Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/42y2IdvtyW63Nna9hq-34waRUPI.roa
File: 42y2IdvtyW63Nna9hq-34waRUPI.roa (raw, json)
Hash identifier: CY4CnsQluQFTzXPfYOmExvIudLoazNOBW5Hi9+MgFcg=
Subject key identifier: E3:6C:B6:21:DB:ED:C9:6E:B7:36:76:BD:86:AF:B7:E3:06:91:50:F2
Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial: 018CC7264AE3479D0A5E2B0347C4FC293054
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/42y2IdvtyW63Nna9hq-34waRUPI.roa
Signing time: Mon 01 Jan 2024 22:30:24 +0000
ROA not before: Mon 01 Jan 2024 22:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60501
IP address blocks: 45.129.160.0/22 maxlen: 22
81.16.220.0/22 maxlen: 22
2a0e:4cc0::/29 maxlen: 29
2a0f:c2c0::/29 maxlen: 29
2a0d:2640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:4a:e3:47:9d:0a:5e:2b:03:47:c4:fc:29:30:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Validity
Not Before: Jan 1 22:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e36cb621dbedc96eb73676bd86afb7e3069150f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f4:9a:27:c8:63:cb:92:25:60:67:91:95:be:
40:9f:8b:53:ee:d1:6b:c5:1d:23:bc:2a:3b:30:9c:
8d:a8:fb:74:dd:f4:11:b7:f3:1c:46:c6:a3:7d:ce:
2f:c7:80:89:51:ec:b8:c1:be:a0:8d:09:9c:ec:12:
7d:32:0f:f1:c0:ca:28:5e:f6:5b:5f:80:47:4e:69:
27:f2:74:ff:d4:c7:27:6c:c7:76:27:6e:7b:2c:47:
12:48:52:8c:54:ba:ff:cc:0a:57:9b:f3:dd:ae:5e:
94:c4:b3:26:d2:96:42:c9:bd:c4:0c:c4:4f:9d:6f:
d1:81:3e:31:78:47:6b:82:43:e5:28:3f:bd:e9:0a:
f1:ed:dd:a2:14:d4:ad:3f:a7:b2:85:de:9b:1b:f0:
05:60:1d:b5:a4:fb:af:98:3d:53:ad:01:31:0c:c3:
ca:5f:20:b6:19:8a:19:67:41:40:74:8b:30:04:a3:
52:a8:19:39:83:0e:5a:61:24:48:c7:7d:70:95:84:
e9:9f:48:70:34:e3:bb:f2:6b:f4:85:ae:89:97:02:
dd:af:8c:09:45:e8:05:db:5e:46:85:fe:2c:aa:4a:
80:80:f4:b4:dc:d4:29:9b:d5:bc:66:fa:9e:e7:1d:
d2:a9:6f:b8:85:79:85:77:84:b3:f7:e0:4f:a5:36:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6C:B6:21:DB:ED:C9:6E:B7:36:76:BD:86:AF:B7:E3:06:91:50:F2
X509v3 Authority Key Identifier:
keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/42y2IdvtyW63Nna9hq-34waRUPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.160.0/22
81.16.220.0/22
IPv6:
2a0d:2640::/29
2a0e:4cc0::/29
2a0f:c2c0::/29
Signature Algorithm: sha256WithRSAEncryption
85:df:50:0b:2d:c2:27:18:63:93:1f:a3:e4:88:94:f5:8b:51:
4d:8c:37:df:70:61:0f:bf:dc:18:6b:01:45:a5:1f:f5:44:fa:
ac:d2:3d:db:e7:46:ac:4d:f0:03:87:86:3f:1c:8c:2f:e3:56:
5d:17:19:b6:1c:62:aa:9f:60:5f:a2:d1:b9:fb:63:63:dd:4e:
84:32:a1:75:26:24:1c:5e:25:c3:96:80:6a:a3:6b:f3:90:cb:
40:8c:79:e6:6a:cf:a3:2a:e3:01:95:3c:9c:f2:f5:d5:da:0e:
26:2a:62:95:21:d8:89:e8:22:ab:44:07:f9:76:55:a1:7c:e0:
37:9e:96:57:89:d1:15:5e:31:24:17:c8:ff:fe:5f:eb:ae:0e:
bf:32:d6:56:0b:ee:53:00:6f:04:ac:6d:4e:1e:39:98:14:06:
d2:ee:e9:82:ad:b5:b1:2a:fa:17:98:d4:6f:6d:f5:a0:aa:54:
34:86:24:47:d5:0f:41:29:1c:02:b9:1e:cd:4a:13:76:97:a3:
aa:0b:ac:80:29:22:b1:a6:86:8d:8e:71:9b:0e:40:40:47:92:
37:3a:f5:42:23:d6:40:ef:85:68:86:5e:ad:42:8d:dd:60:df:
d1:6f:de:65:65:de:e1:45:89:07:68:4a:0e:88:e3:9a:91:4f:
4a:64:61:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:02:46 2024 by rpki-client on console-ams.rpki-client.org