Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/hWwA1J8O5oveaOCsgmSyhnpDZNg.roa
File: hWwA1J8O5oveaOCsgmSyhnpDZNg.roa (raw, json)
Hash identifier: YLBHnUYA+ltO2HSmw2J3FHw12Wy/7d/KN8Czisi1lVg=
Subject key identifier: 85:6C:00:D4:9F:0E:E6:8B:DE:68:E0:AC:82:64:B2:86:7A:43:64:D8
Certificate issuer: /CN=f020cb4f9b5f79b9da6b4827bad9c54a2a80c531
Certificate serial: 018CC2DB2C5F28DF7F9A067063DAF511D133
Authority key identifier: F0:20:CB:4F:9B:5F:79:B9:DA:6B:48:27:BA:D9:C5:4A:2A:80:C5:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/hWwA1J8O5oveaOCsgmSyhnpDZNg.roa
Signing time: Mon 01 Jan 2024 02:29:52 +0000
ROA not before: Mon 01 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200984
IP address blocks: 45.13.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2c:5f:28:df:7f:9a:06:70:63:da:f5:11:d1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f020cb4f9b5f79b9da6b4827bad9c54a2a80c531
Validity
Not Before: Jan 1 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=856c00d49f0ee68bde68e0ac8264b2867a4364d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:fc:a5:09:fc:f9:64:b9:0f:23:65:25:f1:
e9:8b:f5:4a:98:cc:a1:23:61:38:66:e0:2c:1c:eb:
da:59:dc:5f:1a:32:10:25:22:ca:9f:42:bc:44:db:
77:34:90:c9:29:6c:58:b7:39:b8:ea:28:21:02:5b:
61:c8:03:11:b5:75:17:27:e8:ea:f4:a7:69:c9:64:
fb:ef:31:83:c9:3b:99:79:56:98:be:a5:e2:e5:6c:
5a:5e:31:db:7a:40:76:d8:79:b2:87:40:28:a4:a8:
de:09:98:d4:91:71:ae:b1:9f:57:a5:98:43:14:e9:
90:85:53:85:5a:1e:a9:f9:83:e1:80:20:7e:0f:6f:
14:d2:6a:e0:00:d1:8e:54:2a:60:08:24:ff:38:cf:
68:31:bf:9e:e0:ed:0a:f1:f1:1a:6b:f7:72:1b:ce:
97:55:a0:e2:5a:f4:05:ad:32:56:d6:0d:5f:7a:1a:
aa:45:57:86:69:60:20:b4:ab:2d:04:86:55:1b:c0:
5d:95:d8:74:3e:1e:fd:91:e5:3e:1a:72:dd:3b:2e:
73:b0:47:74:65:85:60:b1:ce:5d:1e:62:c5:6d:bf:
1d:a6:1b:ba:93:3d:aa:b9:03:0b:fd:77:ec:40:72:
19:da:9d:ce:4f:b3:70:fb:34:62:86:c5:50:4e:03:
d4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6C:00:D4:9F:0E:E6:8B:DE:68:E0:AC:82:64:B2:86:7A:43:64:D8
X509v3 Authority Key Identifier:
keyid:F0:20:CB:4F:9B:5F:79:B9:DA:6B:48:27:BA:D9:C5:4A:2A:80:C5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/hWwA1J8O5oveaOCsgmSyhnpDZNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.80.0/22
Signature Algorithm: sha256WithRSAEncryption
ed:a0:28:9f:9a:c5:23:17:cb:62:bb:d9:3a:33:d4:1d:77:33:
e7:65:a3:ca:e4:a0:fd:7c:ca:cc:1a:06:fe:1a:02:29:69:74:
9d:2a:bc:94:37:40:e7:7c:e5:31:a8:16:bf:ce:50:c8:71:8d:
a0:59:c2:58:5b:6a:fe:57:23:74:a3:88:30:a7:43:3f:b9:f8:
23:9d:b1:fb:da:6a:ee:84:a2:ef:af:4c:2b:12:1d:74:ca:fe:
59:35:30:5b:61:f5:de:f8:75:71:d2:56:d1:f1:d1:bb:62:1f:
3f:12:50:84:9b:20:56:ef:78:56:39:a5:49:49:f9:5d:71:71:
8c:07:5c:c7:75:e7:83:ef:b4:d3:04:67:52:89:66:aa:3a:cb:
48:64:d7:0d:92:b8:e2:17:71:85:36:b8:99:00:7a:90:4b:3b:
37:7d:1c:ae:a7:30:b9:ac:d1:ad:44:15:8f:b6:1a:80:aa:41:
0d:d6:7e:6a:92:fc:7a:53:ae:68:7e:0e:40:60:f9:50:7e:34:
b5:c3:1f:0d:7e:c5:9a:1c:4b:a5:19:d8:cb:b6:c5:16:a0:e7:
bb:b2:62:bd:bf:ee:b3:98:88:38:75:29:6f:b4:50:12:5c:91:
3c:eb:4a:99:cc:6b:1f:56:13:c7:91:7b:da:3a:4a:c5:66:e5:
26:63:b4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:08:26 2024 by rpki-client on console-fra.rpki-client.org