Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/v2E-hGWiy-DDEyNFtf-h_3PLUfk.roa
File: v2E-hGWiy-DDEyNFtf-h_3PLUfk.roa (raw, json)
Hash identifier: MXqGgxuMu279eiY85eVzPyjLA/oppQMo5262s0gvSRU=
Subject key identifier: BF:61:3E:84:65:A2:CB:E0:C3:13:23:45:B5:FF:A1:FF:73:CB:51:F9
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 018CCA294D4DA9937D1A30D082D0CFC7EF83
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/v2E-hGWiy-DDEyNFtf-h_3PLUfk.roa
Signing time: Tue 02 Jan 2024 12:32:33 +0000
ROA not before: Tue 02 Jan 2024 12:32:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 45.132.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:4d:4d:a9:93:7d:1a:30:d0:82:d0:cf:c7:ef:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 2 12:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf613e8465a2cbe0c3132345b5ffa1ff73cb51f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ab:34:e0:4d:0a:20:94:e6:db:c8:c9:8b:e6:
06:f9:d9:36:f5:bf:27:d7:fb:db:af:bf:4c:bd:c9:
d2:22:a3:3d:09:73:8f:71:0a:73:be:f4:be:9b:d4:
d0:e0:e4:96:bd:dd:ca:f4:8e:bd:eb:4c:fe:63:1b:
ec:f9:64:b9:d3:62:fb:ce:6f:6e:36:c1:55:de:51:
7e:7a:bc:e3:39:17:08:e6:27:3a:3d:cd:aa:92:24:
ed:3b:ef:c2:b1:b5:2c:95:1a:cb:0e:a8:e5:b8:30:
58:88:cb:63:c4:60:c4:71:a0:8a:8f:a1:ea:93:bf:
a5:01:b2:26:20:7e:43:4d:cb:35:4e:e4:fa:d2:34:
2f:3b:a9:ef:44:86:70:5c:72:f8:ae:2c:4c:c0:c5:
6e:45:73:26:ed:c4:53:f9:ab:f2:a8:11:6b:ce:b1:
25:7b:0f:d9:08:44:8a:dd:f7:b3:fa:85:85:c4:74:
3e:f9:c0:fe:ba:6d:0d:61:04:e7:1b:4f:db:4c:15:
82:42:1c:3c:bc:1a:a9:d9:38:d8:05:6a:58:0d:a2:
6e:07:7b:17:c4:90:d9:4b:10:b1:a2:52:55:98:fe:
62:a3:cd:71:61:e2:81:be:6f:d8:d9:07:ef:a4:29:
0f:5f:5d:b7:9a:04:b7:e6:89:94:e2:b9:9e:2b:42:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:61:3E:84:65:A2:CB:E0:C3:13:23:45:B5:FF:A1:FF:73:CB:51:F9
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/v2E-hGWiy-DDEyNFtf-h_3PLUfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.25.0/24
Signature Algorithm: sha256WithRSAEncryption
67:1d:b0:25:ce:25:cc:5e:40:96:46:63:32:a8:00:d4:35:f1:
8e:f8:96:ec:5f:ce:c6:0e:d8:87:92:6a:16:bb:d5:5f:f2:45:
e0:21:1f:48:2f:e3:99:52:86:32:fc:c7:87:f5:6d:33:13:fb:
be:cb:96:c0:f0:8f:a7:f5:49:19:93:ad:32:e0:80:8e:de:2e:
7b:1f:28:c7:a8:39:3d:d5:58:84:e9:01:55:dd:d6:00:1b:91:
c5:88:41:d5:19:06:33:5d:32:df:b1:36:4d:f7:c0:bb:8c:d9:
d8:6f:ed:60:78:d1:5c:db:c2:c4:a1:18:38:f6:ef:e7:f9:51:
e2:55:3b:11:c6:e3:da:5f:02:04:57:72:dc:91:88:da:36:77:
08:8c:6c:03:94:f8:79:d4:42:72:19:f4:9b:c5:89:c1:f4:e5:
cd:9e:ed:30:55:c4:65:75:d5:7e:62:f2:69:ab:74:a3:98:c8:
cd:dd:b2:44:8e:78:4f:9b:11:7b:17:16:95:ab:27:14:d4:8d:
01:f1:32:01:1e:b8:d7:cb:4b:a2:0b:38:8e:0e:39:bd:a2:fe:
ec:bb:96:93:db:52:68:62:b0:b8:8c:b2:22:8a:15:06:33:9a:
f4:e6:19:26:f4:fb:00:d0:a9:e4:7d:f2:b4:5a:03:6c:c0:49:
2c:9f:ab:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:38:32 2024 by rpki-client on console-fra.rpki-client.org