Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/07cCelZPS4Z5nagTbP5OdRxaHSA.roa
File: 07cCelZPS4Z5nagTbP5OdRxaHSA.roa (raw, json)
Hash identifier: o1k+2sbhvQyh+q2BdEBepQV+4egY6byZjN1iFl4yC2I=
Subject key identifier: D3:B7:02:7A:56:4F:4B:86:79:9D:A8:13:6C:FE:4E:75:1C:5A:1D:20
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018CC6B7B08320EC87413DE56B441B9377F9
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/07cCelZPS4Z5nagTbP5OdRxaHSA.roa
Signing time: Mon 01 Jan 2024 20:29:36 +0000
ROA not before: Mon 01 Jan 2024 20:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 45.155.63.0/24 maxlen: 24
45.155.62.0/24 maxlen: 24
45.133.216.0/24 maxlen: 24
194.156.98.0/24 maxlen: 24
45.145.0.0/24 maxlen: 24
194.156.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:b0:83:20:ec:87:41:3d:e5:6b:44:1b:93:77:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 20:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3b7027a564f4b86799da8136cfe4e751c5a1d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3f:42:c5:09:33:03:72:cf:e7:d2:90:0c:6a:
9c:4e:ac:d0:0e:ad:f0:1d:25:93:36:98:58:9b:48:
9c:37:93:7b:f6:79:24:64:2c:a4:95:62:83:db:d0:
53:55:e6:96:1a:d4:5b:f6:37:9c:2e:1a:89:50:17:
84:37:ae:73:57:d9:2f:dd:6f:d0:fa:b0:7d:39:9e:
72:46:c2:47:a7:6b:2c:d1:26:b8:c7:cc:32:2e:83:
39:42:9e:03:62:e2:fd:a1:6e:e4:4b:48:32:bb:10:
2f:36:ef:67:e0:af:a7:01:de:21:98:55:68:4d:1e:
d6:e0:ee:17:00:74:36:58:55:c1:32:f9:7f:ba:d0:
62:05:8a:f9:cd:90:79:54:35:61:70:f9:68:a7:26:
8d:a0:57:ea:d5:71:f1:23:28:06:59:d0:43:71:f7:
f3:29:bc:93:9b:9f:4d:a3:e1:60:58:87:e0:28:bd:
41:a9:0e:14:fd:5c:5a:e5:09:3b:6e:37:14:a2:d9:
46:a0:1e:46:9e:d6:fb:b7:a2:be:90:ab:a2:52:f2:
db:8a:3e:e8:d8:d7:b4:e4:6a:3f:d2:2b:87:8a:f6:
cd:49:d2:54:c0:89:15:b1:a5:eb:a5:be:97:1a:ae:
23:e8:3c:e8:50:fc:d7:6d:d4:a9:66:49:be:b5:a1:
69:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B7:02:7A:56:4F:4B:86:79:9D:A8:13:6C:FE:4E:75:1C:5A:1D:20
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/07cCelZPS4Z5nagTbP5OdRxaHSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.216.0/24
45.145.0.0/24
45.155.62.0/23
194.156.98.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:a9:16:7d:50:92:1f:ba:da:51:55:eb:63:4e:0a:a2:eb:7c:
b6:6c:7b:38:49:41:06:e2:c8:e7:3c:07:30:f3:1c:42:97:eb:
a2:a7:f8:8c:32:ae:84:08:8d:77:ef:4f:8e:c4:20:0a:6b:b7:
f1:ec:f8:bd:51:04:67:16:02:eb:ff:b0:a6:d2:6c:72:15:6d:
1a:d4:74:13:b1:05:18:fb:79:4b:e2:9a:ab:bd:b6:88:c8:41:
a2:99:ef:98:45:26:ae:d2:fb:df:b5:ce:57:07:8b:29:33:94:
a3:ea:55:bc:b6:6d:64:a8:c8:67:60:ed:ce:a1:e6:06:f2:23:
cc:29:41:a8:85:3d:76:e3:29:7e:6e:30:b7:00:d8:c4:b4:ed:
30:39:f5:17:b8:c2:2c:9d:b6:62:44:e3:f2:9c:0d:f4:d5:d3:
c9:ac:65:6e:88:19:79:31:97:5a:05:78:46:26:ef:5d:7e:b4:
fd:51:aa:e0:09:66:92:5d:b0:e9:28:7c:bb:fb:1e:81:0d:72:
4d:dd:d1:ae:da:66:28:d3:15:bb:04:4a:66:cb:8a:a7:c6:3e:
74:90:df:42:17:2c:ba:6f:eb:7e:a3:f3:d0:83:90:59:d3:61:
24:0c:e9:4e:56:03:83:1c:47:fb:89:9d:e6:e7:86:b4:60:41:
f8:09:8b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:39:37 2024 by rpki-client on console-fra.rpki-client.org