Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/coKRHiIejECP9r6I0NXVLGbo_No.roa
File: coKRHiIejECP9r6I0NXVLGbo_No.roa (raw, json)
Hash identifier: DiOyDLe3SUfpHYwazLqz8UPO6pr0seqHNRPG1o+byFY=
Subject key identifier: 72:82:91:1E:22:1E:8C:40:8F:F6:BE:88:D0:D5:D5:2C:66:E8:FC:DA
Certificate issuer: /CN=139ca3799553b9e180d334442323003513485e2d
Certificate serial: 018CC7957F63F8B1BC8D15A1B7C4CBF08F02
Authority key identifier: 13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/coKRHiIejECP9r6I0NXVLGbo_No.roa
Signing time: Tue 02 Jan 2024 00:31:52 +0000
ROA not before: Tue 02 Jan 2024 00:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8823
IP address blocks: 45.141.188.0/22 maxlen: 22
2a0e:cf40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:7f:63:f8:b1:bc:8d:15:a1:b7:c4:cb:f0:8f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139ca3799553b9e180d334442323003513485e2d
Validity
Not Before: Jan 2 00:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7282911e221e8c408ff6be88d0d5d52c66e8fcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:00:39:d0:e1:53:e9:57:34:72:36:b2:a7:
4e:2a:e4:43:d6:91:d9:5f:2c:0f:7f:a5:f1:fa:41:
4b:55:1e:98:f2:85:02:f2:53:fb:3e:94:e0:a5:b2:
0f:5d:df:59:97:be:9e:0c:97:0a:36:37:b8:9a:e7:
02:69:9c:7c:6b:c0:9b:cf:5b:d8:fb:7c:33:c9:59:
5e:92:00:30:15:80:28:29:74:73:a3:26:37:35:cf:
55:a8:5c:12:a8:77:8d:35:b6:e4:5c:16:68:ca:ba:
fc:bd:94:06:41:5a:ed:f3:90:66:2e:b4:40:96:5a:
ee:c4:c5:52:ec:3a:2a:a2:5b:10:97:b9:f5:e1:f5:
5a:92:ab:f7:77:03:67:dd:27:c0:d0:d5:bc:ca:69:
cb:fd:9d:41:61:e0:92:c0:c6:91:66:e4:33:21:2c:
f0:76:ea:79:ce:37:c9:87:35:8c:e4:20:0b:d6:6e:
c5:11:85:1f:b0:c5:00:ab:99:6f:de:e6:1c:ce:26:
79:e0:e0:d1:ca:d6:d0:54:2a:57:37:5a:45:a5:78:
91:5e:7c:5a:9e:e3:e9:72:43:4a:da:75:6b:03:1e:
54:39:47:8d:10:8f:e3:49:67:7b:1a:4c:b3:83:7a:
c6:a0:3d:f3:42:78:cd:01:8e:4d:49:1a:a8:ba:85:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:82:91:1E:22:1E:8C:40:8F:F6:BE:88:D0:D5:D5:2C:66:E8:FC:DA
X509v3 Authority Key Identifier:
keyid:13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/coKRHiIejECP9r6I0NXVLGbo_No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.188.0/22
IPv6:
2a0e:cf40::/29
Signature Algorithm: sha256WithRSAEncryption
9d:08:43:3e:ba:a9:52:8f:6c:e8:83:68:fe:b0:50:c4:c2:24:
9e:75:ff:cf:48:0b:d2:d5:93:0a:d6:a4:c4:1f:ca:70:c2:b5:
e2:ef:6f:05:2a:83:c8:4e:44:74:d3:a9:9b:63:4b:1c:93:b3:
be:da:fa:12:0c:9b:5d:fc:39:2a:58:58:e4:e8:86:05:cb:5c:
d7:20:83:e4:02:14:55:91:b0:33:90:4d:50:f4:b7:e1:12:bc:
a7:b6:7a:09:e8:dc:5e:d7:51:0e:05:cc:a6:14:4d:32:2e:be:
cc:67:67:3a:1e:7c:19:0b:99:95:41:7a:ee:42:b8:0a:b4:50:
e4:cf:5d:d7:a8:79:33:15:1a:2b:38:16:1d:ce:32:1e:1b:d6:
59:f9:58:b4:c7:b1:d0:4d:8a:61:83:6b:59:47:8e:4f:9f:71:
2d:5e:81:a0:ef:40:4a:e6:f0:38:6c:fb:f1:74:40:a6:42:d9:
99:2d:3c:d7:e9:58:18:3b:1e:d1:7a:5d:bd:10:91:31:b9:22:
4c:80:de:69:68:1f:de:b2:45:ee:1a:12:69:bf:02:82:2e:dc:
57:b8:43:e2:8d:f3:08:50:29:69:ca:11:5e:7c:13:83:8b:cf:
a4:5b:9f:c6:cc:c9:b2:40:79:30:d5:12:27:2d:1b:79:91:e1:
d0:e3:92:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 10:38:25 2024 by rpki-client on console-fra.rpki-client.org