Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/RXzBSUK8YyXRIsBSSwW6Gz_du5s.roa
File: RXzBSUK8YyXRIsBSSwW6Gz_du5s.roa (raw, json)
Hash identifier: OLLz9BA3Sz+salCDJQMfrswPdodRK8MH1k3wCTpCEBE=
Subject key identifier: 45:7C:C1:49:42:BC:63:25:D1:22:C0:52:4B:05:BA:1B:3F:DD:BB:9B
Certificate issuer: /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial: 018CC4928A06D788BE5B6C35C8B13F8323EA
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/RXzBSUK8YyXRIsBSSwW6Gz_du5s.roa
Signing time: Mon 01 Jan 2024 10:29:47 +0000
ROA not before: Mon 01 Jan 2024 10:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50939
IP address blocks: 45.134.160.0/22 maxlen: 22
2a0f:4480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:8a:06:d7:88:be:5b:6c:35:c8:b1:3f:83:23:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Validity
Not Before: Jan 1 10:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=457cc14942bc6325d122c0524b05ba1b3fddbb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:25:d4:fa:67:1f:4b:bd:b2:ad:39:e8:d0:
f5:79:dd:b1:03:e9:33:15:15:df:1e:0d:11:41:c9:
c5:7c:0c:fe:93:76:dd:ff:1e:90:c2:8b:36:90:03:
ab:ee:ac:c0:bf:a3:c7:dd:75:01:b4:83:60:a9:2a:
b7:fe:ae:69:a4:be:20:a8:1d:37:4c:c3:43:a2:e5:
85:56:41:d9:4b:a8:03:d8:34:0d:51:13:7c:17:9e:
d4:c5:4e:c1:8b:0e:04:25:50:e9:54:06:d9:5a:8b:
07:c9:3a:ed:89:84:b4:1b:12:e5:15:ea:59:d6:95:
88:ac:50:86:5d:db:8d:f5:03:3c:c5:8b:05:e7:12:
92:ba:9d:ee:cb:85:a0:9a:5f:41:3b:27:9a:40:b3:
a5:13:bf:f6:7e:b2:d1:13:a0:fa:e2:19:ec:2c:08:
d3:2b:b9:e0:bc:1c:64:70:07:89:93:65:58:e3:7c:
c3:51:4f:84:bd:09:c5:29:b9:3c:0b:99:ad:a8:36:
c2:46:e5:e6:75:da:a9:6b:84:72:8b:ee:21:0c:3d:
ae:24:0b:66:5d:d7:c1:10:59:a1:1c:74:56:57:2c:
e5:b4:c9:de:8f:b2:0d:03:9a:71:20:19:ca:0d:d4:
5f:fc:0e:26:1e:d3:db:4f:0d:e9:22:6b:4b:c6:0d:
23:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7C:C1:49:42:BC:63:25:D1:22:C0:52:4B:05:BA:1B:3F:DD:BB:9B
X509v3 Authority Key Identifier:
keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/RXzBSUK8YyXRIsBSSwW6Gz_du5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.160.0/22
IPv6:
2a0f:4480::/48
Signature Algorithm: sha256WithRSAEncryption
a8:a8:79:e5:79:a0:4e:40:74:d7:68:27:07:d5:56:5e:d4:de:
09:0c:1d:b6:d8:55:cb:37:7e:d0:32:cc:a9:57:5a:76:96:7d:
85:b9:af:59:e3:84:44:ba:bc:74:91:61:34:b2:71:88:44:01:
45:fc:01:2c:87:f3:e0:68:58:dd:95:28:61:20:95:41:a4:2a:
cf:35:ce:c0:7a:8a:8a:a0:bb:c5:6f:ac:38:a9:ab:40:4b:44:
f9:8d:36:aa:32:1b:23:d1:53:2e:46:bc:ed:dd:cf:f1:67:a8:
ad:63:e8:54:38:d7:e2:0e:a6:d6:ec:05:7a:a0:6c:81:ef:cf:
16:3a:f2:be:ed:23:68:5b:61:2f:a6:c5:01:8f:51:75:06:9e:
3a:f8:ba:0d:c4:7b:7c:ef:d2:66:83:41:76:2c:2d:1e:7b:82:
3e:2f:ba:3b:81:9b:53:3e:dc:37:e1:4a:2c:ca:9c:aa:5e:f8:
98:37:82:64:5a:e0:e0:8b:1e:53:ed:de:72:c3:fe:28:69:f2:
6d:b7:9b:17:dc:18:a0:2a:45:cf:c8:bd:53:a2:b6:56:e9:36:
ec:2e:27:bf:55:de:2b:24:c8:03:eb:e9:bb:b6:da:7d:5d:df:
25:58:82:f8:9a:a0:5f:29:51:43:ec:54:ff:18:e1:f1:80:b9:
5e:1a:fa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:51 2024 by rpki-client on console-fra.rpki-client.org