Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/aCGqjWrMIqz-20JufiNsVZijMv8.roa
File: aCGqjWrMIqz-20JufiNsVZijMv8.roa (raw, json)
Hash identifier: BzurtR3v4cP5Z+R/T1jeCeKAlwmGEsf0SSAIWYdylUo=
Subject key identifier: 68:21:AA:8D:6A:CC:22:AC:FE:DB:42:6E:7E:23:6C:55:98:A3:32:FF
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 018EEC5FF3F2498DAAD415A133C914F5B936
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/aCGqjWrMIqz-20JufiNsVZijMv8.roa
Signing time: Wed 17 Apr 2024 14:04:55 +0000
ROA not before: Wed 17 Apr 2024 14:04:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.78.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ec:5f:f3:f2:49:8d:aa:d4:15:a1:33:c9:14:f5:b9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Apr 17 14:04:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6821aa8d6acc22acfedb426e7e236c5598a332ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:ca:e2:38:e6:b4:5f:2d:da:7d:d3:ef:df:
54:e7:e9:e3:39:a3:ae:3d:9f:bd:2f:c7:95:4d:30:
5e:ec:0e:9f:0c:2c:47:93:90:87:9c:f7:98:38:8e:
28:d3:4b:c1:3d:76:1e:3c:2f:90:49:06:34:ba:3a:
06:65:d4:3d:ed:a0:92:f6:2e:29:a7:fb:e1:8a:81:
9b:8e:71:c5:d4:15:7a:04:09:59:39:5f:77:a5:4c:
98:65:56:c6:b3:8e:a6:b2:ca:91:b8:13:7b:f3:5a:
c7:43:3e:7e:7e:9a:49:d4:c6:6f:99:94:40:51:b8:
cc:b7:a1:11:16:9e:2c:79:9c:87:23:e6:18:9d:dc:
8e:2a:95:e9:2d:a2:24:29:3c:12:0d:dd:2b:d7:1a:
08:18:0e:e8:8d:34:60:5b:f2:72:7e:3e:78:38:9f:
d0:75:63:5e:11:5a:42:36:95:88:e4:b6:91:e4:c2:
17:f1:9b:5b:3c:0b:b9:a5:f9:0d:2c:c9:22:df:23:
e5:a4:1b:f2:c7:fb:1f:2f:1a:4b:e7:27:b3:35:72:
45:77:31:60:f4:a0:fd:d9:0e:14:ea:e9:52:c0:71:
ea:fe:56:ae:5b:68:f3:38:c0:56:2c:9f:4e:03:33:
5d:82:9f:74:bc:f3:8c:15:a3:38:57:3d:96:61:8b:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:21:AA:8D:6A:CC:22:AC:FE:DB:42:6E:7E:23:6C:55:98:A3:32:FF
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/aCGqjWrMIqz-20JufiNsVZijMv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.78.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:da:ee:01:86:b3:d6:5c:46:dc:4d:ab:b6:7b:0c:fa:c2:a6:
df:d3:1e:37:14:14:a3:47:6f:c4:27:fb:e5:ae:88:85:71:21:
80:84:4f:6a:72:40:5f:82:c6:80:39:c6:86:9e:dd:73:42:c4:
4e:40:82:2b:be:da:99:c6:ca:8d:dd:a5:bf:05:89:4f:ed:cb:
f0:72:34:a9:12:52:f5:60:0e:d2:b0:4c:d1:70:fa:10:cd:ce:
ab:f7:0e:69:ae:8e:0b:8b:55:cd:6d:76:5e:44:b9:d0:3a:05:
35:73:e5:0b:ee:03:2e:52:f3:d4:2a:25:dc:7b:3f:c4:a4:56:
8a:d1:67:fa:df:44:4a:89:35:90:ab:7b:a5:e7:b6:5a:f4:53:
1d:a8:31:4e:f5:e9:0a:0c:7c:fd:1d:a9:23:c0:da:b0:d9:a6:
85:a8:00:b1:08:d1:cf:e5:e9:c2:be:c0:0d:22:cc:47:0b:be:
b0:d6:66:e6:5b:da:28:4f:7a:95:bd:26:e3:48:53:34:ad:33:
66:af:b4:5c:2e:ef:ae:34:77:44:e2:72:b2:f7:a8:f5:17:f2:
d3:f3:23:87:4e:03:c5:8f:99:7c:d4:65:ea:43:da:af:d9:40:
7a:c7:62:10:00:a7:d4:32:dc:d7:26:e9:ac:00:ec:4a:63:13:
84:ed:86:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:45:18 2024 by rpki-client on console-ams.rpki-client.org