Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/DI8Lar4k414Z0bqXCPvF3j4bvdQ.roa
File: DI8Lar4k414Z0bqXCPvF3j4bvdQ.roa (raw, json)
Hash identifier: amfQHsTvzVdEsSPl2cIQCY1qlX+nn6bPQmYADawLlKI=
Subject key identifier: 0C:8F:0B:6A:BE:24:E3:5E:19:D1:BA:97:08:FB:C5:DE:3E:1B:BD:D4
Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial: 018CCA296F48D061CCD166AFE1C2265BA7E6
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/DI8Lar4k414Z0bqXCPvF3j4bvdQ.roa
Signing time: Tue 02 Jan 2024 12:32:42 +0000
ROA not before: Tue 02 Jan 2024 12:32:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208815
IP address blocks: 45.84.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:6f:48:d0:61:cc:d1:66:af:e1:c2:26:5b:a7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Validity
Not Before: Jan 2 12:32:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c8f0b6abe24e35e19d1ba9708fbc5de3e1bbdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:d7:83:3d:1d:b7:5f:9e:98:80:31:1e:da:
25:a9:12:e2:0d:90:5f:7f:d7:31:3d:71:ca:3c:4a:
c4:fa:3f:4d:8c:87:f3:a3:cd:e7:1d:77:e6:aa:37:
62:35:86:f0:15:9a:5e:ef:e4:8a:2b:23:1a:a6:52:
c1:25:f0:ee:0c:0f:bc:1c:1b:6c:4d:cd:be:a0:11:
b9:7b:27:d7:9f:48:33:cc:23:30:17:0f:29:e5:22:
50:d0:73:53:ee:ca:73:9f:43:77:f4:b1:24:24:50:
b5:84:eb:96:a2:33:91:02:b3:dd:6d:e9:40:3c:31:
06:03:9d:aa:b5:78:07:2f:ae:f2:95:c3:ed:a6:ee:
a6:ea:35:d3:a8:92:ba:43:9c:bf:ff:dc:2b:15:b8:
cf:19:f9:c7:0b:ab:7f:3f:87:cf:11:ab:6a:6e:67:
83:d2:64:1d:36:dd:ca:f5:75:69:d5:a6:5f:64:c9:
a3:b4:41:37:19:a4:68:88:35:04:7d:23:6b:03:5b:
e3:13:45:90:b3:d6:72:86:76:6d:2c:ed:08:cc:c2:
0d:0e:77:f1:66:6c:d8:a3:e8:12:7f:be:08:ec:e0:
44:fa:a8:89:6f:e6:6d:be:cc:3d:b4:91:50:00:a5:
17:3d:26:b3:f7:fd:d6:45:5e:7e:22:d5:ee:39:49:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8F:0B:6A:BE:24:E3:5E:19:D1:BA:97:08:FB:C5:DE:3E:1B:BD:D4
X509v3 Authority Key Identifier:
keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/DI8Lar4k414Z0bqXCPvF3j4bvdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.36.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:23:75:c5:91:2d:03:9a:63:b1:f5:23:58:23:21:e0:c4:de:
83:22:6b:78:17:06:85:19:1f:c2:37:e0:d4:48:49:e7:3c:05:
62:88:f2:81:5d:15:4f:7b:65:68:a9:87:82:e1:98:5c:4d:23:
c5:83:ba:76:03:e1:f5:f9:a3:9e:1a:18:16:cd:1e:96:86:3e:
1e:f8:67:1e:89:59:83:0c:f4:fa:29:a3:15:d3:b1:c3:7f:48:
8a:a6:73:77:d9:db:e8:5f:44:0b:17:56:5a:47:d6:c5:cc:58:
7b:cb:49:ac:54:0b:0a:5d:2b:fc:67:a5:0c:10:db:e3:7d:1c:
6f:b9:53:c8:42:e8:a6:71:82:27:aa:5c:80:b3:83:95:51:1b:
6b:10:0c:ef:a2:d3:87:4c:b6:d8:33:2e:bd:c2:8f:6b:7d:b9:
15:e8:90:24:72:01:3d:89:58:eb:e4:37:46:3c:d4:3d:fa:09:
a9:5c:38:ac:5c:d5:14:66:76:64:47:48:fe:22:12:da:dd:ed:
b6:6c:b2:e6:67:63:e9:47:8b:79:58:79:03:99:89:8b:d7:63:
fc:dc:e8:cb:69:bf:65:dc:07:a5:e6:4a:59:65:67:76:39:d6:
94:68:97:1e:8b:06:7a:d4:8c:ba:6f:42:88:f7:4a:e2:dd:6c:
9d:66:9a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:16:52 2024 by rpki-client on console-ams.rpki-client.org