Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/RO4MWmZD_52n-SAYCXNKKRrASlc.roa
File: RO4MWmZD_52n-SAYCXNKKRrASlc.roa (raw, json)
Hash identifier: hLciJJ/gFVtvwLPmfhy8AfPz/RUyyR75/1FC6skRVIs=
Subject key identifier: 44:EE:0C:5A:66:43:FF:9D:A7:F9:20:18:09:73:4A:29:1A:C0:4A:57
Certificate issuer: /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Certificate serial: 01915BBC733F867211C32321FA287D5C93FB
Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/RO4MWmZD_52n-SAYCXNKKRrASlc.roa
Signing time: Fri 16 Aug 2024 15:09:22 +0000
ROA not before: Fri 16 Aug 2024 15:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214988
IP address blocks: 45.145.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5b:bc:73:3f:86:72:11:c3:23:21:fa:28:7d:5c:93:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Validity
Not Before: Aug 16 15:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44ee0c5a6643ff9da7f9201809734a291ac04a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:d0:62:6f:9d:cf:36:48:e7:d1:79:3f:1a:
72:b8:a2:56:40:69:1d:27:cd:e3:0d:6c:4f:e2:42:
df:77:fd:55:55:34:49:6f:db:8c:42:52:72:c4:fd:
88:72:e3:1b:24:ca:66:ca:34:89:c7:f0:09:e2:13:
97:2d:39:f1:19:d3:58:7d:2c:97:d3:1b:04:b4:71:
39:77:6f:b6:be:5f:2c:2e:21:b1:3c:9f:27:f0:77:
19:20:53:71:77:72:be:bf:23:3b:01:bd:fd:f4:5b:
9a:fd:cb:cc:0d:9f:4b:70:25:de:cf:3b:c8:cb:91:
a0:9b:1f:6a:ec:c5:f2:76:b5:f6:5b:90:1e:21:2b:
47:8c:19:6b:5b:4c:dc:96:b9:5b:25:d4:1a:76:32:
51:9f:97:71:91:fd:a7:ee:a0:9d:4f:13:20:c2:82:
ab:27:4c:9b:60:84:3b:5e:a5:fb:41:dc:96:9f:47:
54:4d:f0:ff:a9:6d:74:cb:bc:70:e2:02:06:d3:0f:
39:20:c7:17:4d:fc:a0:30:71:a1:cb:c0:fd:2f:b3:
58:64:02:44:67:4e:ea:82:f8:49:a9:ca:c2:23:ab:
5c:2b:c1:a2:9a:cc:86:aa:f7:0b:26:0e:a0:5e:1d:
ea:e4:fd:10:e7:70:f3:d1:a6:1c:ed:fe:a7:0f:a2:
45:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EE:0C:5A:66:43:FF:9D:A7:F9:20:18:09:73:4A:29:1A:C0:4A:57
X509v3 Authority Key Identifier:
keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/RO4MWmZD_52n-SAYCXNKKRrASlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.140.0/22
Signature Algorithm: sha256WithRSAEncryption
43:42:26:8d:2b:0a:e8:11:0f:90:07:f7:92:b3:1e:64:e8:e8:
71:85:46:9b:51:bf:a9:cf:f8:33:f1:be:a2:c1:f1:af:b3:c1:
a6:6a:91:56:22:12:0b:94:22:4b:ae:7c:cb:c2:9b:52:e8:79:
49:c0:be:49:f0:7d:33:94:a3:5d:ef:75:a5:b0:d7:77:1e:4f:
05:91:c4:0e:09:c3:ff:87:1f:6d:54:5d:3d:e6:d3:98:6f:9a:
a4:0a:2b:2a:96:e5:6b:d6:19:c4:5e:63:ed:d2:9b:a8:18:e9:
70:1b:7d:2a:8e:b0:bb:94:18:fd:27:d2:cf:d4:e9:86:5d:2e:
fa:86:89:e1:66:26:80:5f:a0:88:a3:59:a9:f2:93:e1:af:3f:
20:e0:7d:5f:7b:e8:84:1b:7f:c8:ea:94:61:ab:fe:4c:c1:e0:
a9:47:e4:71:b5:a7:fd:22:09:6a:6b:54:c7:fc:4b:fa:4b:fc:
6f:7d:df:01:b9:e2:da:e0:cd:37:d4:b9:5a:1f:be:c9:e7:ed:
a8:a4:66:1a:27:0d:9a:f0:cc:89:fe:1b:71:b3:22:e9:7e:c7:
fe:1a:83:68:3d:f8:bc:23:8f:36:2b:ed:03:20:f2:4b:f0:b7:
58:cf:06:90:d2:9f:08:44:95:2a:3d:2c:46:a5:2d:ff:d3:b5:
9a:a4:2a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:35:27 2024 by rpki-client on console-fra.rpki-client.org