Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/OSYoV2BfvJ_-lYuXmQ06HlFl4eo.roa
File: OSYoV2BfvJ_-lYuXmQ06HlFl4eo.roa (raw, json)
Hash identifier: 4DXSM6Ys38F3FTnQR79uBZA7pD+aL4w7lO3ahxjv5gs=
Subject key identifier: 39:26:28:57:60:5F:BC:9F:FE:95:8B:97:99:0D:3A:1E:51:65:E1:EA
Certificate issuer: /CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Certificate serial: 018CC8DE2551C823AA13EDA228D966512A55
Authority key identifier: F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/OSYoV2BfvJ_-lYuXmQ06HlFl4eo.roa
Signing time: Tue 02 Jan 2024 06:30:50 +0000
ROA not before: Tue 02 Jan 2024 06:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208897
IP address blocks: 45.15.132.0/22 maxlen: 22
45.15.132.0/24 maxlen: 24
45.15.134.0/24 maxlen: 24
45.15.135.0/24 maxlen: 24
45.15.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:25:51:c8:23:aa:13:ed:a2:28:d9:66:51:2a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Validity
Not Before: Jan 2 06:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39262857605fbc9ffe958b97990d3a1e5165e1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:da:74:8a:d3:62:b6:77:27:52:06:34:36:45:
5f:57:5e:62:b0:2a:dd:de:92:be:25:94:d1:b3:52:
7f:73:7c:b8:3e:16:ed:b4:da:31:19:6f:cd:98:a4:
54:dc:7c:bc:48:eb:f9:27:c4:fd:b5:27:d5:db:0d:
a6:39:22:d1:62:60:31:dc:4a:c7:ae:cb:ba:03:45:
5b:62:45:63:e3:30:6d:08:21:6d:e1:1a:e2:b5:4a:
12:d3:64:dc:43:f0:fe:d9:42:7a:4a:6e:d1:aa:8a:
13:e7:24:26:56:43:85:ef:57:07:fa:79:47:61:72:
50:77:b2:43:8d:8b:d8:db:21:00:d0:f6:c3:94:97:
c7:c7:fd:34:c4:fe:a7:f5:0a:2a:ce:75:bd:48:a7:
fd:94:77:e2:5e:f1:a8:a7:1e:71:df:94:fc:b0:77:
2f:b6:5f:24:d0:fb:82:c1:7d:ed:c7:e6:e1:94:30:
a0:8f:98:32:cc:6f:f9:c7:89:ef:37:8d:a6:cc:0c:
47:98:b8:01:f5:20:51:20:3e:55:6f:74:6b:09:57:
57:19:0f:27:1f:00:78:0e:17:40:13:32:c7:7d:58:
3c:16:6e:46:90:ea:ae:49:a7:fe:2b:68:88:67:8b:
32:d4:be:2e:ee:1b:cc:9f:18:7f:40:9a:14:b8:64:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:26:28:57:60:5F:BC:9F:FE:95:8B:97:99:0D:3A:1E:51:65:E1:EA
X509v3 Authority Key Identifier:
keyid:F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/OSYoV2BfvJ_-lYuXmQ06HlFl4eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.132.0/22
Signature Algorithm: sha256WithRSAEncryption
58:ff:2a:3b:63:84:bf:84:78:90:84:a7:b5:85:74:43:86:d6:
b7:50:ee:e9:8e:db:41:e5:e2:bb:43:33:b1:20:69:25:47:eb:
a9:1d:dc:5b:40:d4:fb:c2:7d:16:64:de:56:f9:1c:7c:2d:36:
ae:18:1c:bf:94:f0:bd:89:57:ef:ca:a6:02:76:28:b5:9b:67:
d5:34:c4:16:ee:73:6e:54:34:c5:99:68:36:65:34:46:8e:a0:
c2:db:80:6c:ee:85:70:fa:36:82:1b:e1:68:6b:34:06:a9:39:
73:89:9e:36:78:f4:0e:22:ba:1f:7b:73:78:2a:31:0a:fa:f9:
b0:b4:9b:19:3b:f5:50:b1:34:26:32:43:fb:94:bf:e2:3b:43:
8a:f1:3e:a7:8e:ab:a8:72:5f:87:9a:cb:df:9b:7f:8e:dd:2a:
3b:01:18:01:9c:57:33:2f:5d:74:8f:85:67:99:dc:51:6a:c9:
72:4a:cc:1e:d2:fa:9c:81:7e:9a:08:b9:c1:fd:e3:f9:fb:e0:
30:a3:26:21:ef:a9:23:74:01:b4:ab:b7:c3:d7:c9:f2:63:78:
13:3d:63:72:c1:53:67:00:bf:22:5d:30:5f:a8:e4:7f:5a:11:
26:46:2f:bb:87:47:23:22:0f:0f:7b:7a:2b:00:f3:37:3b:b1:
e3:33:65:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 04:02:05 2024 by rpki-client on console-ams.rpki-client.org