Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/B-h4_w2-cNg4t6UEGsQvxiM_0ZQ.roa
File: B-h4_w2-cNg4t6UEGsQvxiM_0ZQ.roa (raw, json)
Hash identifier: ZeYKv/lccaIdJGqKKLV+DYrl1M43dxsMnb3S1UNxNXg=
Subject key identifier: 07:E8:78:FF:0D:BE:70:D8:38:B7:A5:04:1A:C4:2F:C6:23:3F:D1:94
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018CC2DB00E0FD387024E490A93F4E0C3731
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/B-h4_w2-cNg4t6UEGsQvxiM_0ZQ.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205591
IP address blocks: 45.152.126.0/24 maxlen: 24
45.152.127.0/24 maxlen: 24
2a0f:5700::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:00:e0:fd:38:70:24:e4:90:a9:3f:4e:0c:37:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07e878ff0dbe70d838b7a5041ac42fc6233fd194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:af:46:df:93:40:fc:b3:a7:e4:ed:c4:79:
38:44:ba:65:1a:c8:af:11:e9:1e:0f:ab:a2:36:cc:
96:73:1f:0b:60:5f:5c:18:4f:17:23:69:42:97:b9:
c6:46:7d:88:ba:6f:ef:30:e5:61:94:b1:1c:cb:a8:
35:2f:c9:72:0d:f9:df:04:20:f2:ac:e8:2d:60:b5:
d6:df:b5:30:f7:c3:fa:63:c4:e4:e7:b6:ff:9a:57:
67:de:3d:5e:f2:4a:b3:73:0e:53:a3:07:d0:cd:bf:
66:ea:dd:4c:99:64:63:cd:8b:38:cc:b8:3e:35:b8:
4d:e9:50:8e:34:b5:2b:8d:e4:a4:17:30:19:fe:50:
ba:7e:d2:1c:c0:8f:40:d6:91:a4:df:9e:3d:51:59:
2a:50:4a:e5:6e:de:6b:a6:ca:81:92:06:9d:01:23:
ed:15:ab:c1:f6:5f:58:c3:9d:5c:b9:7f:bf:5b:76:
cb:6a:e5:ad:64:d5:72:c1:be:6d:ac:23:8d:70:7b:
76:0d:89:7e:77:10:aa:79:79:6e:12:74:ee:87:37:
c9:a2:be:4a:4c:25:c9:dc:2d:67:78:e7:3e:1b:27:
0e:46:9e:43:f3:93:e0:4e:9e:94:57:aa:0e:f9:f0:
12:ce:24:c7:65:15:95:96:8e:90:6e:31:03:35:ef:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E8:78:FF:0D:BE:70:D8:38:B7:A5:04:1A:C4:2F:C6:23:3F:D1:94
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/B-h4_w2-cNg4t6UEGsQvxiM_0ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.126.0/23
IPv6:
2a0f:5700::/32
Signature Algorithm: sha256WithRSAEncryption
b2:33:e6:4e:41:cc:05:77:5c:f4:fa:f7:14:b1:81:44:97:5f:
a2:fb:01:0c:b1:53:8f:5c:78:a6:8d:0a:b0:a0:11:99:60:d0:
c7:e3:41:5b:1d:c3:1d:5f:4b:11:df:b0:07:a5:66:63:da:54:
88:4d:29:6a:d5:49:2c:c4:d6:76:7f:3b:f6:75:37:12:20:3d:
29:7a:a5:b2:25:a3:05:de:2e:97:69:b6:4e:f2:b9:b5:e8:0c:
05:9d:be:e3:96:57:d2:7a:fa:0a:59:cf:c7:d9:88:5d:41:08:
40:ec:93:95:31:ec:6b:97:6d:02:d6:39:95:44:29:71:9d:85:
d1:d2:0c:dd:a2:fe:91:cf:79:bd:f0:ce:a0:c3:16:86:11:d6:
d0:87:a6:70:11:ff:92:59:0c:77:47:3c:e4:72:35:ac:6f:c4:
9b:2c:16:af:22:83:53:bb:30:5d:d4:32:3d:94:2a:88:ff:02:
1b:d4:1e:86:43:d8:58:ad:b2:33:c1:ba:60:f6:0f:2f:a4:a5:
cd:3f:27:ab:1f:74:8c:18:07:c8:4e:e0:20:91:5d:14:4c:e5:
3d:c5:71:8e:d7:36:19:f2:cc:51:7d:11:eb:75:66:ec:c1:bb:
38:67:07:2d:4b:aa:82:c8:8c:40:e6:ce:ce:c0:64:a3:db:36:
c5:67:05:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:42:28 2024 by rpki-client on console-ams.rpki-client.org