Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/CpYvFQ6Kp3v5uUZ1qExXOvV46vQ.roa
File: CpYvFQ6Kp3v5uUZ1qExXOvV46vQ.roa (raw, json)
Hash identifier: Kr7Z3a/d4Vgq9wCh3pbcyc56aLcz7PdN+AVVelLeum8=
Subject key identifier: 0A:96:2F:15:0E:8A:A7:7B:F9:B9:46:75:A8:4C:57:3A:F5:78:EA:F4
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 018CC86F36EBC231A2C6CBBA75B86A9E4FFF
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/CpYvFQ6Kp3v5uUZ1qExXOvV46vQ.roa
Signing time: Tue 02 Jan 2024 04:29:40 +0000
ROA not before: Tue 02 Jan 2024 04:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138968
IP address blocks: 45.81.33.0/24 maxlen: 24
45.81.32.0/23 maxlen: 24
45.150.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:36:eb:c2:31:a2:c6:cb:ba:75:b8:6a:9e:4f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Jan 2 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a962f150e8aa77bf9b94675a84c573af578eaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:36:9e:8a:6d:c1:7d:90:4c:a3:ce:49:e3:
26:39:ab:85:a0:3b:f4:91:1d:f4:0c:6c:ae:40:ed:
3c:3f:57:5a:c5:5e:8a:f1:c4:6e:4c:aa:b6:7d:e8:
7d:e7:b4:83:8d:67:ca:5d:17:2a:fe:91:2d:9d:7c:
a8:88:e1:7e:ec:48:19:2f:11:a8:0f:02:de:b9:b4:
44:bf:17:35:04:c6:ca:a3:ee:aa:18:04:36:e3:54:
28:5f:28:aa:15:dc:12:f8:b3:12:95:97:cc:5e:0d:
e6:3a:1e:ec:8e:87:e4:cd:b6:94:22:76:5a:ef:eb:
17:5c:88:bd:43:ed:81:47:45:d1:c8:5f:78:ff:bc:
b8:6f:12:4b:75:67:e1:8a:c5:1f:8e:28:5a:c4:1a:
ed:93:ba:2e:66:93:00:8b:af:cb:b3:3f:87:1a:b2:
95:ed:34:fc:c4:a6:3f:26:66:23:83:c1:e1:10:fe:
8c:10:7b:76:e5:44:ed:fc:ce:28:81:0d:7e:e9:f2:
d9:a3:b8:01:d5:e4:9d:a1:06:e8:c8:b6:c2:78:6a:
aa:76:63:b6:ce:76:c2:81:77:c7:72:9a:f3:f9:79:
90:7e:30:51:a6:b5:72:82:65:e4:a2:e6:ba:2f:e9:
b0:21:20:33:62:c4:8d:47:9f:52:50:c5:c4:c6:07:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:96:2F:15:0E:8A:A7:7B:F9:B9:46:75:A8:4C:57:3A:F5:78:EA:F4
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/CpYvFQ6Kp3v5uUZ1qExXOvV46vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.32.0/23
45.150.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:83:80:56:bc:9f:e7:49:a6:86:90:ed:72:7a:88:4e:13:4f:
f6:5d:76:57:9c:0a:97:0d:12:f5:6e:9e:42:ed:01:a4:c6:d2:
a1:2f:37:c9:be:4e:66:5d:24:d1:fc:ba:cb:79:80:ca:3a:b2:
81:bc:d9:e3:4e:59:de:57:82:d8:5a:be:f5:a0:97:ae:fb:68:
44:9d:2e:2b:6d:6a:0e:75:cd:a6:26:9a:44:e1:b6:de:a7:5e:
ba:bf:f3:59:ba:6e:d6:d1:15:04:2a:f3:56:62:54:60:5f:a4:
68:71:a5:cb:71:24:24:d0:bd:c2:7a:99:f7:50:3c:d2:4a:c6:
d0:61:47:20:c6:0f:4e:25:13:46:62:cc:7f:42:47:0a:5e:b9:
3b:a6:80:94:bd:d9:78:c6:e2:ce:f6:fc:4b:2f:6f:1e:6a:3e:
63:2b:5f:f6:09:cd:78:75:11:66:1c:12:16:0e:54:02:0a:ed:
59:49:c9:75:05:e3:2a:33:72:ab:4f:5a:7f:23:04:b5:fe:03:
7f:5f:03:84:15:89:ce:84:66:5a:ff:77:39:0a:97:b1:c6:8f:
3e:77:57:ea:6e:e5:b3:90:9d:02:5f:55:7b:2d:c4:f6:fb:f2:
74:27:fb:b1:fe:36:72:05:9f:9a:cb:55:b9:ae:ee:35:df:ca:
4c:e8:fd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:18:35 2024 by rpki-client on console-fra.rpki-client.org