Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/anam-sCcIOu8l4DgyOMtjsf-y8c.roa
File: anam-sCcIOu8l4DgyOMtjsf-y8c.roa (raw, json)
Hash identifier: Blzmt2Yjd9ZwLVfLF6XtCsjsc7CXocSl/HuFwqblu7w=
Subject key identifier: 6A:76:A6:FA:C0:9C:20:EB:BC:97:80:E0:C8:E3:2D:8E:C7:FE:CB:C7
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 018CCA2A8E17BBFF476B90A2D527C32E5C13
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/anam-sCcIOu8l4DgyOMtjsf-y8c.roa
Signing time: Tue 02 Jan 2024 12:33:55 +0000
ROA not before: Tue 02 Jan 2024 12:33:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6461
IP address blocks: 83.245.12.0/24 maxlen: 24
83.245.53.0/24 maxlen: 24
83.245.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:8e:17:bb:ff:47:6b:90:a2:d5:27:c3:2e:5c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 2 12:33:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a76a6fac09c20ebbc9780e0c8e32d8ec7fecbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:7c:bf:fe:9e:34:c4:58:9d:8b:6e:35:44:
11:ce:09:b6:8b:0b:39:21:a5:ee:e9:6c:b4:16:d2:
ea:37:a7:5e:5c:40:9b:e3:7c:0c:68:56:d3:03:c7:
21:a3:8b:c3:b6:13:10:f4:a8:e3:e1:21:9c:b5:1e:
46:18:74:06:51:e1:57:8c:8e:be:1b:34:c8:23:3b:
96:1c:14:a1:e8:7f:70:9f:5a:c3:84:89:1e:51:34:
b0:0f:19:7b:36:64:31:2f:aa:2f:37:66:cc:a0:26:
4c:69:b6:88:0e:ff:66:53:a8:8c:34:b4:b2:8e:c2:
1c:86:07:5d:9c:50:65:2d:39:66:f1:2c:a7:73:75:
f6:8b:05:ea:83:8d:d9:a6:48:5c:2d:70:c8:c3:28:
c6:37:fb:f2:25:39:b6:be:c8:85:57:3e:1f:2f:c0:
0d:e5:d9:8f:cc:1e:6f:9d:1f:29:cb:c7:6a:5f:2c:
5f:46:e8:8a:71:77:5c:4d:65:21:2c:43:19:da:e0:
9e:87:6b:4b:78:5f:cd:62:57:75:11:b0:bd:c2:44:
3d:ed:53:34:74:1d:a4:ca:a9:7d:b5:1b:a4:e6:c8:
14:68:ee:7e:16:39:78:94:4c:f0:42:d6:e4:4d:ea:
a1:7a:06:c2:b1:e0:1b:df:af:2f:a1:14:63:42:d4:
77:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:76:A6:FA:C0:9C:20:EB:BC:97:80:E0:C8:E3:2D:8E:C7:FE:CB:C7
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/anam-sCcIOu8l4DgyOMtjsf-y8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.12.0/24
83.245.53.0/24
83.245.57.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a3:f0:23:15:0d:89:b3:05:1d:ff:ce:a7:7d:88:5d:04:31:
9a:72:41:c6:77:90:63:65:28:34:9b:c7:36:98:f3:0b:87:09:
22:a1:66:d6:bf:1b:cf:bc:69:9e:e3:32:66:a2:26:01:8f:f2:
3e:bc:6a:71:7e:11:c5:b1:71:85:5f:2a:4c:f8:38:9b:f2:bc:
6c:30:41:d8:b2:9b:88:05:08:57:d7:17:37:ec:39:a5:1b:14:
50:1f:3d:aa:56:7b:80:23:b2:0e:9a:97:91:6c:21:0b:bb:6a:
14:ef:ae:a3:0c:da:f1:80:4a:4d:f6:a6:66:9f:8b:e0:39:1f:
a6:8a:3a:a9:45:ef:04:cb:0a:95:16:24:d5:b1:c8:f6:21:6d:
ee:74:11:c6:6a:5a:56:4a:bb:01:20:85:36:27:ac:2a:3d:ba:
1b:57:62:12:52:3e:5a:b5:84:53:ad:67:4d:74:6a:76:68:fc:
82:79:31:00:18:6c:a6:cb:21:05:06:f2:0e:93:d8:09:84:cc:
25:18:2c:ac:4b:b8:71:bc:dc:8d:39:5b:0e:ed:b9:a7:ac:20:
9b:61:30:2e:8f:93:4e:27:b9:4d:a6:0c:e6:e5:fe:d2:c1:7d:
2e:89:61:c0:57:d1:ef:e7:48:99:88:d2:f5:08:66:93:cc:f1:
58:0d:5b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:29:01 2024 by rpki-client on console-ams.rpki-client.org