024 by rpki-client on console-ams.rpki-client.org