Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/Se17ukltnn_VdOiwi0F-9x7V0H4.roa
File: Se17ukltnn_VdOiwi0F-9x7V0H4.roa (raw, json)
Hash identifier: cQI1a6UJ8odqRIdaupRKSqDmFwRoHs193l5zydhjWhQ=
Subject key identifier: 49:ED:7B:BA:49:6D:9E:7F:D5:74:E8:B0:8B:41:7E:F7:1E:D5:D0:7E
Certificate issuer: /CN=26d0b2a2954b5e757164444d42bbe8a14ad9b69e
Certificate serial: 018F1ECC75F3FF7C59B503C45367D51D4D5D
Authority key identifier: 26:D0:B2:A2:95:4B:5E:75:71:64:44:4D:42:BB:E8:A1:4A:D9:B6:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtCyopVLXnVxZERNQrvooUrZtp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/Se17ukltnn_VdOiwi0F-9x7V0H4.roa
Signing time: Sat 27 Apr 2024 09:04:26 +0000
ROA not before: Sat 27 Apr 2024 09:04:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204704
IP address blocks: 45.84.64.0/24 maxlen: 24
45.84.65.0/24 maxlen: 24
45.84.66.0/24 maxlen: 24
45.84.67.0/24 maxlen: 24
2a0e:9880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/JtCyopVLXnVxZERNQrvooUrZtp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/JtCyopVLXnVxZERNQrvooUrZtp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtCyopVLXnVxZERNQrvooUrZtp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1e:cc:75:f3:ff:7c:59:b5:03:c4:53:67:d5:1d:4d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d0b2a2954b5e757164444d42bbe8a14ad9b69e
Validity
Not Before: Apr 27 09:04:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49ed7bba496d9e7fd574e8b08b417ef71ed5d07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:a8:b3:d5:93:d4:39:30:88:5f:72:60:11:
ca:67:82:41:b9:e8:f0:bf:97:b2:49:d8:91:39:4a:
3b:12:2f:49:02:8d:a1:fe:45:91:97:a4:e8:f0:1c:
90:bf:db:70:ea:e1:f6:06:cf:29:13:e3:76:31:bb:
30:a3:5e:c7:49:46:9b:c3:a1:2b:f2:08:4d:5e:8d:
a5:07:e0:35:13:60:ad:36:77:65:7d:32:26:f5:65:
f3:0d:9a:a0:cb:2c:16:67:17:52:33:c2:38:02:46:
dd:b0:85:51:7d:2d:18:cc:67:bf:6b:e6:a7:0b:54:
21:47:f2:cb:10:37:0b:18:d1:5f:c0:80:0f:f6:b9:
97:53:df:fe:35:98:cd:6c:c3:06:50:0b:3d:e8:0a:
b2:52:ce:04:4e:66:e6:6d:34:c7:c9:ce:5e:a0:ac:
58:70:56:cf:67:77:aa:75:0f:81:60:c1:5a:e2:ad:
a0:1f:22:ea:60:93:6c:ab:9d:00:a5:e3:04:7a:49:
fe:fb:69:8c:62:5b:5e:75:49:02:a0:29:6b:f8:cc:
9d:99:58:b4:19:68:0c:38:d4:a1:5d:13:4e:b4:b1:
c0:e2:3a:e3:cd:ff:f8:ff:fc:7b:59:88:1b:01:7e:
d9:17:53:3d:97:ec:e7:8e:02:c7:b4:e7:ae:b7:f5:
51:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:ED:7B:BA:49:6D:9E:7F:D5:74:E8:B0:8B:41:7E:F7:1E:D5:D0:7E
X509v3 Authority Key Identifier:
keyid:26:D0:B2:A2:95:4B:5E:75:71:64:44:4D:42:BB:E8:A1:4A:D9:B6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtCyopVLXnVxZERNQrvooUrZtp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/Se17ukltnn_VdOiwi0F-9x7V0H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/JtCyopVLXnVxZERNQrvooUrZtp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.64.0/22
IPv6:
2a0e:9880::/29
Signature Algorithm: sha256WithRSAEncryption
8b:f5:3c:83:3f:9e:12:df:07:0e:4c:39:46:ab:92:50:55:c6:
ce:d9:8b:07:fc:f9:e4:cf:97:50:b5:77:76:bc:75:a5:67:2a:
f2:8b:6b:17:12:79:2e:be:4b:e5:9f:9f:38:98:01:90:a2:f3:
d3:6a:c5:2f:fd:69:7b:1e:61:95:9c:58:d4:8e:dc:dc:71:13:
5b:d5:ea:f2:4b:63:14:94:60:10:a7:33:8c:c8:c0:7a:62:1a:
66:4f:e4:aa:23:b6:af:70:d9:af:0c:19:ad:9f:a9:e8:53:e3:
5a:ea:d3:b5:f5:f2:72:e3:9f:53:89:0a:68:a4:a2:6f:7e:c1:
b4:1b:90:15:4a:1b:9f:26:b6:06:77:54:5c:32:6a:b4:81:5a:
25:2d:11:af:0f:8d:95:44:75:32:93:da:2a:3f:f5:ac:be:c9:
f2:bb:a6:33:02:79:16:f0:75:c2:42:b0:49:2b:cc:70:db:34:
77:f6:77:46:56:61:a4:c8:3d:5e:34:03:2d:c9:d6:45:3d:00:
d9:af:0a:53:86:1e:0a:4a:69:6d:23:cb:f4:12:0a:b8:d1:1b:
bc:e3:af:83:7c:a4:02:53:8b:99:60:da:76:ab:23:3a:57:30:
27:06:df:71:9e:77:39:48:34:88:5e:df:e6:4c:cb:c3:0a:e5:
39:58:18:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:07:42 2024 by rpki-client on console-ams.rpki-client.org