Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/kRHlwJJ6hWoGzbK18mi6sgXFzzE.roa
File: kRHlwJJ6hWoGzbK18mi6sgXFzzE.roa (raw, json)
Hash identifier: P1r+iVzjbumVHw37wJLuJNHoMtuO0Bdpn8KAAqsoNA0=
Subject key identifier: 91:11:E5:C0:92:7A:85:6A:06:CD:B2:B5:F2:68:BA:B2:05:C5:CF:31
Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial: 018CC8DEEE4975CE9FC1300EED797929E6E1
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/kRHlwJJ6hWoGzbK18mi6sgXFzzE.roa
Signing time: Tue 02 Jan 2024 06:31:42 +0000
ROA not before: Tue 02 Jan 2024 06:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2856
IP address blocks: 45.157.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:ee:49:75:ce:9f:c1:30:0e:ed:79:79:29:e6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Validity
Not Before: Jan 2 06:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9111e5c0927a856a06cdb2b5f268bab205c5cf31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4a:d9:a6:01:a6:6d:1b:f8:d5:e5:e5:7d:83:
d1:4c:6f:43:01:04:19:99:de:96:b1:f9:3c:37:43:
26:34:6c:6f:69:d9:43:9a:40:10:dd:ba:50:18:9c:
ca:fe:5a:00:17:22:be:1f:92:c1:d6:e8:89:c2:2e:
c5:bc:8c:50:a1:7d:3f:e3:da:c8:77:ed:81:80:86:
7b:4d:4f:f0:93:c2:c7:89:79:04:8f:d9:24:a6:52:
8b:06:20:13:4a:be:cf:b6:b4:54:88:6f:67:59:4e:
fb:7d:7c:f2:5f:2a:b2:d9:70:54:3c:13:3f:27:e3:
ab:ee:bc:a8:83:de:0a:84:6d:cd:9b:2e:5e:30:55:
58:04:11:16:f3:9d:a2:ac:ce:97:8e:84:c6:eb:1d:
bf:85:27:0f:22:66:39:ac:fd:4c:f8:5d:11:f6:ad:
98:87:2e:83:24:96:ec:28:98:b4:df:ff:02:f3:e4:
47:14:24:f6:9c:b0:90:87:55:f2:38:45:1c:3c:b8:
09:2b:b3:93:ac:10:7f:cc:ae:5e:f1:f9:45:62:d8:
46:9f:e0:95:fb:fc:43:da:bb:91:df:8a:12:af:bf:
d4:f6:26:16:33:4c:74:8c:a8:3e:34:13:3c:18:d1:
fb:ff:d4:c0:b7:25:b6:96:3d:fa:85:c2:fe:2f:7f:
af:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:11:E5:C0:92:7A:85:6A:06:CD:B2:B5:F2:68:BA:B2:05:C5:CF:31
X509v3 Authority Key Identifier:
keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/kRHlwJJ6hWoGzbK18mi6sgXFzzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.3.0/24
Signature Algorithm: sha256WithRSAEncryption
22:48:48:d8:60:c5:c1:d0:96:ac:02:04:68:97:f3:81:2a:44:
38:77:f6:17:04:06:81:05:73:24:ef:65:c6:df:83:71:6c:91:
da:88:28:f7:2b:87:dc:be:3f:67:32:b0:16:10:20:f9:04:45:
14:95:46:1e:be:23:4d:7c:62:c4:ff:8a:e8:fc:4d:cb:35:0f:
7a:6b:a5:da:c4:58:c6:53:5c:1c:27:70:a1:d6:72:07:96:83:
09:b4:8d:28:c3:49:4d:42:cb:e1:12:06:ab:7a:ea:62:64:4a:
fe:97:cb:a9:a3:1d:26:91:4f:ff:a7:b1:8e:24:2a:fd:9b:da:
cb:4c:58:ec:96:6b:0a:da:19:f3:32:aa:84:3d:77:54:5b:bd:
80:4a:bb:28:5f:eb:3b:2e:3e:be:a2:44:7f:74:21:37:c6:04:
e5:c1:43:60:e8:1e:55:47:cb:a7:47:50:5c:ef:cb:44:ef:55:
8e:5b:38:78:28:ad:33:6d:b7:df:3c:76:4c:62:37:fc:3a:6a:
52:b8:23:04:43:c3:80:b2:3e:e4:42:bd:7f:52:78:e7:3d:76:
69:8f:42:ee:7e:04:19:ad:bc:6d:37:92:94:7c:4f:45:56:a3:
08:a1:41:7f:6b:49:12:86:6e:63:aa:4b:6c:1f:25:88:ca:cc:
40:31:c9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:55:54 2024 by rpki-client on console-ams.rpki-client.org