Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/z_RdlTKv5Vad94R4IA-reOG-4TE.roa
File: z_RdlTKv5Vad94R4IA-reOG-4TE.roa (raw, json)
Hash identifier: 8+/qpKK8XD2Mp4qxHGnR9HBazDHaHblUbc6tA2AjuRo=
Subject key identifier: CF:F4:5D:95:32:AF:E5:56:9D:F7:84:78:20:0F:AB:78:E1:BE:E1:31
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018CC5004B6AE84B704AA13C1A53D3BB6E70
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/z_RdlTKv5Vad94R4IA-reOG-4TE.roa
Signing time: Mon 01 Jan 2024 12:29:40 +0000
ROA not before: Mon 01 Jan 2024 12:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207810
IP address blocks: 217.113.12.0/22 maxlen: 22
217.113.18.0/23 maxlen: 24
45.159.73.0/24 maxlen: 24
45.159.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:4b:6a:e8:4b:70:4a:a1:3c:1a:53:d3:bb:6e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 1 12:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cff45d9532afe5569df78478200fab78e1bee131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:e4:ff:43:54:3c:01:65:e5:31:42:fa:74:
5a:8a:5e:f1:d8:18:a5:1c:77:16:71:8e:d1:4a:52:
90:0d:ef:4c:45:d7:e8:c6:73:b7:b0:ce:45:96:f3:
0e:27:93:e7:f7:1a:a3:97:b9:aa:72:20:0e:a9:56:
1f:e5:ba:0c:8a:ec:a6:b1:21:cd:8e:8f:62:73:65:
31:09:aa:7d:30:19:bb:13:96:5f:17:f5:7f:9c:fb:
6c:aa:79:4e:a7:59:94:d4:0d:b4:d5:49:13:c9:94:
d5:d4:c4:d8:92:7f:a5:76:43:55:27:18:ae:d8:bf:
89:1c:33:af:ee:5b:7d:8d:9d:bd:b1:e1:8e:5a:ca:
8e:fd:2a:2a:32:62:d2:18:42:33:f0:06:0d:8d:ba:
14:ec:66:45:79:62:fc:90:61:06:1b:7c:57:de:30:
4b:91:34:50:94:31:a9:01:ee:85:93:a3:cf:81:8d:
70:ba:15:db:00:60:07:1b:ce:27:40:16:de:a0:c4:
7c:fd:6e:4e:c6:3f:25:79:56:c5:e3:24:c1:0f:25:
63:6f:82:2e:e2:67:c6:a2:83:6d:05:f1:24:c7:e8:
9b:d5:fe:a1:8e:cf:da:e9:38:b1:14:a4:44:aa:93:
ce:66:1d:40:1c:12:24:e6:4d:b2:55:33:a0:e7:00:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F4:5D:95:32:AF:E5:56:9D:F7:84:78:20:0F:AB:78:E1:BE:E1:31
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/z_RdlTKv5Vad94R4IA-reOG-4TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.73.0-45.159.75.255
217.113.12.0/22
217.113.18.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:de:00:84:89:d0:72:5e:ae:81:a0:9b:b5:24:5d:8a:5b:a0:
a4:e2:45:07:0c:11:b2:17:b2:38:ad:76:9f:de:80:3e:c7:db:
4d:48:f7:fd:9b:0a:c3:31:b4:8e:25:2f:b2:1d:d3:0d:31:a1:
5c:c1:5c:6b:fd:ee:e5:77:cc:b7:a5:19:1e:1c:73:d7:61:c5:
8c:49:94:3c:41:79:4a:a8:03:43:8a:b3:0a:8b:05:28:53:86:
fd:d3:2c:a6:d9:06:23:a7:73:14:f4:97:d4:b5:21:31:1a:ab:
f9:22:1e:d5:7d:a6:d0:c3:53:06:c9:7a:df:2e:9d:a4:55:61:
50:20:7e:5f:77:8b:da:cd:6b:21:47:ad:78:58:af:c8:8a:63:
4a:e6:9a:da:e6:60:a8:85:ea:1e:19:e1:28:56:19:a0:2f:52:
2b:e0:72:f7:fb:08:1c:5e:2a:12:a8:cc:e2:b2:da:a7:23:ab:
13:78:22:46:40:20:e3:00:6e:21:72:af:cf:94:69:fd:9f:55:
d8:07:0e:d3:b0:3a:a4:aa:d7:cd:10:4c:a7:2c:6a:9f:05:1f:
56:53:ab:96:3f:bd:6e:11:08:70:53:ea:67:ef:6e:02:52:20:
53:da:00:f8:93:65:5b:5f:54:2f:9c:ae:00:fa:c4:60:d0:e3:
09:ec:83:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:36:35 2024 by rpki-client on console-ams.rpki-client.org