Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/lXwF_v5XfTuInaddEpbdvknbqJA.roa
File: lXwF_v5XfTuInaddEpbdvknbqJA.roa (raw, json)
Hash identifier: 8RXdgUoD+RvNL+nF8z57wRWHzmMrdDuSiDj0p5pFhXI=
Subject key identifier: 95:7C:05:FE:FE:57:7D:3B:88:9D:A7:5D:12:96:DD:BE:49:DB:A8:90
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 018CC5DC11E150F673DC47FF32D63B57B563
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/lXwF_v5XfTuInaddEpbdvknbqJA.roa
Signing time: Mon 01 Jan 2024 16:29:43 +0000
ROA not before: Mon 01 Jan 2024 16:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212669
IP address blocks: 45.149.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:11:e1:50:f6:73:dc:47:ff:32:d6:3b:57:b5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 16:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=957c05fefe577d3b889da75d1296ddbe49dba890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:28:a8:0b:30:ef:88:a8:e9:f9:31:f0:7a:
39:4b:7a:6b:22:f0:4e:ca:0f:3d:f2:15:a6:6c:af:
08:13:8d:d0:27:f2:1c:64:0d:93:66:92:46:bc:9b:
6b:17:2c:8b:b8:32:8e:81:7a:70:5b:13:d9:e5:f7:
7b:fb:2b:10:33:e0:8c:ed:f4:31:a1:e8:61:0f:85:
76:14:8a:52:84:4e:c8:d6:5b:47:23:33:6f:1f:33:
a2:a9:25:6e:f3:4d:d8:87:af:1b:f6:71:c9:9f:2d:
47:3d:c5:ab:ac:10:02:fd:dc:b0:f9:e0:ec:41:ea:
e1:be:c8:0f:ad:60:d8:cd:4b:f0:bc:8b:a9:f2:ae:
7b:95:ef:9d:1b:9d:e7:74:9e:b9:e5:d3:25:dc:44:
0c:09:21:a8:70:d5:b1:41:b6:90:17:e1:b6:35:c0:
90:ad:ff:21:5a:14:39:8a:72:c4:a7:1b:d7:d6:bf:
73:7e:d8:87:d7:f7:4f:a8:5a:70:74:62:64:f0:0b:
b5:b8:f7:f2:37:f1:a9:ed:fa:be:f0:59:e5:6a:a0:
38:3e:f0:80:ac:0b:98:e6:15:66:55:f2:67:9c:04:
31:ef:79:79:bb:d9:31:1b:a4:4c:ce:1d:83:19:d8:
08:ec:88:78:29:bf:07:2d:ef:3d:b3:cb:14:4b:a6:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7C:05:FE:FE:57:7D:3B:88:9D:A7:5D:12:96:DD:BE:49:DB:A8:90
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/lXwF_v5XfTuInaddEpbdvknbqJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.167.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:65:7b:a4:d6:80:f9:68:e0:33:d5:f0:ed:d4:26:32:1e:c5:
25:bd:36:2c:17:8b:c8:e3:7a:a3:f5:65:3d:ed:4f:29:44:69:
8e:bc:83:d7:58:66:4d:a7:44:1e:1a:c9:2e:99:1d:f7:06:ae:
2c:d7:c8:28:b4:bd:cf:49:44:28:94:5b:94:f8:2b:e2:ba:14:
1c:71:0f:65:6a:31:d5:8a:81:75:25:2a:8d:32:34:91:e1:aa:
e2:4d:97:7d:a1:6a:02:59:7e:32:ea:68:06:f6:45:81:71:e3:
e2:54:d2:77:2b:57:c8:31:e6:d4:58:ae:3d:74:d3:93:88:a7:
fc:2b:7c:7f:99:84:ad:da:e8:f1:09:4e:c6:b9:ee:98:a1:d8:
39:2a:0d:d2:84:b7:10:8d:f4:54:43:42:3b:a1:89:38:c7:69:
19:46:97:18:e1:82:4c:82:e6:7f:28:fb:ff:7f:d9:2a:63:73:
bb:f5:e8:7d:c6:cb:fc:89:71:32:7c:4d:f9:40:86:d0:9e:f6:
b1:21:cd:b9:1d:ce:78:25:9b:3a:41:86:86:f6:7d:50:13:15:
6d:3a:c1:e3:b7:e5:d2:21:aa:61:82:60:f7:fa:8a:ef:be:cb:
9f:8a:3f:97:b7:a1:ca:f9:f9:e8:87:09:2f:44:aa:aa:82:9a:
10:14:22:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:20:48 2024 by rpki-client on console-fra.rpki-client.org