Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/3OG6r9zBHa9Bwhz63fOeuwA3LLc.roa
File: 3OG6r9zBHa9Bwhz63fOeuwA3LLc.roa (raw, json)
Hash identifier: RVy510cmCgIpbTHl/T4XnighX3T/MCXv2W4fIBnYvdE=
Subject key identifier: DC:E1:BA:AF:DC:C1:1D:AF:41:C2:1C:FA:DD:F3:9E:BB:00:37:2C:B7
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 018CC7944F9DF23738121F1B3F9679940FE8
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/3OG6r9zBHa9Bwhz63fOeuwA3LLc.roa
Signing time: Tue 02 Jan 2024 00:30:34 +0000
ROA not before: Tue 02 Jan 2024 00:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212384
IP address blocks: 45.12.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:4f:9d:f2:37:38:12:1f:1b:3f:96:79:94:0f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jan 2 00:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dce1baafdcc11daf41c21cfaddf39ebb00372cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:16:dc:fc:fa:76:35:f1:da:75:11:c2:d8:35:
94:f3:d2:9c:d5:3f:a6:43:bd:a8:47:06:52:4e:4c:
bb:5c:7f:61:c3:41:df:a2:3b:48:35:01:d5:e0:59:
f8:35:2c:77:71:13:3e:84:5e:85:50:76:0b:78:97:
7c:1d:19:f2:5f:1e:8a:55:29:51:f9:2d:fa:84:07:
14:fc:70:8f:7d:37:13:3f:31:07:0b:17:82:89:bf:
a0:6c:de:0d:d1:0c:7c:94:14:51:2a:6d:ce:5f:64:
fa:8d:ee:8f:cd:c9:f4:fd:ae:50:1f:3b:47:db:4f:
9c:28:bc:ba:13:53:73:3a:d8:43:6d:aa:c9:2e:d8:
f3:1b:68:e9:9d:ec:ce:73:3c:13:e2:ef:54:c6:ed:
cb:d7:e3:4d:bf:ec:92:02:bb:6d:4b:b7:92:21:7f:
2a:33:3e:94:a9:9a:94:b1:51:90:3c:38:f1:9d:a7:
8b:0f:bd:5c:cd:76:19:6b:ab:74:4d:05:72:b2:66:
f3:27:4d:b6:da:01:e4:18:4e:d2:a0:62:71:2f:a1:
d7:b3:5c:2c:c6:fc:a4:64:8b:f8:d1:c0:bf:2f:fb:
43:3d:ba:f0:d1:4c:39:37:5c:a5:54:3f:c2:44:d9:
6b:62:f9:c4:b1:0c:f0:e0:41:9c:05:47:2d:9f:ad:
52:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E1:BA:AF:DC:C1:1D:AF:41:C2:1C:FA:DD:F3:9E:BB:00:37:2C:B7
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/3OG6r9zBHa9Bwhz63fOeuwA3LLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.104.0/22
Signature Algorithm: sha256WithRSAEncryption
44:2c:78:25:a0:bf:53:c9:44:8d:8d:a8:e2:a8:32:ef:ad:2e:
8b:f1:f5:8d:9e:4f:b2:12:4c:2b:3e:52:56:78:33:58:16:ca:
fb:49:5e:8a:19:b5:00:1c:cb:20:61:64:e3:01:42:fd:bf:8e:
11:05:96:13:03:6e:8a:f2:56:e1:a1:6e:1e:cd:e0:74:40:65:
79:f3:fb:af:f2:24:44:13:be:a6:28:51:cb:50:da:dc:ec:d3:
67:c5:e3:8e:31:8a:60:bc:4a:06:e7:51:03:86:c1:bc:12:d6:
73:64:d8:48:b4:c4:2f:48:31:a9:88:1f:c1:b7:21:2f:7b:81:
28:a6:10:d1:28:1c:a0:65:da:12:a1:25:2c:14:f7:3c:eb:00:
8f:e2:94:c7:f3:af:6e:ac:14:6c:4c:b6:92:f1:e0:3a:60:67:
13:38:b0:ed:e1:9d:3d:67:13:90:49:81:a4:66:24:74:20:34:
a7:e2:c3:e8:8d:c9:40:a2:45:d3:30:0a:48:e4:eb:87:6f:4a:
95:f6:6a:aa:59:62:3c:ef:c6:db:57:b1:dd:e4:1e:00:96:75:
26:07:87:d0:40:d8:58:b8:b9:79:ac:53:71:24:9a:07:cb:19:
bc:15:da:b3:7a:36:48:7c:26:6e:8e:7f:9c:5a:8a:77:9f:e2:
5d:1d:36:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:26:22 2024 by rpki-client on console-ams.rpki-client.org