Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/lTc37Gj2EVRSVBgqaQ8LcmroXeY.roa
File: lTc37Gj2EVRSVBgqaQ8LcmroXeY.roa (raw, json)
Hash identifier: lk31sUDgGMIEmr3noXpq4KlsRg+gbUXcjtDDIOPZY/M=
Subject key identifier: 95:37:37:EC:68:F6:11:54:52:54:18:2A:69:0F:0B:72:6A:E8:5D:E6
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 018CC8709B5BD6F6F455E7C214CEBB83901D
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/lTc37Gj2EVRSVBgqaQ8LcmroXeY.roa
Signing time: Tue 02 Jan 2024 04:31:12 +0000
ROA not before: Tue 02 Jan 2024 04:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210538
IP address blocks: 45.155.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:9b:5b:d6:f6:f4:55:e7:c2:14:ce:bb:83:90:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Jan 2 04:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=953737ec68f611545254182a690f0b726ae85de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:9f:a1:60:04:2c:62:38:dc:df:50:5c:14:
e2:71:02:c1:24:f1:f0:98:69:bc:e6:57:ef:86:08:
63:bf:a8:6c:a7:7b:e6:ac:7d:70:b7:cb:09:02:13:
8e:6b:8b:a1:53:79:7f:39:e3:22:c8:6a:c4:b4:12:
bb:35:12:79:e7:ec:1a:86:ae:c5:b6:f3:dc:ae:fe:
98:df:59:91:21:12:20:65:4f:c7:ee:e1:d9:42:c4:
75:b9:63:90:ab:4b:01:12:20:1a:df:48:43:02:9a:
ea:36:94:49:e8:c4:88:05:c8:ea:01:d1:66:3d:7b:
06:4a:9d:9e:14:c2:45:10:bf:a5:82:a7:0c:7a:70:
2b:bc:58:ff:9b:57:ce:f4:04:11:d3:9e:f5:85:6d:
32:2e:a0:29:00:cf:c8:80:c2:52:0c:74:15:66:4f:
4c:52:d0:da:10:cd:27:0c:48:69:62:3b:97:98:a6:
d8:d6:c0:ba:ad:90:47:79:98:20:ad:0b:b9:65:47:
b0:17:d7:83:04:85:c6:54:57:ef:33:aa:5f:3b:08:
ad:c8:17:b5:00:6e:61:11:94:27:40:4d:c6:6f:5f:
25:a9:22:61:6c:d5:63:d0:14:4b:63:5e:84:d4:88:
75:e2:89:13:ad:2d:03:f1:00:58:d4:5c:70:68:28:
ba:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:37:37:EC:68:F6:11:54:52:54:18:2A:69:0F:0B:72:6A:E8:5D:E6
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/lTc37Gj2EVRSVBgqaQ8LcmroXeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.124.0/24
Signature Algorithm: sha256WithRSAEncryption
65:ec:30:2d:27:6e:32:a3:c3:b1:c9:4e:1a:b0:96:a3:8e:7b:
eb:b4:9a:58:6e:4d:d2:52:36:c5:9d:ba:e2:78:bd:e6:ff:ef:
3a:0e:31:a1:76:f2:17:be:ab:c5:f5:af:d0:31:91:a6:d4:33:
76:e3:cd:e4:d4:2d:fa:f9:21:5e:1a:50:5e:78:15:e9:1b:e9:
d8:48:d4:b0:e3:9b:50:70:b7:df:cb:ed:60:c6:1f:b2:2c:5d:
c5:e8:bc:e3:cd:1a:a0:f2:4d:98:5b:43:fa:a5:a6:9a:29:66:
b4:e1:ef:3b:fb:62:9f:3d:fe:9c:87:43:bb:e1:20:ec:bb:db:
53:04:47:94:f7:17:35:5e:a4:96:c0:a5:28:af:c8:29:da:5c:
54:dd:c5:44:33:47:3c:80:83:04:65:25:b9:ea:c4:46:81:7d:
ad:c0:24:00:df:b0:37:b3:e7:dd:c0:d8:9e:1f:06:6c:fa:80:
86:f0:ea:2b:6b:5b:58:b6:8e:db:96:64:9e:b0:4d:79:40:6f:
83:9e:9d:26:04:34:67:30:67:0b:2c:9a:35:5c:dd:90:09:20:
b4:70:05:4c:c5:86:39:25:f8:15:e3:6c:78:af:39:46:91:f2:
40:1b:e5:84:03:d5:88:d4:a8:8b:d0:ed:76:d4:a1:04:13:d9:
dd:97:a7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 04:04:15 2024 by rpki-client on console-ams.rpki-client.org