Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/IkqtoV6esQBAhFDU-jTUxe7ULVk.roa
File: IkqtoV6esQBAhFDU-jTUxe7ULVk.roa (raw, json)
Hash identifier: qwiiu8bA7LyMfzy7R3cjgDhecRSxZ/IDJMG05EHKVvk=
Subject key identifier: 22:4A:AD:A1:5E:9E:B1:00:40:84:50:D4:FA:34:D4:C5:EE:D4:2D:59
Certificate issuer: /CN=7994a43de69d14fb1447424e2cade54f9922baaf
Certificate serial: 018CC5013D3F187428B2DB3FB99D11C0137A
Authority key identifier: 79:94:A4:3D:E6:9D:14:FB:14:47:42:4E:2C:AD:E5:4F:99:22:BA:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZSkPeadFPsUR0JOLK3lT5kiuq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/IkqtoV6esQBAhFDU-jTUxe7ULVk.roa
Signing time: Mon 01 Jan 2024 12:30:41 +0000
ROA not before: Mon 01 Jan 2024 12:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209311
IP address blocks: 45.132.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/eZSkPeadFPsUR0JOLK3lT5kiuq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/eZSkPeadFPsUR0JOLK3lT5kiuq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZSkPeadFPsUR0JOLK3lT5kiuq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 19:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3d:3f:18:74:28:b2:db:3f:b9:9d:11:c0:13:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7994a43de69d14fb1447424e2cade54f9922baaf
Validity
Not Before: Jan 1 12:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=224aada15e9eb100408450d4fa34d4c5eed42d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a2:d5:03:89:83:f5:b5:3d:59:18:8a:09:9d:
06:b7:33:3b:53:f3:bf:a6:b0:fb:16:e7:58:49:9e:
75:a6:63:3a:e8:2b:24:33:e0:ba:0b:19:05:af:29:
0d:76:b5:bc:07:90:1f:2c:81:e5:11:e8:51:59:16:
b0:32:3d:4c:c8:8b:06:59:e6:4b:57:a2:55:ef:3d:
56:08:d9:c4:bd:1f:c4:d0:b7:08:29:12:95:dd:8f:
76:9b:8e:6d:cb:ea:77:e0:c4:fd:b7:4c:5b:24:c4:
4a:a8:9c:66:72:ce:32:ec:02:97:b1:85:23:60:45:
7d:ed:02:87:cc:db:cb:31:f6:fc:a2:bb:79:90:00:
f2:8e:18:99:4d:a0:91:cb:32:09:83:8b:fb:0f:9c:
a0:a9:b1:65:97:82:d1:e6:28:81:a2:82:31:3a:b7:
e8:42:33:63:09:0b:25:da:7f:1b:d4:51:44:7a:63:
83:6d:0c:61:36:ac:c5:2c:e0:ab:d0:52:7e:0e:0e:
fb:f3:c6:85:ac:a7:11:50:eb:d9:bf:b8:ab:c7:13:
df:09:85:eb:c4:42:ea:b3:e5:d7:60:1c:8e:d6:b9:
4a:62:ed:46:80:87:7e:2b:a8:65:a9:1e:02:e1:b6:
b4:85:ce:48:ba:b7:ed:a7:e2:97:86:e7:43:c8:e7:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4A:AD:A1:5E:9E:B1:00:40:84:50:D4:FA:34:D4:C5:EE:D4:2D:59
X509v3 Authority Key Identifier:
keyid:79:94:A4:3D:E6:9D:14:FB:14:47:42:4E:2C:AD:E5:4F:99:22:BA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZSkPeadFPsUR0JOLK3lT5kiuq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/IkqtoV6esQBAhFDU-jTUxe7ULVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/eZSkPeadFPsUR0JOLK3lT5kiuq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.2.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:86:d5:a9:1f:0e:43:b3:26:36:2a:44:59:1c:f9:2c:bd:2c:
e3:8f:f2:8f:32:18:b3:2a:29:72:47:46:e5:9f:bd:0e:de:a1:
56:85:92:1f:f0:f8:97:86:0c:05:5a:b9:9c:67:8a:3c:96:96:
bd:8d:12:11:47:10:ff:60:de:7f:09:71:5d:2e:3d:cb:a0:ee:
30:5e:58:1c:96:ac:32:2e:04:f6:26:a3:4a:11:55:24:1a:ff:
2c:5d:7f:94:ef:5e:ba:7d:28:03:bc:c5:15:d6:96:25:08:77:
12:15:30:e3:88:72:7e:b7:2b:56:e1:0a:e8:20:73:50:d4:5f:
6f:2e:67:b9:2d:ec:12:83:94:6c:2a:de:a3:42:f1:37:c7:20:
c4:b5:bf:7d:2e:b9:6d:1a:86:98:ca:0e:5e:a6:1b:9c:97:b1:
65:a1:b6:df:67:fe:70:f9:a0:14:46:2f:8b:cb:57:2d:39:9d:
0a:40:d1:77:9a:c7:07:8e:7d:53:99:07:f6:5f:67:35:0d:57:
ee:af:76:1e:f9:e0:3f:3b:42:8b:7a:ee:6e:cc:54:aa:02:85:
19:64:2e:47:96:df:0e:7b:b0:f3:58:1f:f7:a6:0f:7f:ec:be:
7e:94:9e:9a:bc:4d:4c:e9:20:b9:36:9f:d9:2d:37:9b:e2:fd:
e6:04:a3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:51:21 2024 by rpki-client on console-ams.rpki-client.org