Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/M3UxAsjTIkX6VpgrXd8rNvj3e9U.roa
File: M3UxAsjTIkX6VpgrXd8rNvj3e9U.roa (raw, json)
Hash identifier: USJ+BrykpDpw+cKpeDRGQHwUR4yL/cBewU5SejQrqZM=
Subject key identifier: 33:75:31:02:C8:D3:22:45:FA:56:98:2B:5D:DF:2B:36:F8:F7:7B:D5
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01917552235030EA9C171A080BB28CE15BB1
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/M3UxAsjTIkX6VpgrXd8rNvj3e9U.roa
Signing time: Wed 21 Aug 2024 14:23:22 +0000
ROA not before: Wed 21 Aug 2024 14:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197077
IP address blocks: 45.13.202.0/23 maxlen: 23
217.198.192.0/20 maxlen: 24
2a04:a450::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:75:52:23:50:30:ea:9c:17:1a:08:0b:b2:8c:e1:5b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Aug 21 14:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33753102c8d32245fa56982b5ddf2b36f8f77bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:ac:b6:fc:3e:81:99:5c:32:17:a3:90:59:
40:bd:9f:45:e5:84:11:8a:04:f9:df:bd:e6:30:44:
58:19:f9:54:10:52:2e:32:9a:29:f9:4f:d1:5f:47:
f4:8e:64:21:c2:65:b3:74:66:00:06:95:8a:09:37:
0f:ba:e2:11:48:ca:d8:0a:89:19:90:1d:18:e5:1a:
d6:23:2e:c6:fc:a6:f3:fa:c3:56:88:cc:12:d9:12:
a1:60:5d:33:5e:08:01:b1:56:bb:8d:95:2a:61:ea:
1e:f4:bf:3a:5e:47:d8:51:5c:c7:42:e3:e9:51:33:
0a:b9:f8:8e:e0:a7:79:12:23:00:a3:9b:17:ac:0f:
9f:5b:4c:7e:2a:4a:8c:1c:c3:87:c6:16:c2:ec:c4:
8b:d2:f9:3a:1a:29:95:f7:ed:19:be:8c:e8:67:a9:
f0:82:f0:b2:e0:a6:1a:4d:27:f8:35:8b:f4:ba:cc:
8c:0c:03:b9:1d:f8:2b:23:38:7c:d6:a0:03:24:1e:
0f:92:ef:24:9c:5d:e8:79:22:af:cc:8c:67:5f:13:
d5:6a:fc:d3:51:56:61:b4:89:28:b1:7b:0f:12:c5:
3b:ef:f0:d0:4a:65:9e:31:38:ab:da:c0:3e:b4:e3:
30:09:e3:de:a2:3d:d7:fa:f2:9f:25:04:0c:2f:8a:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:75:31:02:C8:D3:22:45:FA:56:98:2B:5D:DF:2B:36:F8:F7:7B:D5
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/M3UxAsjTIkX6VpgrXd8rNvj3e9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.202.0/23
217.198.192.0/20
IPv6:
2a04:a450::/31
Signature Algorithm: sha256WithRSAEncryption
b9:84:8d:f1:84:d5:72:8a:3d:6f:b3:78:6d:1d:84:67:98:d6:
5e:36:5b:e8:9a:ed:e2:07:91:cf:84:a4:63:5f:b4:39:64:ca:
59:a7:2f:b7:ce:f4:a6:9a:f0:30:01:2b:f1:ec:a1:38:b9:6c:
7f:02:af:82:7d:89:a2:66:25:4e:28:2a:df:6b:a4:d8:b8:37:
7a:20:bb:2f:b8:ba:88:82:60:0d:1f:14:ab:6d:57:f1:1e:2d:
ab:6c:9f:c9:34:cc:1e:fc:a0:e9:7d:38:08:09:35:e1:9c:87:
9e:1d:15:b1:4a:b1:b2:30:11:8a:44:23:20:b3:7b:19:4f:af:
81:d1:bb:ba:60:96:d6:7e:6b:4d:96:18:cb:f8:5d:a0:a6:65:
11:cb:94:b5:62:e2:33:74:17:7d:22:e8:fd:46:39:c7:84:0a:
37:a1:54:ae:b7:c3:f1:cf:2d:9c:79:eb:a4:31:0c:bd:95:f9:
4c:39:7c:65:41:f6:87:89:5b:bd:93:55:96:24:9c:69:24:0a:
0b:91:09:ab:a1:9a:e6:6c:a1:59:e3:a8:f3:14:8d:1b:65:d2:
64:cf:3f:8d:3f:71:cc:a5:eb:43:ac:98:f2:c9:d3:13:39:b2:
28:44:2a:ce:bd:cd:a0:4d:42:c4:f3:88:3b:cc:d3:cf:b6:40:
b0:7b:9a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:26:08 2024 by rpki-client on console-ams.rpki-client.org