Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/UElPgndSLpWp6U3b-IMd8sNsZUM.roa
File: UElPgndSLpWp6U3b-IMd8sNsZUM.roa (raw, json)
Hash identifier: yxASVRXoO5N0YemflH+ME8x/vICNaE65whpxYNjaUMI=
Subject key identifier: 50:49:4F:82:77:52:2E:95:A9:E9:4D:DB:F8:83:1D:F2:C3:6C:65:43
Certificate issuer: /CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Certificate serial: 01905375E85DC7D0400194FA585056335BAB
Authority key identifier: 29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/UElPgndSLpWp6U3b-IMd8sNsZUM.roa
Signing time: Wed 26 Jun 2024 07:32:34 +0000
ROA not before: Wed 26 Jun 2024 07:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208319
IP address blocks: 45.128.88.0/22 maxlen: 22
45.128.88.0/24 maxlen: 24
45.128.89.0/24 maxlen: 24
45.128.90.0/24 maxlen: 24
45.128.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:75:e8:5d:c7:d0:40:01:94:fa:58:50:56:33:5b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Validity
Not Before: Jun 26 07:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50494f8277522e95a9e94ddbf8831df2c36c6543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:a8:0f:ed:7c:e5:01:3b:7d:c3:67:fe:7b:
f7:13:b7:51:4d:3e:86:30:a0:07:a7:0a:64:2c:18:
cf:09:25:ac:b0:37:95:bd:63:a0:76:fb:4d:20:62:
fd:0f:12:c4:b7:63:19:f0:9e:6e:fc:27:66:92:9d:
40:4c:12:45:d3:71:32:cb:40:7e:ed:d8:9d:dc:c6:
30:59:3e:96:4c:19:89:0d:13:8c:e4:56:f9:d9:56:
36:fa:77:5a:f0:7f:df:52:84:b0:11:a0:20:c3:a2:
f1:cf:26:89:ce:c4:3f:7c:10:9c:f3:78:14:4f:91:
28:fc:07:05:3c:df:1e:35:2a:1e:0f:a8:7e:aa:1e:
90:43:86:bb:75:83:e1:d6:5c:50:64:b2:02:1b:a0:
77:17:a7:43:9b:2d:ee:e4:31:66:e6:a5:df:68:80:
49:82:43:25:c5:6e:42:c7:d7:c1:fe:bd:d5:72:af:
37:73:c3:ed:20:dd:0d:e3:15:ce:3f:cd:f2:67:68:
09:33:72:69:08:c8:50:5f:ea:dd:b7:18:30:31:35:
d1:d6:41:31:4e:13:86:45:22:d1:8a:61:0d:2c:84:
fb:55:d3:38:f3:2e:10:43:18:0e:17:d1:5f:76:61:
2e:c3:1f:03:c7:c7:03:00:79:81:a1:5c:4c:9b:05:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:49:4F:82:77:52:2E:95:A9:E9:4D:DB:F8:83:1D:F2:C3:6C:65:43
X509v3 Authority Key Identifier:
keyid:29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/UElPgndSLpWp6U3b-IMd8sNsZUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.88.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:d2:1c:fe:83:0d:88:76:40:86:0b:f6:ce:a0:da:75:64:28:
ed:53:6c:87:c3:42:61:fc:55:ea:48:2b:67:28:3e:8c:49:21:
0c:d1:92:3b:f8:0c:65:15:24:66:44:dd:64:e8:ec:26:8b:05:
e2:fb:db:82:f8:2d:49:22:90:eb:b0:4c:03:7f:6f:81:c6:5e:
78:0c:3c:e7:c8:59:a6:44:f6:9e:ed:df:f1:29:44:20:b8:fb:
08:22:fd:e1:ae:c9:9c:fa:c5:d7:40:07:87:87:4a:3d:f1:dc:
55:0b:63:5e:16:bf:32:d5:99:0a:4b:7e:21:06:68:46:20:9f:
49:0b:63:24:28:90:3d:2e:ef:c6:2b:5e:a2:8e:ac:c7:93:a0:
f9:67:4c:24:da:f7:39:91:f5:68:6c:0f:f7:46:e0:43:ed:ce:
50:86:29:cb:99:08:42:a3:68:17:14:e1:56:94:42:ae:a3:ef:
65:3b:b8:d6:90:89:76:b1:9d:5c:83:be:b5:dc:62:52:98:bf:
49:29:80:ca:95:da:0d:fb:87:f3:b9:a0:44:a2:11:8e:90:ff:
75:d5:fd:ea:ad:f9:e9:13:7e:77:06:29:10:89:1c:c7:4d:6e:
bd:e8:64:e6:40:3e:64:34:02:c8:a8:49:39:fa:1a:15:52:ae:
64:25:ea:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:44:16 2024 by rpki-client on console-fra.rpki-client.org