Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/O_TF0oNE4SAD_wwLUQUvSYZzrJA.roa
File: O_TF0oNE4SAD_wwLUQUvSYZzrJA.roa (raw, json)
Hash identifier: Erw8CN7iMVPtl5/iZjUrM8+i/Mi89E5IBa8mGczzxQ4=
Subject key identifier: 3B:F4:C5:D2:83:44:E1:20:03:FF:0C:0B:51:05:2F:49:86:73:AC:90
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC50111B23C45613F735CCD0E6FCF95B3
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/O_TF0oNE4SAD_wwLUQUvSYZzrJA.roa
Signing time: Mon 01 Jan 2024 12:30:30 +0000
ROA not before: Mon 01 Jan 2024 12:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45929
IP address blocks: 185.245.112.0/22 maxlen: 22
195.38.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:11:b2:3c:45:61:3f:73:5c:cd:0e:6f:cf:95:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bf4c5d28344e12003ff0c0b51052f498673ac90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fc:78:9e:01:1d:a8:81:2a:b9:d6:fa:64:cc:
9b:4a:bc:39:11:b3:6c:ca:5e:37:53:ba:aa:4e:a0:
a4:2b:27:2c:16:48:bb:b2:88:4d:e1:05:d5:25:b3:
31:fe:e6:ad:2e:ed:02:a5:ca:37:2a:8e:e4:58:53:
a4:77:56:d5:2f:53:2d:ca:6e:06:76:95:e1:90:66:
ec:40:93:c8:16:33:02:91:65:f4:9c:b5:d3:81:b5:
4e:56:23:a5:c5:0a:64:e7:25:31:30:72:1c:6c:1e:
80:ba:9a:a6:58:c2:75:74:c7:e6:54:c5:29:64:a3:
94:07:7e:31:41:54:a0:86:a9:5d:04:9a:5a:72:cd:
f9:7e:bf:e7:f2:bf:fd:fe:95:2d:f0:f5:c7:09:5f:
05:b6:a3:90:8c:aa:fb:d8:71:a4:c5:98:40:41:af:
d7:7b:4e:d7:da:d6:3d:ee:46:eb:6f:7f:7d:eb:a6:
48:5a:f3:33:e6:ee:8b:c4:34:a3:89:b8:8f:10:36:
28:0f:9f:c3:3f:64:55:4d:dd:b7:71:30:6f:cf:70:
44:8b:b2:3b:42:ca:fe:db:a2:c4:26:73:81:d5:3b:
4c:ec:3d:ac:15:b8:6f:a4:ea:54:c3:fb:cf:18:6d:
37:5b:37:f3:17:4c:31:a7:8d:4c:7a:86:94:b0:dc:
6f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F4:C5:D2:83:44:E1:20:03:FF:0C:0B:51:05:2F:49:86:73:AC:90
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/O_TF0oNE4SAD_wwLUQUvSYZzrJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.112.0/22
195.38.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:f9:de:5c:22:5e:50:45:c9:d4:84:bc:ea:5a:41:bb:db:2f:
5a:67:ad:11:80:12:8a:95:4a:d0:92:ae:db:8e:55:f0:66:79:
12:12:82:07:1a:83:bc:90:51:ac:ca:21:7f:64:cb:33:da:48:
fe:d2:6e:bd:ff:dc:c6:d8:57:53:2c:d8:1f:59:06:35:66:d7:
77:ff:0c:0e:ea:f8:42:9d:97:82:27:19:1b:03:31:31:5a:c5:
9a:c2:f9:3b:5b:fc:f4:a2:cc:f3:f9:cf:1b:ae:c4:42:c6:5e:
a2:69:f7:7e:b7:dc:71:9c:13:a4:93:73:10:ff:33:32:c6:dc:
fa:cf:e2:e1:7b:5f:c2:3d:f6:57:c2:29:07:22:60:70:d5:25:
bd:31:63:de:99:47:37:1a:d2:d4:e0:fb:eb:0c:b1:3e:cb:8f:
4c:4b:7c:23:0b:0f:9b:38:5c:33:9e:d3:2b:6b:0a:05:9a:9a:
d5:ae:42:88:a4:49:9f:71:e7:39:be:30:e1:c5:e6:07:00:e3:
6e:87:13:b5:1a:15:85:52:1d:ec:cb:5d:f1:b7:29:42:21:cf:
07:16:c7:4a:ab:56:27:5c:26:39:27:9b:aa:18:ad:44:16:24:
7c:27:45:90:39:ff:39:45:17:2b:80:79:cb:2d:8c:e0:20:9b:
0b:2b:6b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:22:05 2024 by rpki-client on console-fra.rpki-client.org