Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/AwSeIc7IhlV2IxIAzO4x9gqPBiM.roa
File: AwSeIc7IhlV2IxIAzO4x9gqPBiM.roa (raw, json)
Hash identifier: OEX1ZLz/Q8W3VSD1Jl6R186nQf1ltgKwGWR2ZQtX67Q=
Subject key identifier: 03:04:9E:21:CE:C8:86:55:76:23:12:00:CC:EE:31:F6:0A:8F:06:23
Certificate issuer: /CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Certificate serial: 018CE92CDD5C61107B0919AB462F40DE9DB6
Authority key identifier: 1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/AwSeIc7IhlV2IxIAzO4x9gqPBiM.roa
Signing time: Mon 08 Jan 2024 13:04:40 +0000
ROA not before: Mon 08 Jan 2024 13:04:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29657
IP address blocks: 45.132.100.0/24 maxlen: 24
45.132.101.0/24 maxlen: 24
2a14:4d87::/32 maxlen: 32
2a14:4d80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:2c:dd:5c:61:10:7b:09:19:ab:46:2f:40:de:9d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Validity
Not Before: Jan 8 13:04:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03049e21cec8865576231200ccee31f60a8f0623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:03:46:65:fe:2f:1e:3e:ab:11:34:4a:7a:c5:
c2:06:49:ea:76:82:ce:5d:ed:b3:45:9f:51:89:9a:
43:23:05:db:7d:9e:0d:da:a6:11:ff:6f:c3:80:41:
68:96:0b:57:31:1d:aa:8d:fa:f7:8f:0a:5a:30:e4:
9c:34:0f:be:2d:9c:dd:c0:43:83:30:6c:7c:86:d7:
ce:56:10:96:e7:17:a4:46:be:84:97:fb:10:76:da:
55:ef:b7:c2:69:9b:f8:b5:52:fa:85:06:25:25:51:
5f:4f:0e:03:af:ae:30:a6:06:88:df:f3:1d:7b:ac:
80:c7:b1:a1:b2:04:f4:53:f2:27:be:44:7f:81:57:
02:f1:e2:b9:c0:ac:0a:1a:78:88:75:c5:3d:d4:db:
4a:38:9e:ba:f5:e4:fb:c1:d5:03:27:d8:2f:0e:a9:
02:b5:30:20:0a:68:ab:1f:ab:7d:00:fc:1a:55:c6:
8b:6a:3b:42:70:19:9b:a8:d2:66:60:43:7b:ea:96:
87:af:d7:47:e3:99:2a:b6:48:b8:a8:63:6e:e9:70:
d9:23:4d:64:17:6a:13:a0:88:f9:f7:82:6a:2b:23:
17:bf:42:30:ca:54:42:39:c0:5b:45:2e:bc:e1:cb:
aa:ba:1f:bf:af:51:f7:56:b7:eb:74:9e:02:80:64:
90:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:04:9E:21:CE:C8:86:55:76:23:12:00:CC:EE:31:F6:0A:8F:06:23
X509v3 Authority Key Identifier:
keyid:1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/AwSeIc7IhlV2IxIAzO4x9gqPBiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.100.0/23
IPv6:
2a14:4d80::/32
2a14:4d87::/32
Signature Algorithm: sha256WithRSAEncryption
b0:dc:09:0b:a5:92:14:b2:0e:cf:2f:9f:1c:0e:83:9a:d6:a1:
e1:06:9a:1c:59:97:5c:3b:b0:73:25:65:28:40:d2:06:5c:d8:
d5:d4:bd:b1:61:ac:05:61:66:70:19:b7:7d:58:48:2b:e8:48:
b4:b9:b1:68:ea:d9:e5:f8:9d:0a:82:79:91:12:81:52:e7:10:
8e:d2:21:40:0b:e0:ae:f1:73:09:fc:ef:30:25:b0:58:e7:77:
96:b7:aa:41:f1:27:f8:42:65:02:70:d7:cf:7e:19:83:93:49:
9d:79:70:df:f0:aa:ec:13:b7:f4:58:32:6b:a2:3a:23:36:c5:
58:00:85:fa:96:86:3c:13:b6:91:29:cd:cf:b4:c3:60:ed:c1:
3f:96:7b:ef:36:f1:ef:ef:ea:8e:1c:3a:c0:cd:1d:43:c3:91:
35:48:5f:5f:b9:7a:69:90:10:5f:c7:5a:92:48:78:07:86:61:
48:fa:ae:a0:8e:63:69:f1:8a:06:b3:aa:df:a9:ad:bc:35:f8:
b5:29:36:dd:f9:53:3b:31:c8:e4:d7:f6:12:6d:f3:7e:43:d7:
8b:04:2a:5b:37:69:72:59:a2:4b:e5:40:95:91:70:51:48:c0:
31:69:2f:ca:3f:69:80:7c:4f:58:cb:0d:dd:aa:ef:e3:86:f0:
ef:dd:32:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:13:05 2024 by rpki-client on console-fra.rpki-client.org