Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/XhJnyUwt5f1WjNJBWSLofkpq5J8.roa
File: XhJnyUwt5f1WjNJBWSLofkpq5J8.roa (raw, json)
Hash identifier: o25KFU+oM+St2fQ6mrAGhl/aPRRikrCrzPE9WUJSwrI=
Subject key identifier: 5E:12:67:C9:4C:2D:E5:FD:56:8C:D2:41:59:22:E8:7E:4A:6A:E4:9F
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 018CC86F83702D1F33F90EA11A907E26C9C8
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/XhJnyUwt5f1WjNJBWSLofkpq5J8.roa
Signing time: Tue 02 Jan 2024 04:30:00 +0000
ROA not before: Tue 02 Jan 2024 04:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 45.152.33.0/24 maxlen: 24
45.152.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:83:70:2d:1f:33:f9:0e:a1:1a:90:7e:26:c9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 2 04:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e1267c94c2de5fd568cd2415922e87e4a6ae49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3c:8f:48:6a:e6:c8:0e:32:e2:e4:48:cb:a1:
eb:46:12:84:67:39:6f:0f:89:52:8a:1a:ab:14:a0:
3d:32:c4:85:e1:4a:eb:08:fa:7c:5d:34:1b:81:c1:
c4:6a:13:c0:7b:75:35:bf:12:38:7d:ea:fc:2a:b2:
4b:51:80:5b:c2:f2:52:8a:28:74:05:58:47:65:84:
3f:f3:ab:2a:dc:89:0b:85:dd:cc:07:6b:45:30:11:
18:94:4b:26:e0:44:6d:81:32:6e:ea:0a:a1:cc:9f:
8f:c3:cd:d5:eb:ca:7a:3e:69:e6:9c:3b:68:8c:2e:
10:13:58:8c:50:f0:e3:87:12:88:c3:9a:86:f6:dd:
2a:d4:48:0c:5f:70:1b:b9:21:44:2b:24:34:fa:4b:
06:ea:ad:e3:d5:c5:90:d4:d9:6a:45:07:eb:3a:f2:
36:97:f7:42:46:8d:88:67:84:dc:b2:de:0f:41:b4:
7c:15:4d:89:65:98:b1:6b:e6:4c:3d:75:19:82:4d:
f9:ba:4f:32:46:33:f9:d2:76:20:3b:ca:15:fd:6f:
11:3d:14:ce:38:59:09:d4:62:d2:76:3e:01:c5:06:
f1:ad:69:82:a7:f9:71:74:f3:b7:a8:56:7a:ed:d1:
03:44:7a:17:fa:ec:80:ae:c5:7c:52:e3:32:ef:fe:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:12:67:C9:4C:2D:E5:FD:56:8C:D2:41:59:22:E8:7E:4A:6A:E4:9F
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/XhJnyUwt5f1WjNJBWSLofkpq5J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.32.0/23
Signature Algorithm: sha256WithRSAEncryption
04:8f:7d:b0:6a:60:04:c8:5e:6e:c0:3f:bd:be:20:5f:25:a8:
2c:16:9f:d9:8d:42:2c:c9:09:25:02:19:ab:df:40:d7:d9:17:
2d:7a:17:2d:e7:21:b1:d1:ef:94:44:9b:e3:65:f3:49:5d:49:
eb:e3:e4:d4:2a:98:1a:66:3d:5e:8e:d0:03:ee:c7:c6:42:bc:
f1:fd:84:9d:97:84:e1:43:93:21:d3:e7:2f:05:b3:f4:05:b5:
e8:fc:cb:41:36:01:2a:23:d9:4f:78:e8:9b:5c:d8:1a:c8:a1:
b3:72:7b:a8:a1:61:6d:32:78:44:81:b0:c9:cd:59:ba:6a:84:
8b:77:be:7e:9e:f5:b8:28:b0:68:48:1f:7b:2d:ad:c8:45:ef:
a9:e4:46:f5:7f:47:d3:1e:16:f7:8a:f1:93:c3:a6:08:44:dd:
b7:1b:82:cb:e9:c8:f2:d9:1b:9d:4d:cb:5d:b3:5c:00:ca:9e:
86:e1:e4:1d:05:ec:df:ee:04:f5:62:c3:96:c0:88:f1:af:19:
c5:f6:61:ce:2c:07:85:de:11:5e:4f:c1:91:95:0c:40:b6:8a:
c9:fd:d3:f7:74:b8:eb:a2:2a:56:c1:cb:4a:4b:d0:8d:c7:e0:
6c:cc:93:06:9e:ad:47:54:4d:da:22:80:fe:5c:34:6b:4e:55:
f7:4a:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:17:49 2024 by rpki-client on console-ams.rpki-client.org