Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/CKtOITpEuRXCXWYVpRVA1ZJivdk.roa
File: CKtOITpEuRXCXWYVpRVA1ZJivdk.roa (raw, json)
Hash identifier: hzpkKpVq5SXdOHQStvgrHVkYyeZ/3kACQzZclwu0Bvs=
Subject key identifier: 08:AB:4E:21:3A:44:B9:15:C2:5D:66:15:A5:15:40:D5:92:62:BD:D9
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 018CC86F194225DDADD5BB958803A668E175
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/CKtOITpEuRXCXWYVpRVA1ZJivdk.roa
Signing time: Tue 02 Jan 2024 04:29:33 +0000
ROA not before: Tue 02 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43624
IP address blocks: 45.67.228.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:19:42:25:dd:ad:d5:bb:95:88:03:a6:68:e1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jan 2 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08ab4e213a44b915c25d6615a51540d59262bdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:61:35:85:11:0e:4d:f4:c2:23:8e:92:af:30:
b3:73:85:9b:c0:f7:af:4c:5b:4d:1d:7b:aa:f9:de:
29:7a:0f:10:3b:ab:06:ab:4d:05:30:fc:dc:e1:93:
fc:1a:3e:70:5d:8d:eb:60:d7:a7:81:aa:a2:81:5c:
49:a6:9b:fe:f4:cc:e6:36:3c:00:94:64:78:5c:0b:
78:47:a4:45:d9:e3:ea:19:ce:15:26:ff:c5:80:51:
e5:57:4b:f2:5b:f1:20:74:49:9b:50:27:5d:b1:be:
a6:f8:7c:47:71:50:46:da:b8:db:bb:a7:0c:9b:64:
d8:d9:f8:a6:e9:5a:38:39:5f:26:0f:27:1f:8a:60:
5b:f5:fc:f0:37:35:49:de:1f:33:19:5c:86:3d:98:
ba:c3:14:75:32:50:d1:75:fe:57:3d:a5:28:e3:91:
61:6c:2e:dc:16:7a:e7:75:88:93:81:fe:25:44:34:
fa:c3:ad:ea:d5:25:02:5c:1a:28:69:9d:56:00:53:
09:c2:11:7b:95:e6:dd:b4:af:10:fc:1a:47:7f:2e:
38:d5:1e:d9:99:c8:57:9e:b9:3b:8f:23:7e:d0:74:
bd:f0:79:87:0b:79:18:b8:c8:52:94:cf:bc:3f:37:
71:28:c7:6d:69:02:c5:92:d4:5b:40:76:00:cd:a5:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AB:4E:21:3A:44:B9:15:C2:5D:66:15:A5:15:40:D5:92:62:BD:D9
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/CKtOITpEuRXCXWYVpRVA1ZJivdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/24
45.67.231.0/24
IPv6:
2a09:7c40::/32
Signature Algorithm: sha256WithRSAEncryption
4e:ef:d4:fc:71:fd:75:76:ba:d3:cb:01:93:a6:b8:3d:78:49:
65:e7:fe:9f:b9:3d:66:a6:b3:6b:2d:80:b1:01:cc:ab:28:39:
83:d0:f3:0e:d9:95:bb:c0:ff:a7:08:74:ce:90:7a:c9:c9:37:
18:2b:07:64:6d:bc:38:ca:ec:19:18:d7:c4:e1:41:a9:59:d6:
d1:fc:72:e0:a4:8a:9b:38:ee:34:b7:8f:b5:bf:ba:8e:7d:5a:
f6:37:77:96:2a:0e:eb:68:12:68:3f:9e:fc:10:11:bb:43:ed:
7f:ae:14:76:b7:4e:9f:0b:8b:a6:24:e9:a3:e8:b0:27:2d:29:
51:81:7f:9d:b8:c8:13:9c:88:79:61:2f:8e:c7:c3:b8:50:3d:
2c:2a:c4:52:99:67:a2:8b:25:bd:e4:b3:e5:8a:4f:1a:61:65:
6d:c1:7b:3d:5a:d5:ad:17:55:2c:59:b4:77:aa:03:8e:21:cc:
2e:22:6b:57:5c:c0:40:44:9a:61:c2:2a:20:ce:c6:7f:07:0a:
80:5e:5b:16:8c:b6:c0:7b:a1:7b:60:8c:37:7c:d2:7c:b8:a6:
74:8d:3c:f0:fd:b0:b1:4e:4a:99:e3:0b:44:f8:59:38:2a:f2:
dc:78:39:c4:b9:3f:61:01:1d:b5:75:26:2c:c2:8e:12:57:23:
6e:51:4c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:21:56 2024 by rpki-client on console-fra.rpki-client.org