Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/nTWYzLu2OlK7ex6wo_g2s-xbzPE.roa
File: nTWYzLu2OlK7ex6wo_g2s-xbzPE.roa (raw, json)
Hash identifier: WQAxzESS4FhEYF1LLnKSKAPWFt9XmJfC4r+4u+0i7sg=
Subject key identifier: 9D:35:98:CC:BB:B6:3A:52:BB:7B:1E:B0:A3:F8:36:B3:EC:5B:CC:F1
Certificate issuer: /CN=0fbe444b6150c04304227f94bfa2768306d7f4c8
Certificate serial: 018CC94E5A65DDE0A89D20CE0E9752985586
Authority key identifier: 0F:BE:44:4B:61:50:C0:43:04:22:7F:94:BF:A2:76:83:06:D7:F4:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/nTWYzLu2OlK7ex6wo_g2s-xbzPE.roa
Signing time: Tue 02 Jan 2024 08:33:24 +0000
ROA not before: Tue 02 Jan 2024 08:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43915
IP address blocks: 45.80.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:5a:65:dd:e0:a8:9d:20:ce:0e:97:52:98:55:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbe444b6150c04304227f94bfa2768306d7f4c8
Validity
Not Before: Jan 2 08:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d3598ccbbb63a52bb7b1eb0a3f836b3ec5bccf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:6a:37:b9:c3:dd:3b:76:33:e1:ac:2a:92:
05:13:78:d8:b6:7b:2a:9e:65:6d:58:3b:16:83:70:
d1:a7:5f:be:97:6d:b7:c0:23:cd:54:2a:ef:c3:f0:
7b:3f:0c:85:75:41:cd:0c:9d:9a:16:ab:1f:7f:f3:
a8:9f:04:c5:66:d9:d6:1a:5d:d1:4a:84:d0:44:a7:
6b:d0:e4:be:50:38:22:fd:9f:07:a7:fa:1c:d5:8b:
05:d9:cd:00:2c:b6:71:cb:05:f7:f1:4e:e4:d1:c0:
7f:94:52:12:9f:ad:3c:e6:4f:2d:69:16:bf:7b:30:
b2:fe:a9:f0:8a:8a:ee:b2:b7:bc:b2:38:f1:bd:8e:
19:25:7f:55:10:a2:a3:24:18:62:2f:db:a0:ef:75:
32:f3:bd:8f:1c:08:a0:33:31:b6:f9:79:f7:2c:2f:
8d:41:61:37:a1:4c:a9:b9:f5:44:b0:10:0f:37:b1:
6f:26:39:b4:30:1f:e2:28:39:9f:d7:07:5c:41:16:
d5:a5:13:e2:f6:1b:31:ff:32:2a:85:a0:6a:6b:8b:
87:2e:ae:6d:86:33:72:66:08:84:d3:ec:c2:7f:9f:
b1:d6:4e:20:c8:b1:23:6e:ee:9a:62:b6:77:60:46:
a3:bf:f7:9e:4e:d9:a7:b6:7e:53:7c:05:36:6c:58:
78:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:35:98:CC:BB:B6:3A:52:BB:7B:1E:B0:A3:F8:36:B3:EC:5B:CC:F1
X509v3 Authority Key Identifier:
keyid:0F:BE:44:4B:61:50:C0:43:04:22:7F:94:BF:A2:76:83:06:D7:F4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/nTWYzLu2OlK7ex6wo_g2s-xbzPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.160.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:1b:9b:cf:bc:c4:a1:d5:a5:fd:5e:80:9c:c8:df:a0:28:3d:
11:b3:85:6b:94:0a:0f:9f:6d:51:dd:c6:0b:1f:dd:61:10:46:
9a:a5:40:2b:a5:34:45:34:f7:4a:2e:45:1d:70:28:76:df:dc:
ee:92:54:f7:70:b9:5e:00:43:4a:b8:73:f3:5f:cb:9a:1e:28:
4d:83:25:76:db:73:67:20:92:a2:63:95:32:0b:da:5d:70:24:
88:a1:a6:6c:d9:95:b7:f7:9b:51:9e:6e:0e:01:5b:d9:6e:8f:
8c:7e:1f:42:5a:e4:cd:d6:a8:0b:c1:2e:c9:12:2d:b4:31:c7:
09:52:65:9d:8f:85:2b:b8:a2:56:a0:83:3a:70:35:3a:cf:35:
fa:85:b1:0b:4f:14:51:3b:a9:e1:61:d3:48:4a:41:7d:da:45:
5d:60:30:99:b5:5c:0e:47:4b:f2:85:c6:98:fe:b8:fd:e9:d7:
88:6e:1f:63:2c:98:54:51:d0:1c:a6:aa:23:ad:9a:66:db:3b:
06:0f:9f:f7:a3:d6:6f:6e:bc:5c:07:e4:61:62:b0:81:23:0a:
61:cc:50:28:40:bb:1f:b9:80:c0:e5:98:fc:e5:38:9d:79:66:
de:49:63:ca:2f:82:42:0f:42:c0:55:9f:de:7a:7d:47:9c:7e:
52:23:08:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:10:37 2024 by rpki-client on console-ams.rpki-client.org