Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/Mh4UYERk8Xqq5CiHT7KDKBK84wQ.roa
File: Mh4UYERk8Xqq5CiHT7KDKBK84wQ.roa (raw, json)
Hash identifier: zthTkgm/Lf2UiSW/72WB0Wmj8Q23/D2eKAdi35uPVm0=
Subject key identifier: 32:1E:14:60:44:64:F1:7A:AA:E4:28:87:4F:B2:83:28:12:BC:E3:04
Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial: 018CC8DEA045AF1C46F2599708FECDF4383D
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/Mh4UYERk8Xqq5CiHT7KDKBK84wQ.roa
Signing time: Tue 02 Jan 2024 06:31:22 +0000
ROA not before: Tue 02 Jan 2024 06:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31287
IP address blocks: 45.66.44.0/24 maxlen: 24
45.66.47.0/24 maxlen: 24
45.66.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:a0:45:af:1c:46:f2:59:97:08:fe:cd:f4:38:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Validity
Not Before: Jan 2 06:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=321e14604464f17aaae428874fb2832812bce304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:79:52:5b:ef:49:34:56:7e:61:0b:e1:b1:7f:
1d:00:ab:66:f2:6e:34:2a:ee:9c:fe:76:2a:0e:09:
bd:d3:8c:35:cf:bf:38:d2:69:e0:0e:9d:a5:4b:a9:
90:b8:b2:b8:06:78:3a:f4:91:15:bf:24:b0:4c:dc:
98:e2:3e:e2:1a:f2:3e:7b:35:47:59:7a:64:9e:50:
10:83:20:d3:c4:88:cc:e0:16:7f:59:78:ac:bd:b2:
d0:b3:bb:f5:e5:e6:d0:f8:c2:0b:85:03:69:57:d0:
d8:5f:ff:39:7e:d9:77:ec:64:60:1d:35:6f:eb:e7:
70:a1:e6:ad:51:35:66:8a:95:63:e5:f0:c0:3c:60:
c8:ac:b6:25:0f:d1:7f:8b:c2:77:34:6a:51:bb:43:
89:f9:49:ea:53:b9:e4:ee:87:3f:69:22:68:a4:64:
07:82:8e:1e:9b:6e:5c:fb:3d:d1:d4:eb:e6:09:a8:
d4:84:bf:55:f3:1d:b0:ed:58:ac:2f:11:35:dd:03:
58:c0:5c:69:e6:20:50:cc:5c:d4:aa:d5:98:48:a5:
42:67:39:dd:73:6c:2b:0f:03:be:87:57:6a:7f:bf:
9c:43:e3:e5:17:53:51:7a:c1:d8:4b:c3:21:56:59:
aa:9a:66:83:9d:e7:8d:1c:c5:49:d9:bf:8b:8f:fd:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1E:14:60:44:64:F1:7A:AA:E4:28:87:4F:B2:83:28:12:BC:E3:04
X509v3 Authority Key Identifier:
keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/Mh4UYERk8Xqq5CiHT7KDKBK84wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.44.0/23
45.66.47.0/24
Signature Algorithm: sha256WithRSAEncryption
69:2c:52:6e:fa:8a:a9:3f:58:17:37:25:c1:de:75:39:bd:c6:
b5:53:df:c5:c2:39:7f:5c:64:87:99:2b:b2:2e:37:bc:7f:1f:
d9:4b:11:5f:23:6b:fb:8c:9b:df:57:d1:cb:76:31:33:92:ee:
41:8a:f2:92:a6:82:65:f2:1a:e5:3f:f2:8a:b5:fb:05:b0:a1:
11:0a:83:75:e0:80:e8:f0:b4:d5:aa:f6:e6:f9:af:23:2c:ba:
20:e7:d3:d5:87:d9:58:3a:ae:18:dc:c4:1b:2d:90:13:5b:7c:
21:a8:54:25:ba:2d:43:87:2c:82:dd:4b:d5:18:7b:7a:86:5b:
76:07:0f:98:23:3b:29:48:6d:98:4d:c8:6f:43:16:85:f8:f6:
07:5c:f4:1b:7a:fe:8d:51:6f:42:e8:d6:a8:bd:b7:be:aa:07:
66:dc:fa:c4:84:c3:11:30:7b:76:0a:56:ee:86:13:ec:08:69:
c9:57:ec:bc:97:6d:39:2d:00:93:f2:86:cd:6b:02:95:59:23:
7e:b7:62:52:a3:da:a8:04:6e:47:eb:06:1a:7f:f0:cb:73:e3:
20:a8:a5:a3:cc:ac:e0:76:42:d3:ca:f4:9d:12:d6:bb:b0:15:
17:cc:23:f4:b1:89:e2:7d:45:41:05:1c:b7:be:94:01:73:93:
9c:3f:ee:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:53:35 2024 by rpki-client on console-ams.rpki-client.org