Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/ctM-y2C9mSem_b79wlThgcAAk_8.roa
File: ctM-y2C9mSem_b79wlThgcAAk_8.roa (raw, json)
Hash identifier: KxWisMtVNCScJDzgm863Lhk6HKz+sRz4sb+/u0O6dPQ=
Subject key identifier: 72:D3:3E:CB:60:BD:99:27:A6:FD:BE:FD:C2:54:E1:81:C0:00:93:FF
Certificate issuer: /CN=78356c6a831680e9b8b7c95514953007a9407e87
Certificate serial: 018CC5014E1DC716F16083A58A3F1B2B6ACE
Authority key identifier: 78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/ctM-y2C9mSem_b79wlThgcAAk_8.roa
Signing time: Mon 01 Jan 2024 12:30:46 +0000
ROA not before: Mon 01 Jan 2024 12:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34997
IP address blocks: 45.87.156.0/23 maxlen: 24
45.87.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4e:1d:c7:16:f1:60:83:a5:8a:3f:1b:2b:6a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78356c6a831680e9b8b7c95514953007a9407e87
Validity
Not Before: Jan 1 12:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72d33ecb60bd9927a6fdbefdc254e181c00093ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:6d:65:2e:65:fa:57:06:db:23:05:b8:6f:
39:c3:3b:f1:0b:11:08:19:86:9a:49:8a:e2:d1:e8:
82:d7:06:21:fd:ef:c8:57:39:99:16:58:91:d3:5c:
ec:cb:9d:dd:38:36:1d:ee:a6:ab:a6:8b:47:1e:65:
a2:eb:59:93:19:f3:91:58:2a:61:5e:56:d6:c2:08:
ad:f8:56:c2:b3:e0:72:0b:16:8d:03:47:50:be:db:
2a:b9:05:20:87:62:ff:71:b7:69:1e:5e:01:e8:1c:
de:f8:4d:99:cc:5c:a6:a2:d8:c5:7e:fc:f1:f6:0a:
98:52:4e:c9:9b:04:cb:fe:96:7b:2d:6c:5e:53:80:
4f:cc:55:d4:7a:e5:c7:20:60:eb:4e:70:23:39:7f:
2a:e5:91:b3:e5:37:0e:ae:9f:1b:55:94:9e:04:37:
bc:6e:4f:7d:b7:c1:51:6f:64:93:9f:e5:56:26:15:
e4:02:ae:c9:a7:44:0c:6d:ad:8b:73:41:5d:20:03:
31:c8:9c:12:7e:a3:c6:ac:9f:8c:d3:22:a4:93:77:
1e:02:79:96:a7:eb:a5:ca:8d:f9:79:4d:15:a0:fa:
06:a5:1f:06:b1:6b:38:87:b4:d8:6b:6f:1f:0e:03:
1b:58:ab:0d:1b:de:2b:81:89:27:6d:58:c0:ee:31:
fb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D3:3E:CB:60:BD:99:27:A6:FD:BE:FD:C2:54:E1:81:C0:00:93:FF
X509v3 Authority Key Identifier:
keyid:78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/ctM-y2C9mSem_b79wlThgcAAk_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.156.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:b3:73:6b:6e:cc:6f:be:7e:af:c2:75:83:dd:53:ea:c2:22:
68:f8:63:66:ef:d8:7a:32:19:c5:a6:d0:63:32:63:a7:8e:5f:
76:cf:c7:ea:f8:29:36:4b:94:1c:84:29:c8:3e:8d:1d:8e:f4:
93:4e:3c:ee:c4:bd:76:7e:16:e1:17:4e:d1:54:a3:29:3d:4d:
66:2e:b3:5f:ff:3b:c1:e5:2e:12:1a:0e:b9:ae:7e:32:5f:39:
db:8c:17:62:9e:c8:2e:db:2c:0a:e4:01:0a:41:81:03:71:10:
17:28:da:0b:c0:c2:c4:a1:5a:79:30:aa:1b:cc:76:3f:cf:b8:
e1:c4:33:36:19:df:15:80:e8:5c:8e:17:fa:c2:f4:35:40:3f:
d7:13:a1:26:34:c3:6c:d9:51:ef:bc:d4:02:6f:c1:71:9f:33:
ba:4a:81:31:7b:90:00:df:5e:42:ab:c7:26:8a:d9:15:ce:87:
4d:d6:ee:44:10:ae:a4:5d:22:1b:4a:66:de:a8:18:6c:2a:e2:
3c:8f:d3:97:6b:1b:fa:ad:77:7b:c4:12:80:28:41:39:77:8a:
c3:f1:d7:6f:62:2f:80:a0:23:63:94:e5:54:d2:85:da:ab:7e:
31:c6:3c:7e:c4:38:05:1a:73:7d:0c:1c:6f:72:a3:4e:b0:95:
5f:84:68:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:04:50 2024 by rpki-client on console-fra.rpki-client.org