Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/vlHZQvk6cFXxkwouFUDYLfeEupo.roa
File: vlHZQvk6cFXxkwouFUDYLfeEupo.roa (raw, json)
Hash identifier: wioMynLfOoSLxgrWZLgjn267r9Q/PkPQZ2IIZ+XSXPg=
Subject key identifier: BE:51:D9:42:F9:3A:70:55:F1:93:0A:2E:15:40:D8:2D:F7:84:BA:9A
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 018CC7948D46A6FECDB682057B4883C859F2
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/vlHZQvk6cFXxkwouFUDYLfeEupo.roa
Signing time: Tue 02 Jan 2024 00:30:50 +0000
ROA not before: Tue 02 Jan 2024 00:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60798
IP address blocks: 45.88.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:8d:46:a6:fe:cd:b6:82:05:7b:48:83:c8:59:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 2 00:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be51d942f93a7055f1930a2e1540d82df784ba9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:68:fd:b9:c6:64:26:4a:d0:d1:58:92:fd:76:
ea:97:e9:68:2e:37:d3:f3:71:d9:b5:a0:67:00:62:
a6:b1:fb:97:84:03:e2:31:90:af:2b:b1:4b:75:2a:
24:7f:ca:35:ea:b9:df:10:8a:92:e0:ef:b1:06:94:
79:79:cc:e5:9a:8e:45:b5:be:dd:47:93:6b:80:c4:
3b:bb:84:78:b9:0b:1a:57:95:d4:03:11:6f:c9:fc:
3c:d5:df:5d:3e:77:c5:00:fe:e2:aa:3b:60:88:bd:
d5:2b:ad:23:54:97:25:1b:f0:4a:78:f1:c7:bb:8e:
4d:4e:28:d1:6c:8f:27:62:e7:31:bd:4d:d0:4d:28:
f6:f7:77:9f:71:80:8f:56:cf:9c:6d:57:0f:6c:9e:
cc:3c:a8:41:ea:79:e0:c7:fa:29:21:1c:0e:d8:98:
9a:76:43:1e:5e:af:b4:98:bc:d4:34:79:91:11:9e:
d4:a5:bd:a3:5a:e2:c5:aa:07:50:e7:3e:46:de:00:
d7:08:a8:af:cb:7e:58:e7:71:b9:55:63:79:11:77:
db:fb:72:01:65:0b:1c:d2:79:a0:cc:72:aa:92:7e:
85:43:10:9d:9c:7b:3c:ac:bf:e6:59:48:3a:1f:01:
dc:24:b5:48:7d:27:ab:3e:60:07:d7:ab:be:62:73:
e0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:51:D9:42:F9:3A:70:55:F1:93:0A:2E:15:40:D8:2D:F7:84:BA:9A
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/vlHZQvk6cFXxkwouFUDYLfeEupo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.187.0/24
Signature Algorithm: sha256WithRSAEncryption
97:4b:fd:ab:36:84:61:b3:16:44:aa:32:bb:eb:9c:4e:21:6e:
5c:bb:1f:f6:9e:09:6a:56:94:bf:b4:28:d5:cb:dd:37:86:8b:
02:82:63:8f:1c:d8:28:e8:f3:97:38:b3:05:95:b9:1d:5b:f2:
e5:7a:e1:dc:f5:f2:c0:3f:3d:75:2e:50:9a:9f:34:67:ca:1b:
2d:0a:ca:48:3a:8e:39:f9:ee:0a:2e:29:7c:f3:1e:30:39:0d:
f5:80:2e:05:bf:3c:b0:ed:cb:ad:ee:f4:0f:24:c7:22:48:6c:
fe:04:3a:ff:30:6d:f4:a4:9b:0d:91:84:05:16:87:c5:b7:fe:
b9:e7:c4:17:11:b3:7d:48:70:58:59:2c:c9:c2:71:59:15:a0:
3c:e2:34:86:61:21:5e:e9:1c:61:7d:67:85:28:56:36:68:eb:
6b:f1:01:57:b2:5a:21:38:a1:4b:81:1f:74:e7:54:c7:3d:76:
c5:78:8c:e2:da:aa:06:92:0d:9c:5c:67:60:5c:57:99:cc:db:
a2:c8:e2:f3:08:25:00:0c:cc:ab:65:8e:e8:15:bb:12:fc:1d:
69:bc:12:48:28:a4:70:1c:ab:d5:4b:7f:6b:95:8f:8b:a3:02:
33:fe:ec:19:52:3a:4e:bf:c8:0a:a2:3f:73:d5:e4:7f:ea:11:
f9:0c:81:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:24:50 2024 by rpki-client on console-ams.rpki-client.org