Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pOPjIwGOnJBvdDzdv27Yxx7HyUU.roa
File: pOPjIwGOnJBvdDzdv27Yxx7HyUU.roa (raw, json)
Hash identifier: ymD3dB5X/7vVw0QvLrY7B9B0uj6yX6EwZ/06bWVEhgI=
Subject key identifier: A4:E3:E3:23:01:8E:9C:90:6F:74:3C:DD:BF:6E:D8:C7:1E:C7:C9:45
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5012409277FC38E5A8F94982703E9B3
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pOPjIwGOnJBvdDzdv27Yxx7HyUU.roa
Signing time: Mon 01 Jan 2024 12:30:35 +0000
ROA not before: Mon 01 Jan 2024 12:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203320
IP address blocks: 45.133.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:24:09:27:7f:c3:8e:5a:8f:94:98:27:03:e9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4e3e323018e9c906f743cddbf6ed8c71ec7c945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:d7:19:a5:01:2d:08:cd:b0:f6:d6:4d:11:
93:42:eb:7f:28:3a:f9:c5:58:b5:dc:f8:56:bc:33:
da:25:60:48:78:23:4b:6e:85:3f:8c:ef:2c:b2:80:
a2:8b:86:ea:38:ff:0a:a7:27:0d:6b:a8:6f:17:6c:
d9:ae:62:37:c6:e6:2a:36:4f:60:30:0e:9c:00:6a:
bb:f7:db:9b:a5:dc:40:d3:ef:05:ab:0c:15:45:d7:
ba:c2:a6:49:cb:b3:7e:f1:17:c9:01:1e:8e:9d:63:
3e:7b:25:31:dd:2c:ac:21:bc:ac:c0:45:ce:8c:32:
cc:4a:78:f3:11:7c:10:8f:32:68:94:34:c7:44:5d:
5e:f1:59:02:50:84:4f:94:a9:77:f2:7e:5e:25:f3:
27:f0:d8:92:c0:11:ad:64:b1:87:ae:ad:52:aa:a2:
36:05:9f:58:ba:8b:03:6d:29:8a:64:69:86:0d:63:
c2:62:8d:09:96:f7:6a:ac:8e:02:43:48:96:14:28:
f2:17:92:36:c1:45:fa:8f:74:d4:09:62:16:f3:ea:
2a:86:c4:16:64:ac:e9:b1:8e:b0:69:0f:fa:7b:69:
f2:0f:5e:a4:3a:c9:8f:b6:e0:60:5c:74:a7:b9:07:
f0:db:89:85:06:d3:66:a5:5a:12:4d:cf:e4:98:bb:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E3:E3:23:01:8E:9C:90:6F:74:3C:DD:BF:6E:D8:C7:1E:C7:C9:45
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pOPjIwGOnJBvdDzdv27Yxx7HyUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.1.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a4:f3:82:b0:42:e4:47:08:16:b4:97:48:d0:f1:fb:d7:7e:
2c:b6:6d:db:14:bc:e9:66:62:36:d3:48:60:0e:06:ad:fd:b2:
d6:72:7c:fd:b2:12:d5:ed:cb:37:2b:d4:d7:c7:64:25:03:2a:
b9:c8:70:cf:6c:8c:fa:38:7f:fb:f6:e8:bd:28:73:94:97:77:
9a:de:71:73:bf:88:db:32:e2:c0:8e:dc:22:e8:7b:4d:7c:ba:
f0:18:0e:6a:48:43:76:86:d2:53:27:23:92:24:36:fa:ee:1e:
3a:b7:ed:94:c1:86:53:33:d5:96:b9:11:6b:54:eb:3b:dd:d6:
aa:75:cc:d9:96:19:9c:f0:d7:09:65:c7:66:73:35:b1:32:f1:
4e:7e:30:5c:b8:9d:44:c2:3a:56:88:9d:62:29:da:73:18:a1:
a3:3a:91:f8:a1:f8:86:a6:21:58:3c:c5:0a:59:77:7f:99:fc:
d6:6d:40:09:8d:99:60:1d:53:a4:a9:bc:cd:98:46:6e:1a:3b:
87:8c:75:d0:f2:2a:2c:6d:87:9d:3c:01:74:45:21:97:c8:96:
fd:c3:9a:f5:e2:f8:4a:7c:7e:38:d8:30:18:c2:49:1f:9f:22:
7f:3e:89:c9:c6:c5:35:90:d5:eb:51:2c:e8:7d:fb:9f:d0:54:
1c:0f:16:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 07:49:05 2024 by rpki-client on console-fra.rpki-client.org