Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3LvzAh_aoni7btlCKfv9Wz-hGEY.roa
File: 3LvzAh_aoni7btlCKfv9Wz-hGEY.roa (raw, json)
Hash identifier: yI6UOu+qr2hHxcBLfgZ19acAcIWjIyQM2Wbci4WqAx0=
Subject key identifier: DC:BB:F3:02:1F:DA:A2:78:BB:6E:D9:42:29:FB:FD:5B:3F:A1:18:46
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC501307CC78175D9563BCD023096E864
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3LvzAh_aoni7btlCKfv9Wz-hGEY.roa
Signing time: Mon 01 Jan 2024 12:30:38 +0000
ROA not before: Mon 01 Jan 2024 12:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 262287
IP address blocks: 45.91.49.0/24 maxlen: 24
45.91.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:30:7c:c7:81:75:d9:56:3b:cd:02:30:96:e8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcbbf3021fdaa278bb6ed94229fbfd5b3fa11846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f5:71:9e:52:8d:cf:bd:17:45:02:13:0d:af:
85:d4:be:0f:3d:82:a9:dc:c1:72:46:ef:32:7f:6b:
eb:14:77:b2:9b:31:cc:dc:2e:2d:19:89:2d:79:b5:
32:02:cc:ca:0b:74:ad:7b:28:d7:61:67:c5:4a:be:
ab:51:41:fa:89:94:bc:e5:89:ee:d6:09:65:7e:22:
58:ef:ce:01:fc:ac:db:e6:7a:f0:fe:94:f1:48:1a:
ee:1c:e2:24:ab:bc:c9:8b:4e:f0:f8:1f:aa:fb:37:
44:45:8f:0b:02:8c:dc:94:73:40:72:38:7c:39:3f:
ac:55:ec:0f:dd:a0:d9:3f:dc:03:c6:62:b7:f2:01:
fc:5d:75:cd:45:56:16:fc:0d:b9:cb:d8:12:28:e0:
e2:68:82:43:62:8f:cf:e6:42:27:af:7f:95:bd:37:
b2:58:31:a6:f8:15:88:b9:dc:4f:f6:5a:ba:60:a7:
d4:bf:f0:85:df:d2:52:27:92:0b:53:a1:f0:e7:52:
8e:e4:fc:5f:85:09:27:82:96:81:3c:0f:48:b8:28:
c2:9a:fa:17:d9:93:25:83:de:03:b6:83:b4:c4:95:
c6:4d:69:5b:17:5f:17:16:2e:d0:51:51:17:c1:1b:
dc:8d:52:bb:e8:84:86:d6:be:b5:e4:4e:fb:48:13:
88:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BB:F3:02:1F:DA:A2:78:BB:6E:D9:42:29:FB:FD:5B:3F:A1:18:46
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3LvzAh_aoni7btlCKfv9Wz-hGEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.48.0/23
Signature Algorithm: sha256WithRSAEncryption
01:0f:f8:e0:48:44:a7:90:6c:ca:2e:c2:37:64:d1:b3:c9:b5:
a1:a2:35:da:f2:ef:8e:ba:ac:a5:c8:eb:83:79:7b:ca:3b:f7:
66:39:44:ee:04:13:79:c2:9c:bf:99:4f:c5:dc:03:92:aa:bb:
64:fa:21:c7:f2:72:54:ff:22:b1:88:e9:c0:0d:ba:2a:c2:64:
27:2c:61:ac:09:f7:47:31:3e:a3:f8:84:56:08:21:be:60:7d:
ed:43:ec:9f:fc:c5:87:6b:d5:13:d9:f0:68:3b:7d:28:9f:85:
b2:22:3b:eb:d9:6a:18:0c:27:e8:7c:4f:ab:69:5a:0a:0b:1b:
e8:24:d1:62:16:28:13:ca:62:5a:b8:be:dc:bb:31:78:f9:30:
bf:a1:68:fb:f5:82:45:26:7b:90:34:52:9d:d9:b3:7c:a2:5c:
47:2d:39:41:d3:06:cb:83:58:bf:71:c5:b4:7f:64:0b:60:a9:
7c:bf:4c:ea:ec:c0:23:e4:ea:fb:99:17:45:8e:92:bb:66:27:
34:c2:37:63:1f:a4:36:cb:89:e2:bf:36:10:d0:9c:35:51:22:
1d:e7:67:72:6c:53:38:19:24:98:a0:cf:b9:aa:e8:d6:11:8c:
e9:42:05:85:6a:e9:b4:f5:ed:a9:d1:bb:81:de:d0:1f:5e:7b:
8c:e5:74:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:46:59 2024 by rpki-client on console-fra.rpki-client.org