Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/3bAJXBeA31xQ9iR7FO3NMY0Bu2M.roa
File: 3bAJXBeA31xQ9iR7FO3NMY0Bu2M.roa (raw, json)
Hash identifier: x9Eig3c0A4wYnsdOlN+DU0nKRVrlUCz62IEDFeD2YrI=
Subject key identifier: DD:B0:09:5C:17:80:DF:5C:50:F6:24:7B:14:ED:CD:31:8D:01:BB:63
Certificate issuer: /CN=522a22bccd3de8265afd55f9830ffc01c83af726
Certificate serial: 018CC6B8F0A0178EC13EFC8263EA89D84122
Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/3bAJXBeA31xQ9iR7FO3NMY0Bu2M.roa
Signing time: Mon 01 Jan 2024 20:30:58 +0000
ROA not before: Mon 01 Jan 2024 20:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208770
IP address blocks: 45.136.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:f0:a0:17:8e:c1:3e:fc:82:63:ea:89:d8:41:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726
Validity
Not Before: Jan 1 20:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddb0095c1780df5c50f6247b14edcd318d01bb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:d7:5e:89:83:29:62:4c:34:31:e0:e0:1a:
ed:c7:d7:dd:b0:41:43:fa:5d:61:a3:00:4b:88:af:
05:61:a0:de:a5:a3:30:23:9a:2a:6c:c5:a3:6f:2f:
e2:6d:8d:2f:26:3c:d6:3b:2d:1c:4c:31:2c:cb:bf:
22:16:d2:88:cf:ae:a6:22:74:f4:15:c4:82:4c:c9:
08:43:95:f5:74:73:cd:63:1f:fd:c2:d2:77:19:5c:
48:f3:3f:cf:c5:1a:87:30:34:c8:3f:f3:16:d7:c7:
8c:60:9d:61:54:7f:82:58:d1:5c:66:1c:e6:54:fc:
d5:b5:5f:11:ec:2a:b7:62:f6:6e:25:7b:7e:ee:32:
65:1f:32:08:40:2b:a4:ce:eb:74:b2:be:80:57:46:
05:5d:1d:93:11:92:68:5c:4b:c4:a8:02:4e:9c:55:
21:d4:ed:63:02:79:00:a1:d5:03:84:da:ac:65:66:
fc:80:c6:97:56:4b:cf:3e:79:f8:73:8b:95:56:c1:
9d:89:4a:f1:69:0c:a9:f8:0c:1d:de:ca:53:44:73:
83:47:02:0b:c6:5b:12:f4:a2:b8:d8:c0:51:09:a3:
b2:1b:22:e6:75:ef:03:15:4e:00:0b:d3:0f:97:85:
58:a6:6b:8d:84:29:14:8c:46:51:37:60:36:6e:99:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B0:09:5C:17:80:DF:5C:50:F6:24:7B:14:ED:CD:31:8D:01:BB:63
X509v3 Authority Key Identifier:
keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/3bAJXBeA31xQ9iR7FO3NMY0Bu2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.44.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:1d:93:15:9d:7a:a8:1a:ea:1b:7b:49:c4:61:2e:ce:17:16:
ed:6f:82:a2:87:e1:3c:99:4d:30:dd:76:af:d6:bc:6c:bb:9c:
0c:2f:43:43:61:9d:59:1e:1e:a2:49:02:a9:93:f5:9b:03:dc:
66:7c:cb:7c:32:e7:d6:9d:ee:5a:9c:96:31:0b:2b:45:64:cc:
79:94:dc:58:da:f7:5f:e8:27:aa:7c:a6:5a:73:7d:fb:e2:d7:
2d:2c:1e:59:b6:71:16:cc:a1:48:b7:70:29:56:bf:61:50:90:
b6:d9:e2:65:4c:da:86:5a:87:82:3d:7e:db:cd:a3:30:de:e8:
63:0b:44:75:55:4a:1b:c2:bc:96:df:94:9a:99:2e:e8:80:41:
d9:eb:a2:8d:2d:cd:df:cb:8f:73:09:9c:1a:3e:7d:2f:12:24:
33:a3:ff:c8:f4:b8:30:39:71:45:1c:2f:c3:4c:2d:58:35:c2:
b9:02:91:a2:99:93:6e:5a:64:a4:08:cf:02:41:57:af:fd:0b:
62:52:6f:64:0c:2c:07:1d:d7:a4:d6:80:a8:00:6e:af:03:f5:
b3:12:72:42:ac:40:63:a5:be:8a:10:11:4e:3e:00:c9:4a:69:
4a:85:64:3f:b3:48:9f:60:85:9b:33:50:4f:33:61:00:02:a5:
84:84:c3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:03 2024 by rpki-client on console-fra.rpki-client.org