Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/IuD1AHrVEBdTBrw8BWbRVyAxFU0.roa
File: IuD1AHrVEBdTBrw8BWbRVyAxFU0.roa (raw, json)
Hash identifier: gU2XArbTRfv8jWfbdk1t+W+BVwskH1xGIjz2yg2t83E=
Subject key identifier: 22:E0:F5:00:7A:D5:10:17:53:06:BC:3C:05:66:D1:57:20:31:15:4D
Certificate issuer: /CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Certificate serial: 018CC500CADA2A1DC5C7744E7C2A1F817AA9
Authority key identifier: 0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/IuD1AHrVEBdTBrw8BWbRVyAxFU0.roa
Signing time: Mon 01 Jan 2024 12:30:12 +0000
ROA not before: Mon 01 Jan 2024 12:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40401
IP address blocks: 45.11.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ca:da:2a:1d:c5:c7:74:4e:7c:2a:1f:81:7a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Validity
Not Before: Jan 1 12:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22e0f5007ad510175306bc3c0566d1572031154d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:19:b8:5f:cb:8c:25:c4:66:aa:69:45:e0:e1:
c4:42:a8:ac:20:fa:3b:83:3d:74:90:13:2a:2e:82:
18:96:9c:4b:ce:da:a8:4e:ba:d3:63:44:8f:f2:a0:
9d:3f:57:8f:a5:4e:b5:a2:b9:c8:4b:23:82:64:62:
1d:06:cc:af:6a:16:be:b2:ba:ef:81:43:4c:ae:79:
0f:6b:8c:57:c4:bd:c4:81:8d:7d:98:52:18:08:cb:
63:0b:61:7c:b9:b3:61:75:8e:56:a4:db:a8:3d:a6:
b0:75:45:58:ab:58:90:1f:79:da:c3:13:f3:e7:84:
a1:96:12:ad:28:75:bf:b1:97:e3:49:c8:20:20:a0:
20:09:31:76:b6:f3:74:03:d2:24:d6:7b:d2:bd:f3:
f0:53:1b:94:12:d3:8d:0b:cd:da:a5:dc:51:3e:e1:
80:0f:b2:f3:de:71:b7:cc:5e:db:5d:7c:bb:0d:40:
84:03:13:70:1d:c0:66:85:c2:50:21:82:16:80:58:
bd:f0:a5:f0:3b:f2:d4:c2:be:20:cc:b1:50:d3:a2:
1a:53:de:23:84:62:2f:c3:8a:59:95:65:8f:aa:96:
5a:5e:62:f0:d5:1a:06:7d:f4:cb:55:a1:14:95:5d:
a6:52:7c:83:e2:10:ce:15:4d:b2:61:44:44:b0:f3:
90:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E0:F5:00:7A:D5:10:17:53:06:BC:3C:05:66:D1:57:20:31:15:4D
X509v3 Authority Key Identifier:
keyid:0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/IuD1AHrVEBdTBrw8BWbRVyAxFU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.36.0/22
Signature Algorithm: sha256WithRSAEncryption
04:a6:5d:8d:15:df:e9:11:1c:c2:44:12:6d:a0:70:b8:e3:4a:
c7:fd:c8:3c:ce:77:9d:f5:d6:78:95:16:e6:2c:a9:d2:e4:d9:
dd:9a:27:a4:fd:54:51:d1:43:af:9e:27:1e:92:ca:e3:9b:9f:
f5:14:39:ed:fa:fd:95:a8:fa:83:0a:1d:20:27:51:08:1f:76:
f2:03:47:90:3d:71:20:d5:ca:28:21:3c:18:fb:ba:51:0d:0b:
b5:76:9a:93:1d:09:dc:dc:2d:a2:ba:4f:62:8b:57:17:4b:19:
60:de:89:37:1e:38:f2:13:a7:8c:b1:56:31:d1:33:4e:31:f0:
26:95:9a:81:e2:d8:ac:f6:3b:de:57:1d:44:a2:dc:37:e0:c8:
e9:29:5e:df:52:b0:0d:9b:0e:f4:9e:9f:72:43:57:34:e5:27:
7f:7c:74:4a:d7:7a:d3:4b:02:b1:4b:f1:ef:b6:64:3d:82:8c:
4c:f7:f4:de:c1:2c:67:e3:a7:dd:26:d1:43:47:91:df:a4:51:
17:2b:08:a8:78:b1:b9:5b:c4:81:2d:e5:52:dc:f0:3a:d4:20:
43:ad:0e:c2:86:f8:ae:c5:40:a3:30:90:10:06:7d:fc:19:f9:
1c:56:50:f4:52:cf:58:8b:7d:61:87:46:ff:82:9e:1c:11:b9:
58:4f:e9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:08:40 2024 by rpki-client on console-ams.rpki-client.org