Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/p1qwCGHC-iI8YHPvNnwFvElitx4.roa
File: p1qwCGHC-iI8YHPvNnwFvElitx4.roa (raw, json)
Hash identifier: Prvl2PX3adfH3KD3mferLZwxRbE+RqxCPR7KyMJnPxk=
Subject key identifier: A7:5A:B0:08:61:C2:FA:22:3C:60:73:EF:36:7C:05:BC:49:62:B7:1E
Certificate issuer: /CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Certificate serial: 018CC803102CD9A2558AA1C7E978AB4ADACE
Authority key identifier: 34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/p1qwCGHC-iI8YHPvNnwFvElitx4.roa
Signing time: Tue 02 Jan 2024 02:31:33 +0000
ROA not before: Tue 02 Jan 2024 02:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205341
IP address blocks: 45.140.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:10:2c:d9:a2:55:8a:a1:c7:e9:78:ab:4a:da:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Validity
Not Before: Jan 2 02:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a75ab00861c2fa223c6073ef367c05bc4962b71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:86:95:43:60:2a:70:b3:74:75:a6:f1:46:
2b:78:16:13:c9:7a:8f:0b:07:23:8d:5a:9a:e3:90:
ec:9f:7a:ab:aa:ef:2f:01:fb:ea:99:ef:df:0c:8a:
85:85:2e:d6:93:6a:d8:8b:a3:67:2f:c8:04:ed:67:
ea:7f:9f:9b:89:f3:7a:2f:ce:ed:34:49:d7:0f:51:
d8:ea:24:c3:67:df:d5:56:ac:e5:4f:76:38:8b:a4:
27:2a:54:9f:08:f0:b1:05:9c:9c:8a:4e:d0:cc:af:
7e:e1:c1:c6:14:bf:cc:b1:be:f1:c7:80:38:3c:8a:
c0:00:99:fc:65:00:07:c1:5f:d4:3e:1d:9b:60:9c:
6d:65:77:60:71:58:c0:52:05:dd:84:b8:6b:17:44:
45:4d:01:3e:a4:3e:e5:b9:b6:30:2e:79:0f:c1:19:
2c:63:2e:fa:cf:9e:27:98:4e:4b:bd:2e:3e:ca:a1:
d0:61:cf:9b:a3:a7:4a:d8:09:c1:f8:08:90:3a:f5:
bf:89:36:0a:45:b1:b0:54:4d:83:4f:9c:75:53:08:
8d:e8:5e:98:e9:92:cb:f3:15:47:0a:41:00:90:54:
e6:89:b7:15:f2:28:ca:be:0e:da:83:eb:22:ca:5e:
a0:9a:28:83:f0:2c:cd:57:3c:ab:d3:3b:8c:fe:bf:
7a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5A:B0:08:61:C2:FA:22:3C:60:73:EF:36:7C:05:BC:49:62:B7:1E
X509v3 Authority Key Identifier:
keyid:34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/p1qwCGHC-iI8YHPvNnwFvElitx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.160.0/22
Signature Algorithm: sha256WithRSAEncryption
97:7e:41:00:51:87:fa:a8:29:31:e5:f1:f6:02:20:ca:a1:29:
52:9c:89:57:ae:5e:c6:6f:1f:3d:93:2d:3d:a7:64:4a:87:09:
93:7a:95:95:d3:9e:f5:8c:b7:74:49:24:7e:11:bb:84:12:f8:
e9:aa:ca:84:1a:51:df:46:c0:27:f6:48:34:16:d9:f5:93:1d:
de:3b:83:97:62:6b:6e:70:e9:e3:9d:39:db:87:16:e1:bb:50:
aa:86:20:69:ff:d1:bd:e2:ba:df:45:d5:1e:e6:e4:b4:01:90:
0d:35:9b:80:21:ce:da:02:a9:b6:dd:00:21:49:e1:b2:11:8e:
8e:ea:57:86:23:3b:0a:b3:ea:98:cb:50:c5:38:32:24:44:d4:
f2:6e:73:e3:7d:60:bb:3a:7e:82:7d:d4:47:b7:04:69:03:49:
24:75:f0:41:bb:77:05:ce:cb:53:5d:8a:5a:56:ae:aa:3d:4d:
ff:71:1e:a0:0d:81:7f:52:26:1d:a5:3d:6e:5a:d0:61:5d:01:
f2:b5:66:33:3c:05:db:c9:05:07:77:66:86:02:da:db:52:a3:
72:54:ad:24:75:05:e3:de:82:bf:cc:51:51:f5:11:a3:8c:a7:
07:e8:17:f2:2c:00:37:88:3c:a2:ee:cc:2f:d8:0f:28:15:22:
af:e5:4e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:19:56 2024 by rpki-client on console-fra.rpki-client.org