Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/EOR5wbdvffS0QDTrtKyyc_7L60U.roa
File: EOR5wbdvffS0QDTrtKyyc_7L60U.roa (raw, json)
Hash identifier: yME4Yd4AiE3fq1mC2LXPhVm6lo3Leop8wlP1T2gU4oA=
Subject key identifier: 10:E4:79:C1:B7:6F:7D:F4:B4:40:34:EB:B4:AC:B2:73:FE:CB:EB:45
Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial: 018CC34931BA659EBB056DF28EF10C5AD86A
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/EOR5wbdvffS0QDTrtKyyc_7L60U.roa
Signing time: Mon 01 Jan 2024 04:30:03 +0000
ROA not before: Mon 01 Jan 2024 04:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44176
IP address blocks: 45.118.184.0/22 maxlen: 22
45.81.188.0/22 maxlen: 24
216.205.160.0/19 maxlen: 24
2a0e:5e80::/29 maxlen: 32
2a0e:5e80::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:31:ba:65:9e:bb:05:6d:f2:8e:f1:0c:5a:d8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Validity
Not Before: Jan 1 04:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10e479c1b76f7df4b44034ebb4acb273fecbeb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:d6:42:ee:67:80:06:7a:be:c4:c8:84:be:
27:3b:e9:d7:8d:84:32:7d:0c:01:ba:28:d3:c9:1b:
43:38:61:f8:e3:23:ee:74:e5:4b:0b:e2:bc:ba:58:
35:ff:0a:aa:56:23:38:2d:f2:bf:af:55:f3:5b:73:
c2:a8:41:8b:d0:a2:a8:f7:33:d9:19:b5:d2:ce:ca:
94:f2:de:99:74:2d:7b:ab:0a:8d:6a:aa:5d:f3:58:
4a:1a:57:09:af:86:aa:2c:32:ac:ad:96:b7:a1:f8:
02:d3:9f:13:5e:f4:85:4d:0c:84:ce:dc:8b:91:ac:
db:02:f2:37:44:f1:76:7d:0f:8f:58:e1:68:b0:fe:
52:fe:d5:12:a7:84:58:81:da:b6:16:71:55:16:7b:
ca:71:78:b5:d6:1a:94:61:9d:59:52:ad:a8:64:2c:
1a:ad:b2:20:12:74:06:b9:c6:62:f7:f8:b9:ec:3f:
7b:35:f7:ed:95:ef:ce:76:05:8b:f9:3b:f5:d7:7b:
c7:26:e1:ab:ef:7e:7f:00:12:7e:89:09:33:b1:f1:
a2:c9:c3:4e:38:7e:29:db:50:14:d1:fd:ab:7b:d6:
55:0b:ac:55:c8:57:6e:03:9f:49:de:85:a2:b1:3e:
e5:f1:f3:36:72:ce:e1:d1:ce:6b:71:fc:fa:06:69:
00:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E4:79:C1:B7:6F:7D:F4:B4:40:34:EB:B4:AC:B2:73:FE:CB:EB:45
X509v3 Authority Key Identifier:
keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/EOR5wbdvffS0QDTrtKyyc_7L60U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.188.0/22
45.118.184.0/22
216.205.160.0/19
IPv6:
2a0e:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
57:12:00:76:74:4d:bd:83:00:f8:97:b4:f6:48:77:5e:67:75:
91:24:c2:8f:db:26:b6:9f:76:03:fa:79:b5:ae:a5:68:3e:dc:
94:76:95:b7:73:6c:1f:db:90:40:a0:5d:f0:fd:d9:12:b7:0a:
55:d2:4f:65:c5:fb:d9:a6:3d:55:a7:d7:37:6f:58:e5:21:16:
c4:ad:3a:df:a3:ea:28:c7:9a:f3:76:79:1a:f3:d6:cd:6d:68:
62:cb:01:c2:40:0d:95:7c:33:57:8e:9c:cc:42:e2:4b:fe:9e:
c5:8a:dd:38:b8:59:b2:6c:b6:9f:9c:de:bd:d3:9d:b8:5d:36:
a2:8c:c4:ad:b5:f2:46:90:ce:10:6e:bb:35:17:c1:7e:39:64:
aa:8f:63:5c:7a:d9:dd:ef:d9:8d:d5:ff:59:ed:37:57:f3:08:
45:76:8e:8c:1e:2e:f5:04:d6:49:f3:e2:84:1e:82:ad:fb:b1:
0f:fa:e0:71:69:68:11:1a:f7:67:78:82:ec:d3:90:bd:42:71:
f8:34:d5:0f:c6:fa:0e:4d:66:3e:11:b7:18:29:f1:97:cf:e5:
8f:bd:13:24:e6:74:1b:85:5b:c7:ae:d8:e5:e1:77:0c:5d:f8:
6a:dd:24:e4:53:0b:aa:70:5d:1d:2b:5c:ea:ca:88:a9:db:da:
1b:c0:4d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 18:11:29 2024 by rpki-client on console-ams.rpki-client.org