Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/jLAi_r1CPl9Pggi6RLeljzCeU38.roa
File: jLAi_r1CPl9Pggi6RLeljzCeU38.roa (raw, json)
Hash identifier: JwV9UzLxXrsuGgWlAFLhGPTQMinGvxCejwcx3fonJbc=
Subject key identifier: 8C:B0:22:FE:BD:42:3E:5F:4F:82:08:BA:44:B7:A5:8F:30:9E:53:7F
Certificate issuer: /CN=49eb8ab4e3d79de27dd1fd692196e2e39e1a3ba3
Certificate serial: 018CC56EEB01D5CFC84BC93569D141F7D3EE
Authority key identifier: 49:EB:8A:B4:E3:D7:9D:E2:7D:D1:FD:69:21:96:E2:E3:9E:1A:3B:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/jLAi_r1CPl9Pggi6RLeljzCeU38.roa
Signing time: Mon 01 Jan 2024 14:30:29 +0000
ROA not before: Mon 01 Jan 2024 14:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50064
IP address blocks: 45.146.236.0/22 maxlen: 22
45.146.239.0/24 maxlen: 24
45.146.238.0/24 maxlen: 24
45.146.237.0/24 maxlen: 24
2a0f:4800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:eb:01:d5:cf:c8:4b:c9:35:69:d1:41:f7:d3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49eb8ab4e3d79de27dd1fd692196e2e39e1a3ba3
Validity
Not Before: Jan 1 14:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cb022febd423e5f4f8208ba44b7a58f309e537f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:10:86:d3:4f:be:63:f9:27:71:a1:ea:fa:
ea:b7:03:6b:c4:2f:6e:fa:51:89:55:76:28:59:b3:
70:5b:02:ce:0e:5d:59:a9:c7:ac:26:cb:e1:23:93:
4e:5a:b0:14:4e:c3:0c:e1:ef:6e:53:e4:3f:e0:1b:
00:c7:2e:d7:64:69:ea:17:83:f5:65:55:d8:12:36:
f9:df:c1:34:e4:1f:95:90:e0:9e:9c:a7:92:41:88:
db:ce:be:01:66:be:64:68:51:50:1c:ad:d0:f6:04:
34:d2:cc:e3:3f:50:74:16:0d:93:a8:0f:f3:05:65:
d6:1b:77:98:55:8b:0f:64:bf:85:b3:af:48:0a:2a:
b5:7c:4a:65:be:76:4a:d9:0f:78:45:73:4e:85:c1:
d9:68:02:d0:14:8a:40:32:ad:da:6b:0b:a1:a4:18:
1d:ad:8d:f0:fe:0d:9b:55:cd:2f:ba:b7:56:ef:4f:
21:ca:2a:2d:a7:99:c0:1a:0c:5b:ad:ae:d1:8e:1d:
eb:70:fe:b1:07:5f:72:3c:0c:ad:f1:df:14:9a:b0:
c2:d3:6e:25:bf:6c:6f:d1:74:fd:88:72:a6:bb:dd:
db:bc:c2:03:7f:bf:f5:75:c7:70:2f:92:bc:2b:cb:
7f:47:6e:b7:a6:3d:c7:be:66:74:75:e4:a6:e4:be:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B0:22:FE:BD:42:3E:5F:4F:82:08:BA:44:B7:A5:8F:30:9E:53:7F
X509v3 Authority Key Identifier:
keyid:49:EB:8A:B4:E3:D7:9D:E2:7D:D1:FD:69:21:96:E2:E3:9E:1A:3B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/jLAi_r1CPl9Pggi6RLeljzCeU38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.236.0/22
IPv6:
2a0f:4800::/29
Signature Algorithm: sha256WithRSAEncryption
0e:6a:97:5b:59:af:c4:75:1c:20:54:05:f5:83:61:b0:2a:2b:
3f:32:8b:48:4b:ed:24:06:67:4e:ea:1b:45:85:87:3a:9a:72:
d9:95:99:e9:a3:29:42:f2:65:9f:1c:0f:85:fe:b1:cb:72:c2:
4b:f7:0c:f5:b8:df:a6:79:31:b7:e2:27:77:b5:40:b9:91:05:
e3:9b:21:8b:92:27:3a:dd:1b:f0:ea:e5:6d:1a:72:3e:a0:12:
57:b9:b5:f8:6b:95:aa:e2:6b:29:5f:41:3b:db:84:72:1d:00:
d8:52:00:02:0c:f2:b9:f5:4f:b0:c9:26:e7:47:4f:85:04:87:
06:48:5d:7e:6f:a8:87:1d:c2:a4:37:c9:53:6b:1d:a4:db:82:
6f:45:fb:f2:14:07:41:b2:f8:cb:73:66:46:e8:2a:92:30:18:
d8:8f:19:af:80:13:69:12:09:fa:99:34:46:a5:96:d9:a7:70:
bf:5d:0a:61:1e:6f:79:38:90:c9:97:e2:05:33:4c:0b:9d:df:
8f:69:b7:54:5a:b0:6e:6e:b4:1b:07:d2:42:16:ea:f5:ee:d0:
18:57:27:e8:70:13:be:73:4f:bb:d2:7e:5b:7a:c7:f1:9a:a1:
e3:4d:d5:31:e4:21:d1:45:4a:4a:95:cf:a1:e3:c7:cc:6c:4f:
09:08:14:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:00 2024 by rpki-client on console-fra.rpki-client.org