Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/3MJNlbpo4aoTLsy7h1KwZNIq8sw.roa
File: 3MJNlbpo4aoTLsy7h1KwZNIq8sw.roa (raw, json)
Hash identifier: e++pIrzJZZAy/KCssczcQGy8fykrNmCyXtSSg+raKIQ=
Subject key identifier: DC:C2:4D:95:BA:68:E1:AA:13:2E:CC:BB:87:52:B0:64:D2:2A:F2:CC
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 018CC802BCB76E77A674993E5F41AE364E05
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/3MJNlbpo4aoTLsy7h1KwZNIq8sw.roa
Signing time: Tue 02 Jan 2024 02:31:11 +0000
ROA not before: Tue 02 Jan 2024 02:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197730
IP address blocks: 45.152.87.0/24 maxlen: 32
45.145.5.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:bc:b7:6e:77:a6:74:99:3e:5f:41:ae:36:4e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Jan 2 02:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcc24d95ba68e1aa132eccbb8752b064d22af2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4c:3f:a6:89:f0:87:d3:b8:24:ec:89:97:6b:
28:18:f8:bf:f4:1e:cf:34:b1:3f:e6:cf:84:03:a2:
df:39:ea:5b:77:7f:db:11:39:f6:3d:9b:a4:12:6a:
81:2f:7f:55:c6:8f:0a:f3:c7:92:7d:14:35:b5:24:
8c:1d:1d:d2:19:5f:55:15:c1:0c:5f:bd:a4:cb:4d:
b6:3c:34:7f:d9:5c:3b:b4:51:a5:24:fc:64:b9:10:
dd:94:3e:2f:aa:7a:fa:61:b1:91:ef:ef:ef:d5:2d:
5b:7f:f7:4b:ef:59:d3:03:f3:2c:9a:7f:86:ee:f6:
fa:60:ad:35:b3:f3:c8:3b:15:e4:70:20:e7:3d:80:
4e:6c:db:44:a6:b3:c6:cc:d4:ab:c1:80:c5:21:ac:
19:5f:de:6a:32:fd:21:88:e0:9c:14:2f:0d:e2:d0:
6d:66:38:ef:7c:b6:e1:2d:71:9d:30:69:4d:96:c6:
eb:40:07:c4:85:47:68:37:14:a7:07:f5:e0:7a:db:
e4:b7:49:fa:9d:bc:d5:43:4e:de:4e:0a:f8:2f:e2:
2b:bd:ca:fa:e8:64:d3:73:3a:d3:8b:10:ea:26:47:
ab:80:a4:13:6f:dd:5d:9a:04:f8:b5:26:16:a5:ad:
15:71:1a:3f:ef:04:1e:82:5d:47:08:7b:be:2a:b9:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C2:4D:95:BA:68:E1:AA:13:2E:CC:BB:87:52:B0:64:D2:2A:F2:CC
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/3MJNlbpo4aoTLsy7h1KwZNIq8sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.5.0/24
45.152.87.0/24
Signature Algorithm: sha256WithRSAEncryption
83:cf:ac:84:14:0a:2a:73:d5:6e:20:c5:48:2e:96:45:21:c7:
95:05:ec:e6:08:60:48:c6:c1:43:cc:85:77:49:d5:77:07:9a:
42:29:f8:3e:b9:20:48:fd:93:25:76:03:0e:48:b1:f5:6c:47:
47:c0:c2:c7:fb:da:65:73:73:ef:76:5c:ab:28:80:36:c1:55:
b3:97:25:49:8b:7e:f4:48:51:cb:46:c9:3e:34:f6:47:6a:55:
ef:8a:ac:e0:06:67:e6:33:b7:ba:5f:a2:7b:2b:95:d7:88:1e:
df:1f:39:b9:96:59:b3:0d:84:d0:25:aa:20:e9:20:10:01:48:
31:a7:a5:e5:ed:8a:19:f1:95:4f:df:32:36:6f:45:56:39:a5:
09:03:49:3b:e6:db:f1:af:6c:54:26:14:8a:41:7c:18:0a:dc:
cd:cf:c9:02:e9:7f:fd:35:8e:1b:b7:33:16:53:1d:9d:66:34:
80:c0:96:73:52:b2:69:8d:a6:8f:5f:67:2f:f3:ac:58:46:39:
fd:e5:f7:a6:95:8c:43:94:fd:75:5f:e4:03:46:28:d0:0c:22:
22:b8:6a:45:c6:c7:24:d9:53:70:dc:79:20:28:d0:c5:05:8e:
26:96:b3:d2:2d:af:c1:75:5a:72:a4:41:cc:58:73:d1:4d:cb:
79:62:9b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:06:40 2024 by rpki-client on console-ams.rpki-client.org