Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/wFuqTnfFf0dqjIfvyLGPAnXgVaE.roa
File: wFuqTnfFf0dqjIfvyLGPAnXgVaE.roa (raw, json)
Hash identifier: eoYAeYGFm7tJMsyYWz1XvO5ymb2pbehx+H44l1Dfr6U=
Subject key identifier: C0:5B:AA:4E:77:C5:7F:47:6A:8C:87:EF:C8:B1:8F:02:75:E0:55:A1
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 018CC8014BC18074F0E052D92952BF81098F
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/wFuqTnfFf0dqjIfvyLGPAnXgVaE.roa
Signing time: Tue 02 Jan 2024 02:29:37 +0000
ROA not before: Tue 02 Jan 2024 02:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208928
IP address blocks: 45.15.1.0/24 maxlen: 24
45.15.0.0/22 maxlen: 22
45.15.0.0/24 maxlen: 24
45.15.3.0/24 maxlen: 24
45.15.2.0/24 maxlen: 24
45.147.128.0/24 maxlen: 24
45.147.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:4b:c1:80:74:f0:e0:52:d9:29:52:bf:81:09:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Jan 2 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c05baa4e77c57f476a8c87efc8b18f0275e055a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:9b:05:07:8f:36:b7:b4:87:a3:d9:da:d9:
0c:05:7b:1f:70:51:0b:9e:10:2b:a2:9e:91:41:68:
19:b8:b6:3d:3e:95:06:6a:bd:51:bf:cc:5e:fe:2a:
d3:e0:b2:8b:6d:19:af:bf:d9:01:c8:12:0d:4a:83:
df:b7:e3:7b:0a:8f:39:88:58:23:b3:b5:9e:b0:92:
55:ca:10:13:99:6a:5d:25:88:9f:30:52:2c:db:4b:
6f:1d:82:5b:56:44:a3:3d:02:d1:26:2a:78:cc:3b:
93:51:fc:61:dc:79:f2:da:f6:68:a1:5c:ca:d7:1b:
c9:77:86:c1:cd:38:47:5b:3d:f6:1c:5b:5e:f2:f4:
6d:93:78:bc:db:ea:2c:ea:52:8d:b5:90:31:ad:6a:
2d:87:88:9d:68:b6:b9:ef:d6:05:d6:1d:92:1d:a6:
1e:1a:af:66:bd:e5:f2:e5:a0:b0:23:df:aa:51:83:
69:62:1c:73:c5:1b:74:64:1a:62:7d:91:10:59:4c:
a6:ff:cc:dc:d2:24:c5:c4:78:1e:9d:8b:3f:74:50:
a5:9f:a7:e0:2c:45:29:f7:8e:db:4d:b0:8c:06:aa:
e0:19:62:f9:7d:d4:3c:8b:70:ea:03:8a:28:d3:cf:
e7:6f:27:51:bc:11:01:ff:d9:26:f5:9c:09:b9:1f:
27:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5B:AA:4E:77:C5:7F:47:6A:8C:87:EF:C8:B1:8F:02:75:E0:55:A1
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/wFuqTnfFf0dqjIfvyLGPAnXgVaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.0.0/22
45.147.128.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:6c:70:6a:41:29:49:f3:7c:82:e9:bd:8d:5d:86:8b:f2:b6:
a6:9f:15:46:00:31:3e:3c:ef:12:8d:a4:64:50:8e:d5:9d:1a:
4c:a2:9e:32:fc:d3:08:d2:00:1c:bd:a2:ea:0a:50:e4:e0:3b:
0e:55:9f:90:77:7d:b6:e0:fb:fc:ad:15:5b:d3:14:a3:3b:74:
54:dc:d1:42:17:af:27:5e:30:c8:dd:f6:60:9b:34:c0:e0:11:
05:9e:c1:a8:35:6d:e4:97:88:d2:d1:45:0b:0a:8c:9d:01:0a:
30:fa:8a:ab:f7:bb:41:24:c1:5f:8d:52:58:52:e2:29:97:e9:
05:df:99:f4:af:4d:74:f8:1b:d8:63:e6:9b:b2:5b:f3:5e:0f:
a6:7d:33:05:b0:a6:72:bd:a3:bd:a8:bb:f8:21:fc:43:3b:64:
8f:63:e3:30:cc:82:87:9f:a9:b5:59:f9:04:1b:b8:ae:d0:00:
d8:a2:f0:25:10:8d:fc:46:1d:35:d2:c2:1e:d4:28:45:74:f1:
d0:98:86:04:9b:ff:1a:1a:d0:99:18:a3:c5:d6:0a:d6:e0:f2:
c6:cf:54:0f:43:c3:5c:da:ca:52:1b:15:7d:41:f8:56:20:de:
37:a4:16:33:4c:f5:db:33:87:e7:7d:6b:86:a4:76:7c:0e:40:
e1:2f:df:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:07:42 2024 by rpki-client on console-ams.rpki-client.org