Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/cpkdxBhmnQKtAbi8HnMnMOSwwcE.roa
File: cpkdxBhmnQKtAbi8HnMnMOSwwcE.roa (raw, json)
Hash identifier: AgBHoXPgivWjJ99L3hwKhUvvJZQ+yMQK3KeT/tYcapQ=
Subject key identifier: 72:99:1D:C4:18:66:9D:02:AD:01:B8:BC:1E:73:27:30:E4:B0:C1:C1
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 018CC86F363438CFFA8B3F9096939EBEA807
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/cpkdxBhmnQKtAbi8HnMnMOSwwcE.roa
Signing time: Tue 02 Jan 2024 04:29:40 +0000
ROA not before: Tue 02 Jan 2024 04:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55933
IP address blocks: 45.150.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:36:34:38:cf:fa:8b:3f:90:96:93:9e:be:a8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Jan 2 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72991dc418669d02ad01b8bc1e732730e4b0c1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:f1:53:27:e8:ca:77:ed:3f:03:90:39:0e:
3f:6f:cc:f5:3f:0c:fe:74:46:32:03:30:d3:97:d5:
ee:79:6b:42:5e:3f:b3:41:d7:1c:cc:2c:91:d6:03:
47:af:99:19:ba:6d:4b:50:01:5a:e1:7d:bd:f1:82:
aa:d2:92:90:31:a8:c4:b6:68:c7:bf:7c:7a:00:66:
67:5b:16:bc:84:91:be:c8:fd:e8:df:af:9a:65:3c:
6b:79:5c:84:23:46:f2:42:0c:ed:4f:94:de:32:a2:
90:8e:b7:53:f2:7f:9d:5c:3f:bb:9d:df:5d:40:08:
67:c6:ea:a7:c1:5f:58:d8:14:1a:c7:8d:01:f4:26:
ca:42:1c:28:ae:7c:19:f1:32:25:d0:c8:23:89:6f:
19:a9:f0:9d:1a:02:af:78:4c:e0:28:42:36:bb:bd:
0d:33:4f:f7:9d:44:84:7e:59:2e:e2:cd:fe:23:7d:
ef:3a:89:34:88:31:32:d1:0b:7e:8b:85:f3:9a:0b:
b0:61:3e:b2:f7:ef:70:ce:8f:6f:77:f1:d9:da:3a:
ea:d9:44:ec:95:2a:88:9a:69:e6:f7:0e:08:29:f9:
44:2f:3d:45:33:37:61:d9:23:41:48:b0:c1:5d:87:
94:5d:77:45:bf:4d:18:f3:41:a2:69:c9:8c:19:6d:
27:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:99:1D:C4:18:66:9D:02:AD:01:B8:BC:1E:73:27:30:E4:B0:C1:C1
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/cpkdxBhmnQKtAbi8HnMnMOSwwcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:d1:e2:19:cd:6d:42:ec:f0:e2:ef:64:90:f9:47:93:ac:95:
bd:78:74:25:51:89:cc:f7:61:06:de:12:a2:37:c2:23:0e:d3:
d4:84:4a:11:c8:39:9c:b6:75:1f:94:cc:1a:3b:0a:f8:13:d0:
c1:a0:ee:af:b2:26:1d:44:b3:bc:8d:fc:3e:8f:5c:76:68:3f:
6c:e2:2f:c0:aa:bf:02:5f:3f:99:8c:5f:b2:95:79:0e:6f:29:
88:b3:ea:4d:7b:de:44:34:d9:f8:97:09:f1:eb:c4:89:4f:da:
29:27:f3:53:6d:c9:5b:bf:c2:16:94:15:ef:9a:fd:1d:8d:72:
a7:7c:f6:5e:ca:ce:01:fb:1d:20:d1:2c:96:d3:16:e2:61:14:
fc:87:ce:73:c1:8f:0e:bd:5c:07:61:9c:6f:ea:70:44:e1:c6:
66:4b:ea:4d:c3:4f:19:8c:0a:f3:bc:64:70:78:ca:c4:bc:3f:
bb:a9:f3:61:32:a6:ff:f1:20:6c:53:d2:45:b8:18:94:06:df:
3f:59:58:ac:45:76:da:e4:41:c6:ea:35:86:af:0d:a7:c9:a5:
3b:02:b0:7c:ed:a7:1f:3e:e5:a5:95:59:ef:e4:a3:d0:10:f0:
e4:f1:2e:1d:74:b8:c2:bc:fd:a2:33:fe:ef:2b:48:81:bd:08:
72:65:76:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:31:14 2024 by rpki-client on console-fra.rpki-client.org