Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/G0aqmbqcnd3EGV2S9LyvKygj6hs.roa
File: G0aqmbqcnd3EGV2S9LyvKygj6hs.roa (raw, json)
Hash identifier: IwR0mER/CWS8co5cypvAz9EYvkPvnyADADxk4PWDkeM=
Subject key identifier: 1B:46:AA:99:BA:9C:9D:DD:C4:19:5D:92:F4:BC:AF:2B:28:23:EA:1B
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 018D31A73B61BA15952C37AD2DD5B8A041A5
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/G0aqmbqcnd3EGV2S9LyvKygj6hs.roa
Signing time: Mon 22 Jan 2024 14:50:59 +0000
ROA not before: Mon 22 Jan 2024 14:50:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.87.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:a7:3b:61:ba:15:95:2c:37:ad:2d:d5:b8:a0:41:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jan 22 14:50:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b46aa99ba9c9dddc4195d92f4bcaf2b2823ea1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:78:d4:73:cc:a8:72:7e:89:3b:da:98:78:
f2:c7:1d:c0:ba:85:7e:68:44:79:6a:c7:0f:0e:53:
93:d2:5f:22:f3:3e:d0:25:bd:7b:7c:c4:a3:2e:91:
f5:f2:34:e9:19:13:7e:a3:7f:33:74:49:76:45:5d:
85:9b:bf:2b:6b:8b:92:4a:f1:2a:71:2c:0d:f8:01:
5c:7c:f1:35:57:9f:55:3f:4d:d0:f6:2b:41:3b:e8:
a7:2b:c5:f4:d5:7a:61:8a:d2:21:ec:22:e5:8e:ff:
b5:01:57:70:29:63:4a:48:45:95:4d:e0:f2:04:e5:
b9:3f:32:11:5d:fd:74:f6:33:d2:1e:5f:0f:56:e7:
19:02:72:31:b1:c3:72:f1:e6:0e:87:5e:2b:65:f8:
68:57:db:08:65:7b:78:ae:f5:59:39:ce:04:05:00:
de:c7:80:25:40:af:14:80:8e:96:a5:32:2b:7e:7a:
ff:55:aa:35:70:29:1d:10:bf:cf:bf:6a:e7:28:bc:
59:c3:15:8d:25:36:7e:9d:ea:61:8d:b5:f6:be:d4:
54:ba:be:a6:67:de:39:29:4d:26:c8:d3:91:15:e4:
cf:14:76:99:aa:52:c0:b7:40:bf:22:07:c4:cd:dd:
7f:ca:b5:e7:8a:55:59:f5:8a:da:e8:90:67:ec:e8:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:46:AA:99:BA:9C:9D:DD:C4:19:5D:92:F4:BC:AF:2B:28:23:EA:1B
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/G0aqmbqcnd3EGV2S9LyvKygj6hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.162.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d7:4f:6e:cf:d9:2c:3a:55:b1:5f:f6:0d:b8:50:29:bc:a2:
a7:96:84:e2:65:37:ca:e6:19:ce:95:39:2a:36:6b:9a:b9:8c:
16:9a:e3:5e:64:9c:cb:99:55:fb:2f:a8:21:df:87:00:4f:c1:
11:5f:f7:36:62:44:d1:50:0c:08:2c:10:64:c5:d7:9b:58:41:
9f:54:58:dd:d1:44:36:fe:44:06:c1:98:73:2d:b9:78:58:ed:
47:4c:49:c8:bf:8e:49:15:af:c6:4a:04:11:0d:fc:11:b2:c2:
6e:ef:34:26:79:70:d8:53:48:ab:73:f7:f6:86:90:7f:79:f6:
33:e0:4f:35:32:b1:9b:a3:d2:ff:7c:ae:81:33:6b:c0:d0:a1:
d2:c8:fc:0f:34:3e:c5:51:cf:70:f0:0a:16:f2:9d:6c:52:79:
a5:64:fc:0c:52:60:17:37:8b:c1:1a:85:57:16:e2:10:3a:21:
e2:95:f4:bb:38:06:36:92:d5:93:30:d4:47:ea:92:e4:9b:61:
dc:81:89:2a:e7:13:8f:4a:d1:4a:a5:1e:cf:ad:94:11:f5:18:
ad:8f:a7:df:ac:05:01:44:64:e6:b0:60:9c:3a:56:c4:a8:12:
3d:b5:ba:7d:05:52:a2:ac:1e:7d:1e:b5:7a:ca:45:64:79:1c:
08:9d:02:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:56:33 2024 by rpki-client on console-fra.rpki-client.org