Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/EDSW_v1H-WmLXuIC_sz1uOqHEcQ.roa
File: EDSW_v1H-WmLXuIC_sz1uOqHEcQ.roa (raw, json)
Hash identifier: eiKFv/1BtqkmISEnXMeYfE7OCLcnqQmJvs1QtzSTsgQ=
Subject key identifier: 10:34:96:FE:FD:47:F9:69:8B:5E:E2:02:FE:CC:F5:B8:EA:87:11:C4
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 018CCA2A8D3BB8A7FF38EA5075097617282E
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/EDSW_v1H-WmLXuIC_sz1uOqHEcQ.roa
Signing time: Tue 02 Jan 2024 12:33:55 +0000
ROA not before: Tue 02 Jan 2024 12:33:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208603
IP address blocks: 45.90.252.0/22 maxlen: 24
45.90.254.0/24 maxlen: 24
45.90.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:8d:3b:b8:a7:ff:38:ea:50:75:09:76:17:28:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Jan 2 12:33:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=103496fefd47f9698b5ee202feccf5b8ea8711c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8d:0f:2f:c4:05:46:a7:29:2a:2c:47:29:f7:
59:5d:53:0c:15:12:63:47:4b:73:72:51:25:92:03:
fa:b0:8d:d3:d7:b9:a9:5e:3b:d3:62:66:28:86:81:
0a:e4:56:61:16:0a:9f:90:72:a9:7a:6a:91:69:4a:
5e:41:39:f1:04:e2:98:2a:0d:00:28:03:d6:6c:6e:
95:70:9b:69:c8:51:28:d5:e3:f0:50:0d:d0:29:50:
b2:4c:53:a5:c4:4d:85:04:35:89:f1:d0:6d:33:54:
7c:01:d3:7e:7f:ef:69:1c:03:8c:a7:dc:af:e9:a4:
1c:01:65:40:7c:70:01:fa:67:cd:40:54:d8:43:22:
cc:ae:54:63:2e:63:07:96:b6:e2:3d:eb:78:17:7d:
21:2f:4c:d3:5d:76:67:11:10:6d:cb:a3:9c:92:a9:
fc:b9:88:61:3b:7d:0b:a5:5d:6f:f6:aa:2f:c5:45:
77:e2:b2:d9:f8:23:75:a3:18:dd:25:53:be:65:c1:
d6:b2:6d:b8:fb:03:0a:e5:d9:fd:ce:61:50:1c:4d:
f5:59:5b:3b:30:71:1c:de:9b:a3:7f:78:dd:20:64:
6c:97:67:02:e8:81:21:ca:9e:ef:bb:86:b2:2e:55:
21:c6:80:19:d7:90:8d:55:96:89:e7:49:ad:f7:e0:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:34:96:FE:FD:47:F9:69:8B:5E:E2:02:FE:CC:F5:B8:EA:87:11:C4
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/EDSW_v1H-WmLXuIC_sz1uOqHEcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:f1:7d:2f:37:99:d9:98:77:38:2e:89:70:f1:1e:d5:08:52:
bd:ed:1f:e2:b4:8e:49:90:4c:64:31:0c:42:e5:50:b6:23:eb:
53:24:4c:fa:80:90:0c:c8:c1:97:08:3e:d1:bf:97:58:21:f0:
18:ce:a5:82:da:e6:8e:42:8a:fe:6d:1e:de:1d:9b:c8:ec:31:
11:02:bb:0d:f8:af:bf:a0:16:55:22:65:cd:a9:67:02:33:7b:
14:2c:23:0b:59:a8:b0:51:c9:d2:cd:cf:39:b9:59:6f:30:df:
f6:4b:08:f9:79:d4:cd:92:d5:57:7b:a2:b6:11:a7:c1:9f:2f:
a1:4f:86:3d:de:2e:bc:39:33:84:d2:ba:9f:fa:aa:fc:cf:8a:
fe:5f:3d:1a:e0:45:9d:2d:b4:16:8c:1d:26:d0:f6:d1:31:de:
ae:01:1b:48:a4:13:48:14:23:5c:ef:40:c7:ce:06:36:b1:e0:
3e:8a:58:46:4b:24:7d:b0:7f:ef:6e:b7:75:d1:03:40:81:2e:
7c:55:7a:f5:76:81:67:7c:ce:a6:7b:2f:8e:44:19:f4:9f:e7:
8a:a5:d2:c3:96:9c:82:57:04:01:5c:ce:8f:b5:70:7b:db:c7:
68:c8:ad:14:a4:7c:00:09:d3:93:5d:bf:1a:5c:9c:d4:90:bf:
c8:7b:78:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:11:48 2024 by rpki-client on console-fra.rpki-client.org