Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/pODswxY4SqXoDBI2j54CT7d_d5s.roa
File: pODswxY4SqXoDBI2j54CT7d_d5s.roa (raw, json)
Hash identifier: Pygba1HnoF6GdknLv6g3fSALPoryGQo0GCkzefLqMoM=
Subject key identifier: A4:E0:EC:C3:16:38:4A:A5:E8:0C:12:36:8F:9E:02:4F:B7:7F:77:9B
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018CC3B6C2E61AF78A1BE1D2B4273CAC85D5
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/pODswxY4SqXoDBI2j54CT7d_d5s.roa
Signing time: Mon 01 Jan 2024 06:29:43 +0000
ROA not before: Mon 01 Jan 2024 06:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 45.159.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:c2:e6:1a:f7:8a:1b:e1:d2:b4:27:3c:ac:85:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 06:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4e0ecc316384aa5e80c12368f9e024fb77f779b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:68:48:d1:79:7e:3b:3c:84:2a:b1:cc:14:
0c:c3:37:ea:3d:7b:23:c7:00:c0:ef:07:e7:6c:2e:
d9:7c:66:a9:84:0a:47:87:9b:db:e6:15:db:97:52:
7b:82:dc:2b:67:4d:9f:c5:77:c4:9a:d6:48:ea:5d:
d1:24:d6:1d:59:62:6a:b3:a2:16:08:32:12:20:86:
71:98:d9:33:82:46:e1:dd:dd:8a:d6:3b:d2:f6:f5:
6e:e2:69:37:33:58:ba:e0:9d:9c:4e:9d:c8:06:9b:
39:dd:68:49:15:c8:ce:0f:11:07:6e:fc:44:f4:db:
ae:a0:3e:09:7b:fd:89:8c:cd:06:13:4b:f9:33:1b:
5f:e3:ba:08:2c:43:3e:e7:2f:9a:81:ad:da:73:c8:
b5:8c:a5:92:c9:74:eb:1c:46:25:05:a5:4b:8b:b6:
01:6c:59:ec:6d:e6:17:88:d4:35:fa:46:0c:0a:22:
d6:de:58:6a:d4:99:30:88:d2:4c:43:15:b7:68:21:
a2:e2:b5:de:99:4b:b1:e1:e3:e3:48:f0:0c:a9:8e:
16:62:9a:26:48:c8:79:1d:f2:b0:a9:a3:d3:72:16:
d0:25:32:51:5a:22:1f:6c:5b:01:61:da:cb:85:d7:
7a:4a:5d:b2:60:df:2d:3c:43:96:6a:0e:f7:17:18:
00:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E0:EC:C3:16:38:4A:A5:E8:0C:12:36:8F:9E:02:4F:B7:7F:77:9B
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/pODswxY4SqXoDBI2j54CT7d_d5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.248.0/24
Signature Algorithm: sha256WithRSAEncryption
01:68:07:e7:43:72:7a:cd:d8:ee:62:0e:e9:6a:89:18:e2:ad:
b4:40:ee:43:f5:af:87:ec:6d:a5:ef:97:fd:e9:87:c3:48:0b:
ab:22:01:7a:8d:82:92:d9:2c:e2:4b:e5:8b:09:b6:a1:98:ba:
4c:55:60:0c:03:7d:e5:92:e9:4c:f0:dd:7c:9e:71:55:e7:ed:
fb:6a:0b:50:b0:71:cb:48:68:3f:71:09:e5:04:e6:88:50:ec:
e3:c2:65:66:71:1d:72:4e:42:31:db:b4:d3:2f:68:e2:e1:02:
7c:c1:bf:35:d8:30:b8:e8:81:a2:0f:40:30:21:e3:3d:4f:80:
d4:e5:3a:ab:2e:60:c5:65:3f:55:61:94:ee:3a:6f:54:45:7d:
ef:2a:38:e9:2d:b8:f8:42:bf:c1:6e:54:3b:83:a5:0f:bb:d6:
b0:38:8a:85:18:f3:77:94:7a:de:ee:29:cd:a2:9e:93:b1:cf:
ad:ed:d9:2e:68:46:09:d4:55:3f:6f:97:63:76:65:34:8d:55:
cc:c0:97:4b:0c:6f:3f:34:44:88:c5:91:4e:e1:97:13:c5:06:
38:75:61:b0:9e:b5:a6:6e:d2:7a:46:40:95:bd:9f:43:a3:17:
dd:d2:69:f1:1f:4b:0f:c3:e9:d1:b6:59:17:37:ab:a8:6c:80:
bc:40:4b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:01:30 2024 by rpki-client on console-ams.rpki-client.org