Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/3GmXalHTagAfFkFNtIPJwTXql8s.roa
File: 3GmXalHTagAfFkFNtIPJwTXql8s.roa (raw, json)
Hash identifier: vnoZ5auP0c5bPs/iuh7yemkaTM8gj5Y1ToplKtTW2JU=
Subject key identifier: DC:69:97:6A:51:D3:6A:00:1F:16:41:4D:B4:83:C9:C1:35:EA:97:CB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 018CC2DB2DCAB58E7D5897F578F50EA8F1C6
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/3GmXalHTagAfFkFNtIPJwTXql8s.roa
Signing time: Mon 01 Jan 2024 02:29:53 +0000
ROA not before: Mon 01 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209326
IP address blocks: 45.150.228.0/24 maxlen: 24
45.150.230.0/24 maxlen: 24
45.150.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2d:ca:b5:8e:7d:58:97:f5:78:f5:0e:a8:f1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc69976a51d36a001f16414db483c9c135ea97cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:43:80:06:2e:90:a1:35:b1:a0:34:6d:d5:
ed:e5:0a:f3:0a:40:b9:ef:f4:f6:b1:a2:5e:99:15:
ae:f5:19:ca:25:8c:bb:bc:29:68:91:02:ae:c2:f6:
c0:51:c3:d4:fd:3a:e2:ff:b6:9c:54:dc:52:32:23:
5c:d1:65:68:ca:00:59:1e:e8:db:e2:be:67:3e:35:
8f:04:82:9f:1e:3f:f8:9a:27:12:b9:58:20:a0:3d:
d8:95:2e:9c:da:1c:21:17:1e:8b:5b:6d:bd:f4:55:
80:a6:29:7c:47:a0:25:03:a2:0e:0c:87:ff:45:fa:
d0:1d:5f:8e:1a:d2:15:e0:57:f3:46:d7:e2:3d:db:
fe:e1:14:02:71:fa:4e:32:e7:46:14:53:49:86:c4:
21:48:da:a6:26:6f:a3:8e:ec:1a:4a:58:da:55:13:
5c:98:77:78:25:8c:6d:5c:9f:9f:9d:9f:23:6e:ea:
d7:71:c9:20:db:0d:10:1b:b9:0f:6a:03:e2:64:35:
2c:91:a9:c2:f5:09:82:62:56:92:da:3f:94:c8:e1:
0b:0a:0b:97:39:b2:8d:b9:4f:53:d2:98:85:09:5a:
82:4a:b2:eb:72:85:5c:03:63:b3:dc:41:0c:da:b7:
89:8d:cd:e5:fd:89:1f:4f:75:b4:7a:86:9a:81:f8:
1d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:69:97:6A:51:D3:6A:00:1F:16:41:4D:B4:83:C9:C1:35:EA:97:CB
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/3GmXalHTagAfFkFNtIPJwTXql8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.228.0-45.150.230.255
Signature Algorithm: sha256WithRSAEncryption
a3:40:3c:75:a1:98:05:6e:33:6b:cd:8c:a2:6c:8d:c8:ed:5f:
b7:37:1a:26:ed:61:d2:00:e5:c1:f8:64:31:8e:7a:0b:4f:9e:
d7:3a:9d:33:ed:68:10:01:ac:39:a1:ec:60:22:a1:dc:29:a2:
ba:fe:d5:99:59:93:87:68:6e:02:08:04:31:e1:14:18:05:08:
8a:8a:7b:31:5d:f2:5f:bd:47:e0:57:63:44:14:0b:d9:32:f0:
4e:0b:b8:58:5c:dd:b6:b0:7e:7f:38:d4:b9:a5:f2:b5:16:b9:
0a:f4:c6:98:23:67:5d:bd:db:1f:8b:c3:03:af:07:eb:a2:ac:
73:e4:bd:dc:62:42:ae:ec:1b:de:be:92:2d:3c:13:f9:9e:1d:
d8:eb:b4:15:a1:51:f1:6d:a3:6f:5b:8a:40:5f:ed:69:b0:89:
e6:26:9d:1e:21:6b:88:9a:77:11:38:5f:9a:0d:e2:c3:4d:dd:
c8:58:56:5b:07:15:be:ee:e3:08:ee:9d:cf:d1:a3:81:ee:57:
3b:e7:d8:aa:9b:76:6a:b4:ff:22:64:8a:15:83:03:1f:42:93:
53:a4:2f:15:97:3e:ba:03:c1:1c:1b:32:9f:9a:c1:6d:92:5b:
0f:fe:bc:65:88:c6:85:cf:2f:e6:76:90:a2:a9:ad:32:58:87:
1d:5d:60:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:23:24 2024 by rpki-client on console-ams.rpki-client.org