Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/1OwSvLwG2jFPR-bXPYKL9DfBtkQ.roa
File: 1OwSvLwG2jFPR-bXPYKL9DfBtkQ.roa (raw, json)
Hash identifier: 1l58QU7wMoqxiXg9+Pf27j5lOtn8RvSe6xkugmgLeK8=
Subject key identifier: D4:EC:12:BC:BC:06:DA:31:4F:47:E6:D7:3D:82:8B:F4:37:C1:B6:44
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 018CC86F0B8E9FD06F39B6EB075A0CBFFA53
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/1OwSvLwG2jFPR-bXPYKL9DfBtkQ.roa
Signing time: Tue 02 Jan 2024 04:29:29 +0000
ROA not before: Tue 02 Jan 2024 04:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31122
IP address blocks: 45.94.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 23:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:0b:8e:9f:d0:6f:39:b6:eb:07:5a:0c:bf:fa:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Jan 2 04:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4ec12bcbc06da314f47e6d73d828bf437c1b644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:71:1c:09:4d:74:2b:d2:a2:92:81:4c:2d:
58:0b:73:1e:78:d3:c5:b9:1e:9a:a9:40:a4:1a:a6:
e9:fb:d6:f4:a0:86:70:f0:60:84:c7:ee:86:57:8e:
ea:ea:46:28:73:89:bf:6a:7d:c9:0b:f4:ce:66:80:
55:4a:d5:6d:73:57:60:60:30:57:0b:70:e7:78:7d:
22:b9:97:92:3c:1e:04:67:c5:1c:29:20:da:51:20:
ea:b9:a1:7a:c8:63:e8:81:69:d6:5a:4b:5c:9b:bb:
7d:92:66:79:df:cd:3f:21:08:cb:9a:fd:0f:db:bf:
a4:81:04:c1:41:d3:5a:8c:7e:56:08:43:e6:91:43:
7e:00:4f:c8:cf:cd:cb:4e:07:82:9e:c2:82:9f:41:
db:f5:4a:22:0a:fa:33:7f:66:ca:58:40:bb:94:0c:
e7:65:01:b2:19:ca:f4:dd:4f:68:88:71:f3:af:19:
42:d9:e2:38:55:e9:d2:55:38:f3:9b:ce:3e:b7:ed:
ce:3a:4b:cc:25:b2:22:08:7a:d9:1f:df:1c:72:3f:
8d:6d:02:3c:ab:68:71:c6:2c:68:68:69:02:3f:22:
3d:93:74:ac:c1:84:ce:cd:f8:fa:01:27:28:fe:06:
f9:d3:35:9e:81:24:8d:1b:58:e8:c8:59:32:ae:21:
40:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EC:12:BC:BC:06:DA:31:4F:47:E6:D7:3D:82:8B:F4:37:C1:B6:44
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/1OwSvLwG2jFPR-bXPYKL9DfBtkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.112.0/22
Signature Algorithm: sha256WithRSAEncryption
59:33:61:ee:14:38:3b:2d:e0:a3:83:3e:ef:96:15:2d:a0:87:
ca:fd:da:a5:d5:63:13:4f:2e:83:83:fe:fd:2e:91:68:a6:34:
ef:da:23:ec:ef:54:6d:f9:ab:67:35:45:8c:0f:c6:6f:37:41:
5b:6f:ec:f8:b9:06:8f:d4:d8:ad:8d:33:9e:76:6f:03:d5:25:
14:8c:16:a3:e5:f0:5e:17:83:12:a0:78:a3:9a:8a:21:cb:fc:
25:5e:41:08:9f:7c:c1:ac:99:9b:66:5b:86:ae:c6:8a:94:50:
df:13:4b:95:fe:fc:6c:e2:15:13:62:f1:04:e2:b2:2f:18:ba:
3b:37:c3:1c:c1:7f:b3:b5:4b:8a:38:3a:29:0d:1c:32:cc:dc:
a6:9b:c1:9d:df:ac:00:4a:36:8a:3a:c2:54:60:eb:7b:e6:d5:
fa:31:64:27:f9:69:5d:bc:e7:45:d9:27:33:f0:02:b5:ba:40:
7e:7b:da:ae:74:56:81:46:30:f4:80:5a:60:03:fc:35:e1:62:
15:09:9f:53:84:bc:4e:a1:c8:5d:aa:12:15:f3:68:15:54:5a:
b6:d5:4a:c5:79:85:e0:51:34:5b:de:e5:5f:82:66:f0:4d:b0:
d1:2f:a4:1c:75:84:8a:60:22:b5:af:99:8d:25:e3:5e:59:8b:
67:34:40:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:54:17 2024 by rpki-client on console-fra.rpki-client.org