Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/ImFqb3sKQTKKlqiFDvbZmOC-UJQ.roa
File: ImFqb3sKQTKKlqiFDvbZmOC-UJQ.roa (raw, json)
Hash identifier: Ge9/03dpAIOwe7JgwgQxds744P78VOH3uqa0BuLk3ks=
Subject key identifier: 22:61:6A:6F:7B:0A:41:32:8A:96:A8:85:0E:F6:D9:98:E0:BE:50:94
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 018CC94AC6E76859D33A2FC577E8993868F9
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/ImFqb3sKQTKKlqiFDvbZmOC-UJQ.roa
Signing time: Tue 02 Jan 2024 08:29:30 +0000
ROA not before: Tue 02 Jan 2024 08:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32558
IP address blocks: 45.157.70.0/24 maxlen: 24
45.157.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:c6:e7:68:59:d3:3a:2f:c5:77:e8:99:38:68:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: Jan 2 08:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22616a6f7b0a41328a96a8850ef6d998e0be5094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:cc:65:ce:aa:8c:4b:a6:68:63:be:b8:b3:
25:f8:a8:c4:db:3c:91:43:63:28:9f:01:27:2a:a2:
a3:59:0c:88:27:c8:ae:15:db:32:08:a9:31:c9:22:
3d:7a:e6:14:95:80:ed:6b:bc:17:6a:0b:6b:2a:86:
77:55:1c:00:15:eb:a0:7b:95:28:c3:f8:75:83:92:
c8:ff:69:08:37:a9:6d:9d:76:6a:98:d2:a4:f9:b4:
7e:f6:bf:c8:ac:f8:ec:a3:5d:bc:a8:fd:08:58:ef:
54:75:26:a5:30:ef:c3:b0:45:1b:a5:9c:f9:8c:98:
9f:fc:4f:c7:d6:95:ea:8c:cb:3e:c2:77:67:e1:16:
0b:4e:1a:ab:4d:71:19:2f:6c:33:87:e2:56:ca:ad:
4f:ef:bc:6b:ca:42:41:7a:47:d4:83:21:50:6a:e1:
bc:a7:a0:bb:11:b9:13:53:96:75:db:86:1a:ef:4e:
d3:1d:f9:37:ae:19:69:27:08:78:c5:c3:3d:22:dd:
74:65:b7:6c:5a:eb:44:4f:71:b5:da:7f:f0:07:1a:
e5:92:e8:79:8a:f5:d8:f4:58:5d:6b:0c:8d:4a:6d:
d7:3b:f0:f1:59:e1:84:fc:3d:5e:72:42:97:12:da:
c2:f2:cf:a6:e6:5c:ae:d8:1c:2e:a1:18:a7:c2:b9:
6c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:61:6A:6F:7B:0A:41:32:8A:96:A8:85:0E:F6:D9:98:E0:BE:50:94
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/ImFqb3sKQTKKlqiFDvbZmOC-UJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.70.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:89:a3:37:d9:02:53:51:bd:ed:08:4e:92:c5:ed:0b:80:fb:
f3:10:7b:7e:2b:18:af:2c:30:3f:b9:34:a7:8e:d2:f2:1d:45:
66:64:40:60:a0:eb:e2:5c:0e:65:64:3c:97:20:a0:0c:fd:50:
8f:27:13:f8:c5:2c:73:58:46:57:1c:8b:a4:f8:f1:67:43:32:
b6:1e:7b:42:ca:5c:6e:c3:20:7c:6f:0f:30:7a:67:2d:b6:4e:
21:34:a3:45:0e:da:3b:22:dc:8f:b3:99:3e:36:48:86:61:8a:
dc:fb:03:b9:ff:6a:09:5e:c6:1d:10:de:5b:12:1d:b2:86:17:
fa:bc:76:a1:b5:d1:ae:fa:bf:f3:7b:df:a5:2d:7c:6f:be:bf:
44:83:36:7c:59:1b:cc:08:55:a0:ab:06:91:69:8b:b1:f3:39:
a0:0d:49:44:74:f7:b5:10:24:49:ad:51:e2:78:87:41:9a:b5:
dc:4e:74:cc:82:4e:0a:95:93:a6:11:52:08:1d:1a:64:6d:e7:
ac:eb:17:06:78:2c:bc:d9:75:4b:38:c0:c2:3b:1b:7c:f1:b1:
a1:31:89:c0:73:33:2b:4f:50:48:2e:ff:fc:e0:fd:f5:c1:fe:
7c:ab:43:d2:7f:d2:1e:d8:96:15:d2:bb:6b:d5:91:3e:18:4b:
7a:d5:6f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:14:30 2024 by rpki-client on console-ams.rpki-client.org