Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/lYWNtslVY4-FgISKZVSpm-0Bunk.roa
File: lYWNtslVY4-FgISKZVSpm-0Bunk.roa (raw, json)
Hash identifier: vBVMm+B11RK4B0slA8V0QrGgHHMA0gQCtQKkrRguOKA=
Subject key identifier: 95:85:8D:B6:C9:55:63:8F:85:80:84:8A:65:54:A9:9B:ED:01:BA:79
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 018CC86F38340BB1CEC44A5B8B0E71085286
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/lYWNtslVY4-FgISKZVSpm-0Bunk.roa
Signing time: Tue 02 Jan 2024 04:29:41 +0000
ROA not before: Tue 02 Jan 2024 04:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 328543
IP address blocks: 45.81.34.0/23 maxlen: 24
45.150.236.0/22 maxlen: 24
2a0e:4c80::/29 maxlen: 29
2a0f:9a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:38:34:0b:b1:ce:c4:4a:5b:8b:0e:71:08:52:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Jan 2 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95858db6c955638f8580848a6554a99bed01ba79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c4:7a:d1:9e:60:31:56:3d:0c:31:cc:16:4e:
9d:ef:b6:53:d6:05:12:68:58:e6:d5:eb:1e:ca:fd:
d0:6a:79:e2:ce:98:2f:fc:f5:36:79:2b:76:a1:51:
e4:89:6b:72:f7:a5:dc:47:88:a3:7a:4d:76:0f:fa:
8e:40:ad:d8:d0:43:f2:3d:89:09:91:1f:c6:23:92:
97:90:3c:a5:c0:92:40:55:5b:aa:fa:2d:2b:ff:94:
cd:5f:54:7b:3e:9b:01:c0:76:16:14:35:30:c4:9d:
ad:76:98:03:a3:e9:d7:62:25:e8:6d:89:6c:e4:91:
54:30:47:39:3e:1a:3d:50:d6:b5:82:27:98:dd:d4:
65:bc:af:46:c9:ae:0a:4f:5a:ab:4b:8b:04:c0:dd:
71:40:ba:50:a1:ba:bb:f1:c7:cb:ce:81:cd:20:7b:
c3:8f:e8:2b:c3:8f:6f:b2:55:80:72:6c:f4:0b:12:
9b:a4:ba:09:52:38:85:d5:91:86:44:5c:1b:a3:12:
94:a6:14:bc:3f:3e:c3:33:68:91:60:a0:05:8b:cc:
fe:8a:62:c8:ca:fe:9f:3d:8f:a5:cb:ed:e6:dd:53:
59:0b:21:32:5c:3a:c4:74:e9:f0:dd:64:0d:ee:0b:
e8:63:21:9b:a2:10:12:db:05:bd:89:d8:11:f1:38:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:85:8D:B6:C9:55:63:8F:85:80:84:8A:65:54:A9:9B:ED:01:BA:79
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/lYWNtslVY4-FgISKZVSpm-0Bunk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.34.0/23
45.150.236.0/22
IPv6:
2a0e:4c80::/29
2a0f:9a00::/29
Signature Algorithm: sha256WithRSAEncryption
3c:44:ec:86:00:41:b8:fc:ae:9b:5f:5f:72:07:53:5d:8b:03:
c1:a3:0f:db:de:08:9e:18:7b:85:69:15:67:78:6c:d7:c8:a2:
b7:af:e1:d1:70:05:0e:b0:5f:a0:ed:20:07:5b:a5:e9:d9:69:
7c:d8:f6:0a:e5:90:d9:07:57:1c:fb:6c:25:16:db:ff:b7:77:
6b:92:4e:00:6a:66:b2:3a:56:d8:39:34:3c:eb:9c:b8:83:f4:
1b:0d:c7:18:be:ed:61:93:47:93:1d:10:c1:fa:02:ff:39:ea:
43:f1:19:3f:f0:9f:12:c3:83:fd:91:0a:91:c8:ce:ad:74:43:
db:bf:ef:03:58:9d:cc:68:3f:dd:a8:22:90:c3:d4:ee:8f:bf:
dd:82:3b:14:31:c7:27:eb:ae:e4:86:f2:30:53:64:99:aa:49:
17:d3:07:64:3d:1a:c0:7f:e6:b2:a7:8b:24:0b:2e:c1:45:69:
c4:81:81:c7:b2:e2:5a:5a:aa:8c:f1:c4:80:31:09:2c:9f:2f:
14:fc:dd:c9:64:f9:27:b6:b3:84:c1:d5:f7:ab:e6:c2:9c:e0:
04:3f:f1:e6:84:92:22:ba:8d:04:96:05:6f:aa:91:36:57:e5:
67:f4:d8:d2:58:e7:aa:35:84:a1:08:7e:a9:89:85:ad:1c:af:
c0:a5:da:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:48:36 2024 by rpki-client on console-fra.rpki-client.org