Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/ccgXeOEWSJRFv5lfvWnlj7VgbyE.roa
File: ccgXeOEWSJRFv5lfvWnlj7VgbyE.roa (raw, json)
Hash identifier: 4kw1OcmXWV15WCSnoHMRDTNfP5eKgwTiqMN6Gg4M5wY=
Subject key identifier: 71:C8:17:78:E1:16:48:94:45:BF:99:5F:BD:69:E5:8F:B5:60:6F:21
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018E84C0654ED02AC552BB349731A4C0E8DF
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/ccgXeOEWSJRFv5lfvWnlj7VgbyE.roa
Signing time: Thu 28 Mar 2024 11:09:45 +0000
ROA not before: Thu 28 Mar 2024 11:09:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210715
IP address blocks: 45.43.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:c0:65:4e:d0:2a:c5:52:bb:34:97:31:a4:c0:e8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 28 11:09:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71c81778e116489445bf995fbd69e58fb5606f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:39:d8:24:fc:83:12:74:4a:15:0b:0c:e1:44:
f6:45:e0:79:33:75:f8:39:ec:53:35:41:db:fe:11:
82:1c:2b:24:07:85:5e:d4:38:17:d1:30:9d:34:d7:
dc:fb:cd:ac:3a:6d:d8:46:e5:c9:49:3e:dd:08:cd:
95:05:76:b6:90:4e:3a:10:2a:8b:38:43:28:93:ae:
f1:c0:58:3e:89:d5:3a:97:13:ac:1a:c2:d8:43:76:
93:e4:9b:6c:b5:18:24:fb:31:ba:fd:2f:51:ef:cb:
01:fc:d8:e1:6b:6a:38:e4:a1:7c:9a:10:2a:e0:b5:
9c:15:62:3e:2f:93:ae:41:99:3e:41:90:bf:58:70:
0f:b2:71:bd:71:1a:5d:35:27:28:c8:b9:72:a0:5e:
b5:e6:dc:9e:90:14:1c:c2:2e:a2:7d:fa:6b:b7:06:
9b:d9:a6:8f:79:6c:58:4a:f7:ac:29:09:85:f9:50:
03:26:38:b6:72:57:94:a9:1c:f6:b5:fc:96:4e:5d:
d8:87:b7:a1:db:ba:73:df:43:ac:c8:3d:51:37:20:
35:8b:9f:27:50:fe:aa:6c:a0:52:29:2c:b1:51:db:
3d:b2:2f:dd:eb:af:84:a4:c2:76:ae:64:f4:3d:5b:
19:d1:d9:1a:76:51:be:38:a4:02:37:ea:ba:d8:bf:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C8:17:78:E1:16:48:94:45:BF:99:5F:BD:69:E5:8F:B5:60:6F:21
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/ccgXeOEWSJRFv5lfvWnlj7VgbyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.163.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a6:19:24:1b:4e:be:16:61:25:ab:e8:dd:1f:e6:2b:11:0c:
42:72:ca:bf:c1:44:af:40:07:12:8f:52:e4:21:54:7b:fa:83:
8a:2f:d3:17:de:f5:ad:bc:4f:6d:bf:ec:71:95:9b:b5:f3:04:
a5:6b:86:59:b1:dd:07:7a:f3:a1:4b:dc:fa:fc:79:ff:1b:da:
bd:1f:61:0e:4e:77:1d:0d:04:eb:dc:d6:16:7a:08:ee:bf:28:
96:93:18:f1:fa:cc:ef:5f:af:05:af:79:fd:71:5a:e2:3f:f3:
45:30:e5:58:a8:66:e2:70:8d:37:49:7c:c8:ff:d3:cf:61:82:
09:e3:cd:ed:ba:7f:25:d5:6c:95:81:87:24:6d:af:5f:9a:28:
f0:fb:19:6b:a6:21:94:6a:e9:24:45:75:a9:59:57:1f:7f:7f:
5c:22:5e:31:c3:e6:ed:d3:41:99:07:2d:c1:66:f4:dd:86:3a:
93:6f:83:7b:e4:1d:19:86:96:df:ba:84:75:3a:8f:11:50:06:
bc:3e:ec:13:5d:33:65:74:a1:20:20:2c:15:fd:0a:58:3d:d7:
bf:b1:41:8d:9d:dc:80:ff:df:b6:19:dc:5d:88:69:38:a6:93:
85:c1:c9:f2:32:18:f4:86:d6:fd:a9:01:0e:af:96:6a:c7:9d:
b4:4d:74:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:16:58 2024 by rpki-client on console-ams.rpki-client.org