Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/JU4WvFS0NCO1jFsC-cyAbLJnseU.roa
File: JU4WvFS0NCO1jFsC-cyAbLJnseU.roa (raw, json)
Hash identifier: oGLDKVo/CFxal+FLtgRrdH1uDKbImJ0PmIt+qzYdxRs=
Subject key identifier: 25:4E:16:BC:54:B4:34:23:B5:8C:5B:02:F9:CC:80:6C:B2:67:B1:E5
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018CC3B6C3B1A9386C3C02E35E19D634DBFE
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/JU4WvFS0NCO1jFsC-cyAbLJnseU.roa
Signing time: Mon 01 Jan 2024 06:29:43 +0000
ROA not before: Mon 01 Jan 2024 06:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44094
IP address blocks: 45.84.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:c3:b1:a9:38:6c:3c:02:e3:5e:19:d6:34:db:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 06:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=254e16bc54b43423b58c5b02f9cc806cb267b1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:2f:8b:f8:86:f9:a1:4e:36:66:c5:94:ed:
73:6b:57:d0:84:f2:eb:dc:74:14:27:55:ef:db:1a:
1d:e0:ce:d8:3a:fa:e0:3f:b3:e1:0c:70:b0:dc:35:
48:55:df:3b:fb:52:95:df:17:d3:25:2b:1c:b9:e9:
23:fc:f5:8a:dd:c3:41:0f:c7:0c:8a:eb:8e:66:88:
bd:8c:ee:25:7d:c0:f7:1d:f3:5f:8e:36:a0:65:d4:
9b:cf:e4:91:2b:97:f5:7d:c6:cb:c9:7c:37:70:ad:
6b:2d:53:08:a9:39:58:1a:5d:1a:8a:f0:a4:41:41:
53:b5:a9:b3:95:d6:54:fb:b2:df:84:2e:24:5e:92:
5b:fd:26:6c:4e:d2:c3:78:58:64:ef:b2:e3:6a:a8:
1c:b9:5d:d9:d1:84:a4:0f:f2:77:7a:0b:0d:4a:72:
10:ca:aa:6a:2d:10:ba:3e:08:c2:aa:22:9d:7b:93:
ef:62:05:52:e8:c6:12:b9:dd:3f:61:78:b4:8d:3f:
4e:14:96:50:ec:10:49:7b:48:ee:37:bb:42:9c:0d:
42:7b:0a:91:44:01:1d:3f:c2:6f:6a:5c:e6:3c:00:
0b:01:b1:98:0c:4e:71:66:2a:20:1a:38:ae:cc:2c:
d1:b3:2b:d2:5e:71:53:39:45:ae:3f:28:b8:1c:3b:
8f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4E:16:BC:54:B4:34:23:B5:8C:5B:02:F9:CC:80:6C:B2:67:B1:E5
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/JU4WvFS0NCO1jFsC-cyAbLJnseU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.1.0/24
Signature Algorithm: sha256WithRSAEncryption
42:36:8c:b5:42:50:c2:75:87:d5:39:7a:b1:7d:a7:80:68:f8:
f9:b9:60:d5:f8:97:6d:5c:81:a7:6f:64:6b:65:cf:57:4e:03:
ce:7e:51:01:b1:5b:38:5e:17:de:49:67:28:53:e1:ea:e6:25:
38:fa:80:d4:e3:d2:5e:86:89:09:83:19:1a:13:a6:cb:0c:01:
3f:4d:be:9c:86:19:b8:96:33:f7:0d:d6:dc:e2:4f:69:6c:d2:
44:3d:5a:13:64:f6:05:81:ee:f9:a9:b9:99:7d:8d:02:d6:56:
a1:b9:c4:95:2f:37:2d:27:8d:89:e4:50:28:ee:5d:59:44:66:
7e:43:b8:58:4d:2c:37:17:05:3c:89:84:a3:64:98:83:7b:ff:
06:2f:55:31:5e:8e:0b:46:9a:60:1c:2d:09:99:32:d2:1a:ee:
9a:5f:9f:c2:61:c6:5b:eb:9b:41:c9:55:64:90:55:b5:d3:5a:
5d:11:07:bf:08:35:a8:53:56:fd:45:97:b3:20:97:a8:e1:77:
ea:22:ee:db:be:3e:d1:67:60:48:52:8e:c7:fd:87:72:e6:cd:
e9:a0:fd:d8:3b:57:2c:39:fb:ab:08:a7:c9:d7:83:88:96:09:
ab:63:01:6c:d8:f5:1d:33:c4:f9:d3:18:e4:d0:a6:ce:92:ac:
2d:9e:1d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:03:45 2024 by rpki-client on console-fra.rpki-client.org