Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/lDTCW3zHS-OgHqEZEAH5mPGjGd4.roa
File: lDTCW3zHS-OgHqEZEAH5mPGjGd4.roa (raw, json)
Hash identifier: ehAx9jNCcepScgcC9iG+4GOmgn0vIE191wCVL79xl1c=
Subject key identifier: 94:34:C2:5B:7C:C7:4B:E3:A0:1E:A1:19:10:01:F9:98:F1:A3:19:DE
Certificate issuer: /CN=4c468f181265b4d96ca2835a3e570c2679035dff
Certificate serial: 018CCA2A0301D589ED1DF7148DEA669A1F28
Authority key identifier: 4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/lDTCW3zHS-OgHqEZEAH5mPGjGd4.roa
Signing time: Tue 02 Jan 2024 12:33:20 +0000
ROA not before: Tue 02 Jan 2024 12:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208708
IP address blocks: 45.87.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:03:01:d5:89:ed:1d:f7:14:8d:ea:66:9a:1f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c468f181265b4d96ca2835a3e570c2679035dff
Validity
Not Before: Jan 2 12:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9434c25b7cc74be3a01ea1191001f998f1a319de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:1b:22:a0:34:86:eb:1a:ff:6c:fe:c7:b9:
92:42:00:89:58:cf:08:4b:49:6e:65:22:6d:ae:bf:
2b:a1:b1:ec:db:b3:77:52:21:78:b6:a8:93:ce:49:
5b:f3:80:90:c4:b7:b1:5d:a9:aa:98:86:50:1a:77:
79:4f:79:62:ef:29:25:0b:d7:d1:28:f9:bc:2c:0c:
4f:5c:c9:0b:45:a6:95:f5:de:83:0e:54:ce:38:20:
11:40:a9:9f:89:c3:4c:29:b9:64:87:3d:d3:56:42:
bd:ee:23:0c:f5:79:b9:04:bb:be:0f:0a:27:f6:d6:
d0:f1:ea:80:fd:57:04:4a:5b:3a:5a:2f:4a:2e:0e:
f1:29:69:3f:11:87:be:fd:51:ae:22:4c:d5:8d:44:
14:0e:32:b0:f8:ed:46:e6:bd:63:10:73:c1:d1:ee:
3f:0c:66:27:cf:b4:f3:e6:ee:1f:ee:7f:92:2a:ec:
47:af:27:11:6e:e8:f0:8c:e0:8a:ff:c0:53:eb:ec:
a3:dd:ff:b5:23:17:20:76:8a:dc:79:ce:88:0f:db:
4b:a4:2e:b5:bb:3e:ae:34:f6:f7:c3:74:1f:46:48:
5c:52:95:71:82:a4:45:4d:a2:37:aa:c2:f4:f5:00:
b2:58:67:87:dc:fe:5e:a7:1d:2c:23:00:55:21:dd:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:34:C2:5B:7C:C7:4B:E3:A0:1E:A1:19:10:01:F9:98:F1:A3:19:DE
X509v3 Authority Key Identifier:
keyid:4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/lDTCW3zHS-OgHqEZEAH5mPGjGd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.112.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:59:56:65:57:ac:b7:ff:2a:15:42:3f:06:3a:36:97:d8:57:
61:f8:da:b7:17:e2:1f:95:6b:24:39:06:40:1c:0c:18:ae:3f:
a2:41:23:fb:fd:c2:00:52:03:39:28:ea:e4:31:2a:5a:0d:59:
f9:d0:1f:04:33:3b:b6:8d:d0:eb:0c:3e:5e:2a:a0:e9:f1:3a:
cc:10:5a:9d:4a:4f:a8:6e:f5:fa:00:0c:4d:63:3e:c5:40:fe:
d3:03:69:a2:54:48:ab:f9:33:e5:c4:6c:5c:89:e0:a8:f1:bc:
96:96:1f:e6:56:f2:78:c4:a7:06:10:e0:11:f4:8b:dd:47:98:
98:9c:bb:1b:a8:5d:b3:57:2e:19:e1:6d:1e:67:21:28:a3:8b:
39:46:30:76:61:50:13:ae:8b:68:92:0d:62:46:d3:7b:74:00:
e9:3f:08:ef:43:81:ad:66:c3:03:ad:9d:47:26:d8:67:aa:ac:
42:b7:02:42:de:7a:96:36:50:cd:cf:b4:4c:1a:39:00:0b:b2:
3c:33:d7:c5:01:84:8d:96:be:3e:0d:cf:8f:2f:23:e1:a3:0d:
03:f8:29:7e:16:4c:fe:94:9c:21:3f:29:c4:7a:af:41:2d:03:
0b:69:7c:ad:05:66:1a:5f:30:29:96:e8:13:f4:b1:f5:2d:bf:
eb:74:fb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:24:10 2024 by rpki-client on console-ams.rpki-client.org