Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/DnxsQzpPQwAnw5uab7H64Rl5O2s.roa
File: DnxsQzpPQwAnw5uab7H64Rl5O2s.roa (raw, json)
Hash identifier: a4lMFiuy5JgmrdTVD1f1bCaHQRxea3op3RWpTWQuMSg=
Subject key identifier: 0E:7C:6C:43:3A:4F:43:00:27:C3:9B:9A:6F:B1:FA:E1:19:79:3B:6B
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018CC2DB029A678AAA2E70B6D19ACD3F01D0
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/DnxsQzpPQwAnw5uab7H64Rl5O2s.roa
Signing time: Mon 01 Jan 2024 02:29:42 +0000
ROA not before: Mon 01 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211826
IP address blocks: 45.84.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:02:9a:67:8a:aa:2e:70:b6:d1:9a:cd:3f:01:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e7c6c433a4f430027c39b9a6fb1fae119793b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:47:be:80:a1:4b:2f:7e:e6:1b:42:57:6a:
fb:48:6b:e1:c6:56:49:52:d4:e4:8b:ec:c8:f3:3a:
32:89:80:8d:a7:21:72:d9:40:9a:3a:39:54:4f:12:
80:f8:a8:36:62:c1:80:57:5c:4f:bf:1a:36:ee:56:
64:1d:72:62:76:1b:57:dc:ad:9b:bb:51:c9:38:71:
6c:12:a6:9e:86:d3:3f:55:d7:7c:0b:a0:f6:a3:5d:
82:b9:4b:32:61:13:bb:ef:43:4a:a3:ba:bf:41:d4:
72:76:c3:7c:44:fc:9c:64:a3:97:01:b2:1c:f7:29:
53:9b:24:57:44:dc:21:c7:1a:2a:9f:9c:e9:d6:d8:
7b:2a:be:c0:23:0c:ee:cf:9f:e5:b5:1d:56:5f:b1:
3f:ea:8a:64:a2:28:6d:8d:b1:d2:c0:f2:e6:18:f0:
4d:bd:b3:0d:6d:fc:f2:9d:a5:12:c0:55:85:d7:19:
89:45:c6:c1:0a:a7:63:16:7e:ad:e8:ac:73:6f:49:
ce:36:33:94:09:0b:56:b2:93:3e:05:19:53:21:0d:
d9:2d:38:b7:f1:21:a7:52:ca:20:7b:da:c1:6c:f1:
e6:ff:b6:de:6b:2c:f6:eb:60:69:ca:c6:3d:c9:a9:
68:c9:63:34:e7:2c:6b:8d:11:b9:ac:6b:58:15:a7:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7C:6C:43:3A:4F:43:00:27:C3:9B:9A:6F:B1:FA:E1:19:79:3B:6B
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/DnxsQzpPQwAnw5uab7H64Rl5O2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.58.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f0:6d:30:65:ad:72:f3:4b:37:25:8f:2e:4e:54:d4:c4:54:
fb:84:08:bc:f8:d9:c3:38:17:8b:6e:de:fb:09:0d:91:2c:8b:
c0:3b:68:d8:92:ad:35:5b:83:1a:7e:83:d7:c2:f2:ef:9b:4f:
a9:d9:a8:06:2a:ae:f3:88:3b:85:e0:99:70:76:a6:00:ae:2e:
ec:fa:7d:a3:4e:72:a5:29:be:7d:50:a3:d1:f2:15:92:1b:69:
79:88:b8:c5:e3:11:56:b5:af:5f:b8:10:33:b9:04:49:7e:0a:
ba:1f:a1:69:fa:a4:05:3f:39:f7:83:56:84:cf:40:f9:21:74:
17:38:92:96:26:83:d7:82:31:77:82:d2:61:84:20:cf:b9:ec:
33:8c:77:08:0c:06:8b:25:f9:01:f2:ef:64:d0:81:3a:d4:84:
d3:4c:fe:48:35:f1:8b:41:1a:4b:26:2e:65:66:9b:4a:36:ea:
d8:9d:4c:da:f8:c9:34:83:25:bb:9d:f4:51:90:2f:77:85:5f:
73:9c:8d:37:36:32:b5:24:1f:16:ba:6a:73:db:ef:0d:c1:f2:
5d:37:09:f3:b1:e4:3c:84:f9:12:cc:e1:f7:3e:7a:64:0f:b3:
0a:5c:16:2c:3d:18:77:9c:06:c7:43:5a:c7:c3:09:f1:1a:ea:
22:38:c1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 05:55:29 2024 by rpki-client on console-ams.rpki-client.org