Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/cPlIOHY_prWuoWNTC3wdmczhAlI.roa
File: cPlIOHY_prWuoWNTC3wdmczhAlI.roa (raw, json)
Hash identifier: xJGtxpKPO3uELeXBLRhrhC/pk2VehMKqrPh9NweVeF8=
Subject key identifier: 70:F9:48:38:76:3F:A6:B5:AE:A1:63:53:0B:7C:1D:99:CC:E1:02:52
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 018CC56E1EABD9CC04A4AE0B9A837C2FCAAA
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/cPlIOHY_prWuoWNTC3wdmczhAlI.roa
Signing time: Mon 01 Jan 2024 14:29:37 +0000
ROA not before: Mon 01 Jan 2024 14:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34919
IP address blocks: 45.136.240.0/22 maxlen: 24
2a0e:9dc0::/29 maxlen: 48
2a0e:9dc0:2::/48 maxlen: 48
2a0e:9dc0:3::/48 maxlen: 48
2a0e:9dc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1e:ab:d9:cc:04:a4:ae:0b:9a:83:7c:2f:ca:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Jan 1 14:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70f94838763fa6b5aea163530b7c1d99cce10252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1d:8b:c2:86:8f:bd:52:58:cb:a7:fa:d9:d8:
3c:4b:d3:40:c0:c1:96:33:d7:5e:cb:06:71:31:05:
76:7b:b6:2f:80:24:d7:99:04:b4:c5:7e:b1:35:62:
33:e4:d1:f9:cb:55:0b:c0:1d:b0:db:9b:8e:05:62:
6d:00:10:d0:18:79:86:42:fb:8c:52:3e:74:5d:d7:
ec:e6:cd:9a:1b:f7:9c:68:c2:be:0f:d4:7a:87:b1:
8e:d2:7e:13:ba:e4:1e:8e:f4:d0:e5:cf:2a:3f:31:
9e:ea:a6:3d:a8:ff:01:f4:82:a6:6b:63:a2:38:ad:
c1:93:be:42:ab:1b:a0:54:dc:50:3e:33:ac:cf:39:
d8:64:ed:cf:ec:fb:b8:90:d7:df:bd:7f:67:95:b7:
d4:ae:4d:e9:40:82:05:d5:02:86:d1:c1:85:ef:22:
c1:7b:3b:37:21:45:72:99:7b:38:6a:62:47:71:26:
d2:08:44:df:b3:79:42:e9:84:ba:61:bf:56:ed:25:
69:ff:99:b7:68:33:a5:d0:7f:24:da:ff:07:83:07:
be:3a:5e:88:fa:ee:f3:b4:8d:79:b2:a7:6a:a3:76:
07:87:de:c7:40:ba:a7:74:8f:e0:3d:49:2a:21:23:
e7:ef:67:ca:0f:34:37:4b:33:72:01:01:75:dc:65:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F9:48:38:76:3F:A6:B5:AE:A1:63:53:0B:7C:1D:99:CC:E1:02:52
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/cPlIOHY_prWuoWNTC3wdmczhAlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.240.0/22
IPv6:
2a0e:9dc0::/29
Signature Algorithm: sha256WithRSAEncryption
c5:f9:7a:b6:68:e4:f2:44:94:6c:5c:74:92:69:89:1f:50:16:
7f:a0:b4:9b:e9:bb:c3:46:7c:d1:fe:a8:1b:c4:3f:ea:08:dc:
c2:12:3c:28:c3:1d:8b:a7:5b:0d:7b:99:14:a8:7d:d5:1b:e2:
b9:10:de:f0:72:c7:e9:ca:7c:bb:5b:80:82:ed:89:45:68:9b:
8d:5f:92:52:6c:3e:06:87:cf:81:8c:af:e8:73:8f:72:f6:58:
82:0d:54:56:6d:ec:5a:e2:5e:fc:33:37:67:fe:a2:49:76:4e:
3b:01:55:e9:f6:16:6b:a6:3b:eb:88:a7:9c:d6:2a:96:c1:1d:
ad:57:a1:49:af:5d:a1:30:9d:c7:f1:dc:3e:70:2d:c1:12:5a:
8d:2b:07:27:93:d8:c7:fc:5f:d8:5c:90:04:08:76:c6:9b:b3:
31:21:d8:1f:47:52:5f:92:ce:68:60:1b:d2:be:31:39:44:24:
49:9d:b3:f8:8c:cc:b3:db:1a:52:a1:b4:00:82:9a:74:ab:57:
ed:7c:31:ac:9e:c5:c2:ac:9c:a8:d2:12:0b:76:3f:4f:05:d9:
a2:d1:5b:03:43:19:2a:b7:19:a7:8b:19:3b:54:71:d7:e9:e3:
30:98:4e:6d:36:f9:fc:6d:b8:f3:b8:d3:5e:72:34:e0:5d:6b:
2c:0f:1a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:40:43 2024 by rpki-client on console-fra.rpki-client.org