Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/OTdOFehm_19cq3FxU3vCWbKOD7c.roa
File: OTdOFehm_19cq3FxU3vCWbKOD7c.roa (raw, json)
Hash identifier: Y+sCN1l8rqK10D+g3iA8237rke0+T8oRvU2hkGI46Og=
Subject key identifier: 39:37:4E:15:E8:66:FF:5F:5C:AB:71:71:53:7B:C2:59:B2:8E:0F:B7
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 018CCA2B7384470999B81C8458861FFA7444
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/OTdOFehm_19cq3FxU3vCWbKOD7c.roa
Signing time: Tue 02 Jan 2024 12:34:54 +0000
ROA not before: Tue 02 Jan 2024 12:34:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210392
IP address blocks: 45.144.17.0/24 maxlen: 24
45.144.16.0/23 maxlen: 23
45.144.16.0/24 maxlen: 24
45.144.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:73:84:47:09:99:b8:1c:84:58:86:1f:fa:74:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Jan 2 12:34:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39374e15e866ff5f5cab7171537bc259b28e0fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:7a:7e:fb:b5:72:38:ed:70:69:37:0c:c3:
25:79:14:fb:63:5a:42:a2:c4:dc:e5:3d:cf:7a:27:
e5:7f:66:bc:47:16:aa:4e:68:ca:23:0b:b0:3f:dd:
c6:9f:44:14:46:f2:9e:68:17:34:a7:8b:bf:fc:07:
e7:b3:5f:49:55:86:42:26:62:1a:c3:23:de:5e:ce:
76:cd:75:94:98:7b:35:55:13:8b:c6:87:27:4b:4a:
f1:63:41:ba:79:25:61:19:f2:1e:ff:bf:de:aa:88:
91:6a:b8:cc:64:d5:0c:ff:a0:bc:ef:6c:4a:3d:35:
b0:41:16:0e:cb:87:1e:fc:4e:8f:91:69:6c:d4:16:
4a:b3:c1:0e:fd:0a:96:5e:13:e9:7b:47:20:f2:7c:
36:bd:3b:ea:88:e8:dc:f5:1b:b3:ac:bd:d0:5f:0c:
f8:d8:c2:b7:03:62:66:1e:8d:7a:9a:b0:66:73:d0:
17:7c:db:4e:9c:c4:fd:c5:3e:d2:53:81:01:5e:03:
2c:f2:ed:6e:35:4b:f5:5d:4f:27:33:e5:76:d2:42:
f4:87:60:ec:08:97:76:49:66:dd:f0:e0:d4:e6:7d:
57:df:0e:52:7d:54:cb:d3:8c:b0:9e:63:20:0e:2a:
19:23:2a:28:38:ce:83:54:1b:c6:ea:e7:7c:17:92:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:37:4E:15:E8:66:FF:5F:5C:AB:71:71:53:7B:C2:59:B2:8E:0F:B7
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/OTdOFehm_19cq3FxU3vCWbKOD7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.16.0/23
45.144.19.0/24
Signature Algorithm: sha256WithRSAEncryption
23:19:2a:e3:d9:64:85:88:06:96:67:20:d3:40:24:85:45:28:
3a:c3:4d:59:8d:da:1e:e0:55:34:90:ad:55:af:ae:be:81:0c:
41:56:78:e0:56:86:9a:4f:80:53:31:d8:b2:51:de:b2:00:d5:
68:23:ed:9f:a1:6f:f2:2a:39:b9:e7:27:b2:ef:77:1a:8c:12:
3c:5c:b3:85:fe:e3:05:34:eb:ea:1c:3a:fe:60:b7:09:8c:2a:
0e:9d:a9:0f:d2:67:c7:5d:c5:85:cd:37:07:c1:93:d2:9f:03:
39:b2:c1:90:0f:15:ed:c7:3d:00:02:35:2f:1c:61:47:53:51:
93:07:bc:6d:2a:12:d0:9b:66:be:4a:b7:d1:6f:4c:d9:33:b1:
f7:6f:3e:fc:64:bd:76:a2:3f:2a:1f:0e:12:d5:e8:a6:54:c1:
c4:3d:83:3d:39:c3:69:dc:eb:04:33:a0:c0:98:c2:c3:af:06:
23:fc:8e:5e:14:6c:81:c5:c3:2b:22:86:3a:df:d4:b2:83:2b:
a0:ee:8e:31:75:79:79:10:40:7b:69:26:30:93:12:a7:92:59:
b9:5c:79:05:ad:c0:71:60:38:55:dc:f2:1a:b8:35:11:ea:72:
5e:87:5a:87:c4:5a:25:73:37:91:c3:fb:c6:d3:4c:78:b6:07:
0b:60:7e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 23:37:53 2024 by rpki-client on console-ams.rpki-client.org