Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/7OBhVCWGPb4C8DuwHr_IKYVl85U.roa
File: 7OBhVCWGPb4C8DuwHr_IKYVl85U.roa (raw, json)
Hash identifier: 1WmncQZLHYUxN4dr5t90mmtAep9gtOGQgsFy43AbUBU=
Subject key identifier: EC:E0:61:54:25:86:3D:BE:02:F0:3B:B0:1E:BF:C8:29:85:65:F3:95
Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial: 018CC86F769CEE48A2029F6694FEA422C4BE
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/7OBhVCWGPb4C8DuwHr_IKYVl85U.roa
Signing time: Tue 02 Jan 2024 04:29:57 +0000
ROA not before: Tue 02 Jan 2024 04:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213281
IP address blocks: 45.133.188.0/22 maxlen: 24
2a0e:77c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:76:9c:ee:48:a2:02:9f:66:94:fe:a4:22:c4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Validity
Not Before: Jan 2 04:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ece0615425863dbe02f03bb01ebfc8298565f395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a9:1f:f8:c5:12:cb:89:58:5f:eb:b2:cf:34:
53:30:3b:50:1c:3e:eb:de:a3:8a:c2:51:ae:8e:8b:
4f:c9:0e:fa:fb:07:24:6c:5e:68:6c:3a:d0:0d:99:
ff:cc:d7:c6:7d:48:4d:40:27:4a:48:57:f5:13:f3:
df:ff:0e:e8:52:39:e7:b1:ea:5a:ed:6e:d2:4b:e3:
42:03:f5:0c:45:47:42:2a:ad:7d:8a:b8:61:eb:ac:
69:02:83:1c:d5:8e:15:7c:e5:34:bb:b8:8b:2a:87:
0c:66:f0:d4:72:d4:6d:ff:b9:39:24:94:35:30:0b:
26:23:94:f3:ad:41:93:50:4f:37:da:54:a8:c5:06:
c9:f6:93:7e:87:db:35:c8:0b:83:6e:54:a7:a7:95:
4d:63:48:05:57:26:4e:ce:2c:67:c3:65:d5:d5:1c:
52:17:b4:72:b4:8d:01:08:92:91:73:49:a7:1f:ef:
61:75:9d:3f:d8:61:ba:2f:bb:ed:a4:06:80:ba:95:
59:fc:6a:fa:9c:84:98:f8:ac:1f:b8:f9:61:50:3c:
a3:0c:4c:51:ca:eb:f2:77:f8:16:04:9f:91:58:ca:
59:0a:4d:2d:d4:c9:5b:2f:c0:86:59:96:b3:4b:7f:
49:22:39:10:a3:b0:71:b4:6a:10:8a:84:62:2c:3c:
89:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E0:61:54:25:86:3D:BE:02:F0:3B:B0:1E:BF:C8:29:85:65:F3:95
X509v3 Authority Key Identifier:
keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/7OBhVCWGPb4C8DuwHr_IKYVl85U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.188.0/22
IPv6:
2a0e:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
4d:cb:21:d6:98:6c:f3:30:f2:0a:81:29:db:eb:43:d6:9e:8f:
af:f5:a3:d1:a3:6d:01:c6:88:d2:ae:be:dd:ac:5c:9c:e0:72:
c9:ee:d6:5e:a5:22:62:63:1c:61:cd:25:c3:7f:57:13:d5:a7:
89:c2:4b:b8:fd:e1:83:18:ca:c2:36:c5:60:89:3d:f8:c9:b4:
21:6c:0a:2b:60:b2:a8:bc:63:cc:ba:66:59:24:9c:f4:f1:9a:
ae:31:8b:15:c1:60:81:ac:ae:5a:4e:26:e8:fb:4a:a2:92:80:
77:95:f7:f1:10:82:37:a3:17:48:38:73:49:85:91:72:4d:9a:
27:a6:dd:5e:fb:ef:de:e3:ab:39:b6:1b:12:03:ce:e7:ba:58:
be:4d:28:68:bf:d7:27:bd:e2:f4:8f:db:8b:10:a1:97:9d:24:
eb:c1:d1:1f:42:44:62:88:a4:13:fc:c0:39:b3:3e:62:34:32:
06:0e:1d:75:00:ba:9e:8f:0a:a3:7e:b2:e5:13:2b:49:6e:14:
63:83:53:27:00:0b:ad:44:12:44:90:37:e6:6f:62:70:22:ac:
96:dd:9a:b2:40:d6:3d:aa:39:e1:69:68:00:67:6d:b9:56:75:
bb:d6:19:2c:ac:e5:c9:c1:51:4a:69:8b:9a:7c:b3:f2:0d:c8:
ff:29:bf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:15 2024 by rpki-client on console-ams.rpki-client.org