Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/AlojmQJlpz98pqsjX8b3yZAPPgI.roa
File: AlojmQJlpz98pqsjX8b3yZAPPgI.roa (raw, json)
Hash identifier: ULWugVoz2ltuFV0GRmxSALnHOkNA8C0zkY1dxj6zD9g=
Subject key identifier: 02:5A:23:99:02:65:A7:3F:7C:A6:AB:23:5F:C6:F7:C9:90:0F:3E:02
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 018CC8709B92604AAFC1AA5A8429C4C32DA1
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/AlojmQJlpz98pqsjX8b3yZAPPgI.roa
Signing time: Tue 02 Jan 2024 04:31:12 +0000
ROA not before: Tue 02 Jan 2024 04:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212369
IP address blocks: 45.155.125.0/24 maxlen: 24
194.36.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 20:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:9b:92:60:4a:af:c1:aa:5a:84:29:c4:c3:2d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Jan 2 04:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=025a23990265a73f7ca6ab235fc6f7c9900f3e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:77:d6:97:64:cb:ed:88:7e:61:fd:6b:e9:66:
c6:15:f6:87:bb:21:6d:2d:b2:b0:a8:88:71:f7:6c:
d8:22:39:ea:8f:86:ce:4e:e9:86:17:2a:c7:48:c0:
50:6c:36:eb:5c:60:4a:46:73:51:7a:ff:ab:7b:93:
98:33:0b:34:0e:d3:fe:5a:1a:66:1c:10:ef:d6:eb:
7f:9b:ec:24:95:05:ac:5a:ac:a8:58:2b:96:7e:07:
83:d8:fd:3c:00:55:6b:00:83:bd:04:19:1c:dc:49:
e5:2c:ec:d4:bc:cf:de:e9:b7:03:18:97:95:9c:91:
5c:dd:fe:d1:2d:1e:9e:41:4c:d2:d3:18:ef:9e:e3:
78:b9:b1:eb:55:04:78:1c:1a:ce:42:fb:f7:1b:27:
8e:f6:f6:87:43:93:fc:b5:16:7e:85:e8:0e:d2:bc:
31:50:cc:3f:a3:10:72:e3:d6:04:73:96:4d:18:58:
7a:76:7c:68:8d:a0:00:51:0b:94:97:ec:40:5e:10:
56:21:9c:37:98:e2:23:fe:cd:12:b3:12:f8:13:79:
6d:e4:c7:92:d2:0c:31:06:0a:a9:28:99:52:74:7e:
5c:e4:44:2e:26:a0:f7:ea:95:04:c1:2e:a5:a9:07:
40:19:25:80:2d:86:1b:a5:fb:24:71:36:cc:da:2a:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5A:23:99:02:65:A7:3F:7C:A6:AB:23:5F:C6:F7:C9:90:0F:3E:02
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/AlojmQJlpz98pqsjX8b3yZAPPgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.125.0/24
194.36.85.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a5:d0:42:a4:15:64:8a:3a:fd:35:e7:52:30:1b:ac:d2:6c:
1d:0f:14:53:ad:11:73:be:8f:42:23:cc:5d:ab:6f:71:04:f0:
28:86:62:31:98:82:68:6b:c8:a2:c8:e6:98:50:7a:2e:6a:2c:
4e:0b:f4:7a:74:8f:e1:e5:5f:2c:e8:1b:bc:f8:f6:8c:ab:0f:
a9:e0:56:58:be:9d:be:1c:b4:37:50:20:57:d9:18:19:c6:8b:
be:26:9a:d8:5e:40:60:58:79:ef:3d:30:65:d7:de:cd:47:84:
29:7a:4b:81:9f:ea:df:36:b8:07:ea:42:8a:7f:ca:35:68:3f:
39:1f:57:c7:83:c8:77:24:97:76:9b:d0:4d:1c:dd:23:a3:20:
49:50:28:cc:d5:f9:ca:0c:a9:cc:bf:ed:8e:68:30:ef:b4:f3:
56:43:22:27:f6:3d:fc:d3:9f:dd:8c:34:b3:62:76:9e:fb:3d:
d3:1b:b1:e9:c5:7e:0a:35:80:f2:e0:c9:02:c9:29:7e:5e:54:
2a:ad:b9:43:57:f7:9b:84:2d:00:ca:d7:d1:93:d7:b0:3c:0c:
3d:f9:32:84:00:6d:e2:42:c4:23:72:b2:bc:34:e2:d7:f3:98:
c9:4a:d4:6f:3c:f4:66:c6:ea:85:8b:63:57:4b:89:35:b8:6d:
48:9e:00:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 02:58:17 2024 by rpki-client on console-fra.rpki-client.org