Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/aszwHoccOuJ68JhQ2nMAyc1G1ZU.roa
File: aszwHoccOuJ68JhQ2nMAyc1G1ZU.roa (raw, json)
Hash identifier: OOOg1t50X53RvXSFl8asObIWRd55ayvPREJLX05pFm8=
Subject key identifier: 6A:CC:F0:1E:87:1C:3A:E2:7A:F0:98:50:DA:73:00:C9:CD:46:D5:95
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 018CCA294DBDA5253E3C7F2BB23041FA47CE
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/aszwHoccOuJ68JhQ2nMAyc1G1ZU.roa
Signing time: Tue 02 Jan 2024 12:32:33 +0000
ROA not before: Tue 02 Jan 2024 12:32:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58040
IP address blocks: 45.132.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:4d:bd:a5:25:3e:3c:7f:2b:b2:30:41:fa:47:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 2 12:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6accf01e871c3ae27af09850da7300c9cd46d595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:02:ef:04:f8:44:4b:01:a2:6b:34:71:96:
b3:33:32:2a:14:cc:43:c1:ca:3e:fa:4c:0c:6f:c5:
40:d3:36:92:8c:1e:b1:ff:3c:8e:a8:ca:72:32:ac:
31:30:d5:64:a0:81:08:d2:d3:d2:ca:45:b3:6e:d1:
6c:e9:f4:f7:73:6b:30:49:2e:79:8a:c8:49:54:37:
90:b6:f6:51:27:43:d4:be:29:08:01:47:2b:54:90:
b4:2d:f8:76:a6:8f:c3:19:4a:fa:75:3e:17:6a:6d:
61:a7:3f:e3:2f:74:97:0f:fb:a9:f3:af:d1:ac:5b:
ec:c8:b7:4a:97:08:65:24:34:43:e9:71:03:94:a7:
46:82:fe:cf:0d:d3:f5:8c:f8:3c:c9:c9:c1:f4:f2:
17:1a:9b:a1:eb:dc:ff:13:5c:37:64:30:ef:5d:ae:
05:a9:4b:19:59:44:28:b0:61:97:26:f5:8c:f2:98:
5b:67:c3:14:0b:df:55:1a:4a:a7:b1:21:12:9e:64:
61:c1:0e:61:df:74:4a:8c:ab:58:33:92:1f:4a:1d:
60:c4:8f:86:fe:47:92:1e:c3:fd:fb:13:df:da:4b:
0d:58:a9:fe:ce:e8:07:cd:4c:b6:77:b9:0e:31:82:
6f:c9:92:10:c9:e3:86:e4:96:d3:93:55:52:e9:c9:
95:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CC:F0:1E:87:1C:3A:E2:7A:F0:98:50:DA:73:00:C9:CD:46:D5:95
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/aszwHoccOuJ68JhQ2nMAyc1G1ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.24.0/24
Signature Algorithm: sha256WithRSAEncryption
59:fd:eb:9c:1a:ef:42:52:86:52:45:42:41:d8:a4:23:7d:97:
1b:55:42:21:81:b5:2f:8c:f9:fd:1b:3a:6e:66:b7:e5:d0:da:
38:38:8a:fa:a2:2f:57:d1:58:b2:97:f4:8a:cd:12:dc:d4:bb:
c3:32:07:4d:82:a0:20:ba:0c:f4:3f:f7:fe:1f:f2:1f:4f:5f:
ff:57:43:d8:da:7a:60:87:aa:24:e3:02:1f:eb:45:4a:9e:94:
0d:09:96:6f:de:d2:49:e1:b2:23:4f:d5:68:90:e8:aa:ad:76:
ee:54:38:6c:b5:ed:9f:a2:91:d5:61:44:d9:01:52:63:e3:a0:
3b:6c:10:41:20:43:17:13:32:86:0c:bb:58:44:f2:3a:a9:c3:
b4:46:b2:9a:39:e6:c2:52:e8:96:c2:11:82:8e:24:30:36:f8:
96:c3:d7:7e:de:21:4b:44:f7:a6:a6:a7:e8:9d:0f:b9:3f:bf:
82:b2:c1:0f:5a:c3:1b:8f:f2:78:a6:50:92:99:3c:a9:35:e3:
5a:8a:1e:56:4d:30:81:35:52:09:73:9c:a2:4a:ae:78:fc:ed:
ee:61:1a:0c:79:f5:08:e3:ed:39:14:ef:b4:5b:d3:95:49:ea:
4a:0a:9f:e4:42:68:5a:e1:7c:c7:5b:e1:6a:b9:1d:4b:e5:54:
95:dd:b6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:10:46 2024 by rpki-client on console-ams.rpki-client.org