Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ZPpPYvuDljIdOn4Z_Reh_yj7TPY.roa
File: ZPpPYvuDljIdOn4Z_Reh_yj7TPY.roa (raw, json)
Hash identifier: uHZ0u5mYM1Q1CJvebK9NQYwnBsqcS/p31i4GrIkpxjQ=
Subject key identifier: 64:FA:4F:62:FB:83:96:32:1D:3A:7E:19:FD:17:A1:FF:28:FB:4C:F6
Certificate issuer: /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial: 018CF291F501B9145B1DA3B90FD1B190E389
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ZPpPYvuDljIdOn4Z_Reh_yj7TPY.roa
Signing time: Wed 10 Jan 2024 08:51:40 +0000
ROA not before: Wed 10 Jan 2024 08:51:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.112.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:91:f5:01:b9:14:5b:1d:a3:b9:0f:d1:b1:90:e3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Validity
Not Before: Jan 10 08:51:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64fa4f62fb8396321d3a7e19fd17a1ff28fb4cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:31:de:fa:ea:5c:19:39:99:7a:2f:dd:7f:93:
1d:6a:c0:bb:de:3b:35:8d:13:89:b8:ce:3f:75:e8:
05:59:83:f3:44:bb:5e:d6:90:4c:48:f5:db:28:85:
b4:5a:44:be:38:e0:60:d0:0e:12:b0:1e:ea:ee:9b:
f3:a5:76:cf:9c:14:bc:c8:80:21:95:7d:ea:5c:e6:
3b:8e:19:6b:99:08:5f:b9:3a:4c:7f:97:50:3f:15:
2d:5b:a4:bb:48:7e:79:86:31:d2:cf:1f:8a:cd:43:
aa:14:3d:2f:2f:c5:24:fb:fc:49:03:7a:d1:59:26:
47:85:38:cc:38:71:92:15:73:73:ca:8a:cd:5d:89:
42:1e:41:92:a2:41:89:73:ad:08:00:cd:d1:be:31:
b4:36:39:01:7e:68:19:90:46:3d:b6:f9:78:93:fc:
e0:5c:5e:2a:17:09:ee:4a:75:52:90:bc:40:ed:ec:
87:bf:22:8d:7b:c4:be:9e:be:24:9e:a9:fb:27:8e:
04:bd:3d:72:2d:3b:d6:91:bf:bc:2a:74:fe:eb:64:
57:80:ae:a2:6f:8c:23:9b:ca:fb:6f:ab:81:59:55:
15:cf:ae:85:18:0e:fc:2e:d3:42:39:c9:2e:63:ec:
3d:84:37:b6:70:66:5c:8a:da:ee:69:c5:87:35:68:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FA:4F:62:FB:83:96:32:1D:3A:7E:19:FD:17:A1:FF:28:FB:4C:F6
X509v3 Authority Key Identifier:
keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ZPpPYvuDljIdOn4Z_Reh_yj7TPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.232.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:5a:d4:31:3b:97:4c:fa:34:b7:f2:4a:3c:95:8e:7d:6b:f3:
d1:25:e6:fc:c4:a8:35:45:84:ba:83:29:a7:67:27:a3:bc:01:
2b:6d:4f:a7:92:52:e2:16:81:bb:dc:39:ee:d4:e6:d2:04:5c:
69:ea:eb:84:cb:77:7c:79:26:68:5c:7a:09:73:24:26:56:4d:
1e:4c:fc:91:29:18:ce:78:83:44:c0:9f:ff:c3:a6:52:db:73:
a1:98:80:b7:54:e0:21:2d:c2:28:27:47:3c:dc:01:fd:82:ea:
af:79:f6:67:f0:98:78:ed:90:34:1a:7f:0c:1e:b0:84:a1:a9:
a6:cf:3d:50:fd:bd:f8:93:fc:b5:78:19:f8:c0:7a:a8:ee:6e:
66:e0:ac:ee:d1:39:57:8c:74:c0:b0:4a:88:0f:04:72:96:f6:
46:36:dd:d5:3a:44:a4:c6:58:a6:53:c8:94:61:f9:e8:df:0c:
9b:5d:41:e2:51:7b:0d:a7:04:fd:e3:d9:1d:c8:81:28:41:87:
e4:3e:ff:ef:d2:78:7f:df:40:98:ba:b5:71:37:5a:c1:5e:37:
55:fe:3b:d6:45:8a:27:03:66:eb:71:0c:88:92:1e:5b:63:83:
d5:a4:54:7c:1f:50:f4:32:4b:9d:b0:07:0d:70:bc:0d:96:40:
0d:6e:07:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:32:20 2024 by rpki-client on console-fra.rpki-client.org