Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/RpuM4cUms0ml1czhok1DZ6FcYm4.roa
File: RpuM4cUms0ml1czhok1DZ6FcYm4.roa (raw, json)
Hash identifier: qlzNdJRm+UexdCp/EBmbeJEBVN1wAKUNnb0HiF4Zanw=
Subject key identifier: 46:9B:8C:E1:C5:26:B3:49:A5:D5:CC:E1:A2:4D:43:67:A1:5C:62:6E
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 018EE2814701ED1DD328F2103F4A9F113850
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/RpuM4cUms0ml1czhok1DZ6FcYm4.roa
Signing time: Mon 15 Apr 2024 16:05:06 +0000
ROA not before: Mon 15 Apr 2024 16:05:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.149.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e2:81:47:01:ed:1d:d3:28:f2:10:3f:4a:9f:11:38:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Apr 15 16:05:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=469b8ce1c526b349a5d5cce1a24d4367a15c626e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:e6:a7:6e:36:72:29:11:67:1b:8a:9a:cc:
d6:72:f6:1e:5b:cb:0c:7c:4c:5c:ad:e6:af:4f:e6:
7b:28:1d:3c:1d:0e:d9:ff:d6:bf:2e:d3:89:5a:6a:
60:c2:89:3f:23:33:8e:db:d3:fc:25:cb:3b:73:fa:
ea:b2:b9:df:17:2e:32:50:c2:de:ad:db:e8:75:5b:
7f:e5:6a:22:77:d1:11:6f:1a:91:b3:e7:67:0f:5e:
59:5f:2a:cc:fe:53:45:f6:30:1f:07:9a:1c:12:e3:
43:64:78:33:d3:2f:8c:9e:a6:00:5d:4d:ef:22:a9:
59:ce:4a:28:85:f8:cd:fe:9f:11:62:d8:bc:3e:c4:
3d:70:d5:8d:ea:c4:d9:56:83:1f:81:2c:79:52:a8:
a4:8b:1c:70:30:ec:16:5f:f9:51:83:da:5e:e5:ea:
f0:12:69:b4:0c:f8:b8:68:e0:22:1c:f7:d8:8f:32:
f7:b6:48:11:17:7e:ef:df:6d:26:41:79:31:25:59:
9d:64:ac:78:65:fa:cf:ec:64:05:18:e3:1d:56:df:
b5:69:80:8c:f6:86:60:01:13:40:38:c7:4e:71:4c:
a2:bb:b4:d6:1a:ec:1f:7a:c2:b3:e6:82:bb:9f:d4:
2f:3e:22:15:6a:92:04:30:74:bd:b8:c7:85:f0:63:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9B:8C:E1:C5:26:B3:49:A5:D5:CC:E1:A2:4D:43:67:A1:5C:62:6E
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/RpuM4cUms0ml1czhok1DZ6FcYm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.164.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:38:44:01:ca:07:00:fa:7b:b2:bf:5a:f9:4f:47:4a:7a:27:
dc:92:fa:25:85:89:da:10:04:cd:8f:bc:30:61:eb:80:c7:ea:
f8:6c:74:0c:1e:b2:8e:77:04:80:46:93:03:86:ea:92:f3:3e:
2b:f6:3b:d7:33:62:c8:40:f3:a2:76:a2:71:10:63:ca:a4:65:
f5:de:ca:be:95:93:20:00:ee:2e:97:a3:ce:47:9e:fd:5c:bf:
cb:55:11:69:83:d0:2a:81:aa:cc:1b:f1:1a:0a:97:21:7e:94:
4d:ec:45:c3:0b:d0:57:95:7f:eb:1a:2b:62:b7:ab:e7:8a:97:
15:37:10:ae:58:74:dc:0f:48:54:44:76:0f:08:7c:3f:16:12:
cb:8d:31:af:00:4a:b9:ad:17:91:66:a8:c0:04:c5:2b:00:f1:
c2:1f:5b:2b:04:3c:dc:6b:38:29:f0:7c:3e:bd:bd:57:12:1b:
ea:f9:a3:e2:85:72:3d:04:06:07:b0:a7:71:8c:3a:eb:8a:71:
c8:4c:73:44:e4:82:77:4c:ae:2e:fc:e2:2e:ec:da:2d:d1:f1:
18:1c:59:d6:94:17:ca:74:2a:d3:05:dd:59:5d:58:a0:36:ae:
31:03:4f:da:af:cc:44:f5:83:58:af:93:54:ed:a7:50:5b:97:
87:b2:10:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:08:24 2024 by rpki-client on console-fra.rpki-client.org