Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/xEQ4pjly3CHVrStVyhFf4W9o41g.roa
File: xEQ4pjly3CHVrStVyhFf4W9o41g.roa (raw, json)
Hash identifier: mtJXxjwdeRpBUmQbRitUg5geaJ07ldiYIfo+mGDTy/w=
Subject key identifier: C4:44:38:A6:39:72:DC:21:D5:AD:2B:55:CA:11:5F:E1:6F:68:E3:58
Certificate issuer: /CN=304e59a223f4bcb823492fb1096c3a82310c03da
Certificate serial: 018CC86F08ED8DDEC0AC513E953F86B67B98
Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/xEQ4pjly3CHVrStVyhFf4W9o41g.roa
Signing time: Tue 02 Jan 2024 04:29:28 +0000
ROA not before: Tue 02 Jan 2024 04:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59808
IP address blocks: 45.151.212.0/24 maxlen: 24
2a0e:b580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:08:ed:8d:de:c0:ac:51:3e:95:3f:86:b6:7b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da
Validity
Not Before: Jan 2 04:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c44438a63972dc21d5ad2b55ca115fe16f68e358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:6a:ac:18:f1:62:fb:e8:53:94:31:44:8a:
e9:e5:ce:27:98:b9:93:e3:a0:a5:40:c1:cb:b8:0d:
a2:9c:85:0b:3a:5c:b2:90:f0:19:cb:b4:0f:ac:dd:
07:56:27:34:82:19:a7:57:41:5d:05:20:f5:c0:f4:
42:94:a5:99:8b:ab:60:f5:92:d5:f4:a5:9a:2c:2f:
09:69:e2:fe:2f:3c:43:f0:cb:a7:04:a6:b4:21:b1:
e7:c0:bf:28:4e:04:4a:d3:6d:a0:ca:7b:1f:b4:5a:
4d:03:c4:ef:9e:0d:36:fa:5e:9c:f5:21:28:1b:f3:
dd:0f:5b:e1:ee:9f:fc:8a:49:8c:12:92:ec:5b:80:
d0:45:c5:6a:5b:64:87:c8:1c:1a:c6:c5:ec:8e:94:
3d:e6:11:d4:38:48:0e:87:4f:ad:2c:e2:9a:41:d9:
6c:f1:91:f2:2d:5e:2d:71:4d:fd:1b:67:b0:ce:09:
b7:85:51:83:fb:8c:d0:da:1f:41:4c:8f:5f:04:8f:
89:ae:6c:af:6f:22:20:4a:ac:61:30:03:ba:b7:36:
15:26:be:eb:50:11:d9:25:52:cf:c2:1a:55:9e:a0:
b6:f5:fe:c7:f2:d6:e8:29:84:d5:77:49:b6:66:ad:
4e:fc:a0:8c:09:dc:41:f1:f7:37:aa:6a:ab:98:d7:
bc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:44:38:A6:39:72:DC:21:D5:AD:2B:55:CA:11:5F:E1:6F:68:E3:58
X509v3 Authority Key Identifier:
keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/xEQ4pjly3CHVrStVyhFf4W9o41g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.212.0/24
IPv6:
2a0e:b580::/29
Signature Algorithm: sha256WithRSAEncryption
50:d2:3c:62:a8:99:ca:ef:97:bc:61:c5:11:c8:a9:2b:e9:da:
b9:90:cb:12:50:68:eb:ce:a0:bb:04:90:39:60:97:62:4b:c0:
2e:9d:92:b2:65:ab:3d:54:d5:9a:73:e2:16:47:7a:ac:4b:8a:
ca:00:a7:f7:64:fe:a0:57:9a:e4:1c:6c:57:42:3d:e0:78:58:
cb:e5:88:04:e9:be:65:f9:d9:c9:52:28:e7:51:3a:3a:30:d9:
15:51:16:0f:25:0e:cd:c8:2d:91:48:4c:a4:c1:09:58:89:0c:
5a:71:47:af:06:2f:93:92:fb:a2:c3:8f:52:9d:41:c5:fd:f0:
d7:fb:7f:67:b9:2a:e3:9f:4c:ad:1a:bf:95:7c:cd:65:7a:77:
17:9d:f8:6b:91:fc:57:6a:58:ea:31:72:d0:28:2c:7b:23:46:
04:12:8c:57:a9:f1:2c:93:e2:64:a3:01:f9:9a:e4:47:d1:43:
75:64:1a:e5:1d:15:98:c6:5b:63:c6:58:69:d3:cc:08:eb:47:
ba:25:63:b3:fa:b8:5a:8b:74:90:b6:cb:2b:d9:d8:78:bb:e7:
f0:6f:7c:ef:28:94:bf:f8:b1:63:9e:ad:51:98:ef:b3:4c:8a:
6a:f8:e8:fe:ec:58:6a:e4:bc:7b:de:00:d9:01:3c:9b:e7:1f:
d7:8b:e1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:49:24 2024 by rpki-client on console-fra.rpki-client.org