Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/1SWJLYD8hakKZ32YvSh3GSVWQ8E.roa
File: 1SWJLYD8hakKZ32YvSh3GSVWQ8E.roa (raw, json)
Hash identifier: vVpqEVEErDiIJ2GUZGcYQJMYMXQZ5V2U7KgFuepQBjk=
Subject key identifier: D5:25:89:2D:80:FC:85:A9:0A:67:7D:98:BD:28:77:19:25:56:43:C1
Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial: 018ED2E24175E809BB834CB2811F6776663E
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/1SWJLYD8hakKZ32YvSh3GSVWQ8E.roa
Signing time: Fri 12 Apr 2024 15:17:07 +0000
ROA not before: Fri 12 Apr 2024 15:17:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39402
IP address blocks: 45.84.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d2:e2:41:75:e8:09:bb:83:4c:b2:81:1f:67:76:66:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Validity
Not Before: Apr 12 15:17:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d525892d80fc85a90a677d98bd287719255643c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:48:ce:a6:3f:bf:63:5a:26:d3:31:83:f2:26:
81:58:81:e8:f7:ad:e6:97:5a:13:3d:1a:c8:32:3a:
c8:f6:10:dc:9c:f9:05:94:68:3a:76:a2:c2:c7:99:
1f:65:e3:ce:a2:65:0f:24:49:bd:67:d0:b4:4e:6c:
a5:3d:61:13:6c:48:21:27:c3:23:ef:4c:fe:8e:db:
0a:c5:c0:55:15:af:7f:15:b8:42:89:d2:1f:be:d8:
b3:19:87:18:23:15:b0:c5:c1:62:51:cc:55:7b:98:
dd:0c:20:48:64:db:6f:04:26:3f:9a:ee:22:2d:a8:
ed:f1:9f:11:9c:43:86:ad:44:72:fe:69:42:75:bf:
95:33:8e:de:39:77:28:5d:ab:2e:da:74:58:d5:81:
d7:cd:84:6f:82:e3:11:08:36:75:f6:b3:f7:2c:f5:
f4:af:28:78:3d:28:6b:36:25:80:d9:32:27:90:4c:
7c:83:ee:da:d5:59:67:5f:c8:5f:77:32:85:3f:1a:
86:a3:56:eb:18:11:fc:4c:f4:38:ef:e1:14:86:e3:
6a:0b:12:6d:ea:ba:f2:8e:92:07:5e:0d:19:d8:9e:
df:bc:58:7f:71:4c:00:64:e7:11:d7:9e:98:e7:ad:
2d:64:be:fd:53:24:05:6e:79:c6:71:35:3a:0e:a6:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:25:89:2D:80:FC:85:A9:0A:67:7D:98:BD:28:77:19:25:56:43:C1
X509v3 Authority Key Identifier:
keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/1SWJLYD8hakKZ32YvSh3GSVWQ8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.36.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:69:fc:2f:0f:2c:3f:78:07:02:55:b3:78:20:dc:b3:6c:fc:
4c:61:a6:09:93:29:91:52:0b:82:cb:67:6a:b4:9a:53:9c:00:
85:39:83:10:bb:2b:63:2c:1b:2f:b2:0f:f7:52:43:b2:27:4e:
3b:49:6a:fb:68:4e:61:e8:6f:ed:b2:df:4c:f1:9f:b6:a7:d6:
03:52:c9:52:e7:e7:05:5a:5f:fa:a8:c1:d7:6f:d9:39:31:f8:
4a:d3:60:61:f9:ac:8f:b5:99:fe:68:b3:74:a6:22:50:cf:74:
84:02:65:fb:ee:1e:f3:cb:01:64:df:d5:90:d0:b9:91:25:dd:
82:b2:83:e6:b2:db:93:3d:48:2b:fa:60:9e:8f:d9:b6:fc:ba:
b8:ac:8a:6f:5d:0a:e2:28:75:2a:fe:f7:1c:c5:45:91:e4:21:
f3:ff:a1:a1:83:15:b7:b6:fe:6e:11:fe:73:d9:8b:e0:e0:50:
4d:66:97:05:6c:79:4a:bb:b0:94:be:62:e0:da:71:01:26:55:
35:7d:70:56:71:8a:37:83:0d:c2:08:cf:f4:d8:a3:66:de:79:
b4:2a:db:0d:9e:3f:1e:87:f8:3c:f8:4a:5c:9e:20:ed:44:54:
e5:ec:fc:60:06:73:19:7a:54:5e:f5:d9:f2:31:ed:00:8c:ce:
cd:7b:42:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:47:23 2024 by rpki-client on console-fra.rpki-client.org