Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/hZFBopBhMZ0p0YM8BSkL6bnSVz0.roa
File: hZFBopBhMZ0p0YM8BSkL6bnSVz0.roa (raw, json)
Hash identifier: ppbyY2NLM5SkXQ3Az4nnnDxdHaRs4L+eaZHCKOGOlfM=
Subject key identifier: 85:91:41:A2:90:61:31:9D:29:D1:83:3C:05:29:0B:E9:B9:D2:57:3D
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 018CC4932141B7AC72FE2DD691544BCFB221
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/hZFBopBhMZ0p0YM8BSkL6bnSVz0.roa
Signing time: Mon 01 Jan 2024 10:30:25 +0000
ROA not before: Mon 01 Jan 2024 10:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34358
IP address blocks: 45.156.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:21:41:b7:ac:72:fe:2d:d6:91:54:4b:cf:b2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Jan 1 10:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=859141a29061319d29d1833c05290be9b9d2573d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:dd:96:4f:62:2e:53:02:2b:49:95:bc:9b:
7b:32:58:c6:54:8e:18:49:32:08:3d:3f:26:dc:89:
05:83:88:f8:78:bc:5e:f6:39:4c:4c:8d:54:4b:46:
7d:93:8f:32:03:44:d6:40:db:2a:08:0f:96:cb:26:
1e:92:13:60:24:4b:a0:c3:08:37:9e:c5:7c:d4:f0:
b1:4b:89:4d:7c:e1:14:e1:2e:d2:6e:44:be:d9:7e:
4b:9b:48:bc:e4:85:ae:b1:b1:c9:1a:62:73:00:3d:
42:d6:47:46:04:ea:b4:12:c1:9b:50:e3:db:fa:18:
8e:a2:67:c6:c6:c6:2d:96:14:20:73:1b:40:29:00:
79:dc:9f:1b:05:e3:7c:1a:87:a2:1b:11:52:ff:e7:
52:81:0c:96:4d:f2:cd:46:a8:40:bf:8c:3f:cc:a9:
30:e9:75:8a:6f:9c:7d:9d:e0:af:b4:60:dd:a1:20:
5f:78:2c:d5:02:0c:ca:a9:19:f7:57:22:8b:93:72:
7a:af:3a:70:c8:9a:58:11:59:89:c1:4f:a6:29:2d:
f0:fc:af:59:f1:b5:26:10:21:f1:10:99:d4:2a:02:
cf:24:3e:4b:90:3b:cc:87:ef:62:2c:c7:a5:de:7b:
5a:87:0f:cc:e8:15:3d:b0:29:c4:8e:3e:04:c9:e4:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:91:41:A2:90:61:31:9D:29:D1:83:3C:05:29:0B:E9:B9:D2:57:3D
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/hZFBopBhMZ0p0YM8BSkL6bnSVz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.236.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:d8:e3:22:7f:a7:70:94:51:e0:a2:1b:13:7f:b7:33:8f:0a:
6e:0d:f6:8c:32:cd:e1:b9:68:fa:b0:4a:a7:ad:c0:63:0b:45:
95:93:97:2e:a5:f6:a7:c2:c6:da:45:d9:2b:80:91:ca:ee:f5:
0b:cd:fd:68:b5:31:68:bb:af:b4:77:d5:68:e3:95:e7:c5:76:
64:29:53:2b:1c:55:14:8a:af:3e:56:11:6f:0c:21:0a:80:b1:
db:dd:9b:06:82:23:27:19:db:1f:96:e7:be:13:bf:e0:06:b9:
1c:0e:df:e8:0e:19:c0:39:42:2e:ef:eb:42:7a:5e:17:cb:1e:
5c:08:c9:89:a6:50:86:3a:3b:25:5c:20:0d:5e:b9:0c:3e:1e:
6e:68:7f:0a:05:9e:55:6c:d1:aa:f5:42:82:2a:05:8a:2b:d6:
77:94:a0:7f:55:86:0c:38:80:b9:fb:22:1d:18:0f:32:f8:37:
39:88:11:dc:95:28:eb:6f:64:ee:23:69:86:db:c4:7f:e3:18:
c8:34:4f:60:0d:6a:f4:ea:53:2a:31:d2:4e:be:c9:a4:9a:90:
11:67:5d:1e:b9:68:4a:a6:00:54:23:69:c4:41:42:3b:ee:f0:
5d:c1:fd:ee:eb:bd:37:f0:37:b2:1a:58:1e:6d:0d:ac:46:0d:
f3:8c:a6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:10:29 2024 by rpki-client on console-ams.rpki-client.org