Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jPpqstulkzAVjkUTo6ux_8Ld17o.roa
File: jPpqstulkzAVjkUTo6ux_8Ld17o.roa (raw, json)
Hash identifier: 9P9UmOTJRFlC1oI2U3xLcydbx9TCfxve23XTx81XoR8=
Subject key identifier: 8C:FA:6A:B2:DB:A5:93:30:15:8E:45:13:A3:AB:B1:FF:C2:DD:D7:BA
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8027F1272A7D9FBA9ACA5990BBDACD2
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jPpqstulkzAVjkUTo6ux_8Ld17o.roa
Signing time: Tue 02 Jan 2024 02:30:55 +0000
ROA not before: Tue 02 Jan 2024 02:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56382
IP address blocks: 45.131.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:7f:12:72:a7:d9:fb:a9:ac:a5:99:0b:bd:ac:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cfa6ab2dba59330158e4513a3abb1ffc2ddd7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:46:c8:e3:bf:5f:68:95:fd:b4:9a:a6:2b:ca:
8c:ac:39:e6:04:ff:03:12:45:54:fa:9a:7f:35:b3:
05:3d:5c:76:34:74:a5:71:a5:58:cc:5b:8d:04:01:
c7:a8:e1:ee:cb:79:05:f7:dd:9c:cf:69:c2:38:17:
f0:49:c4:41:d3:be:9c:55:9e:f1:fd:46:b6:b8:a4:
8f:89:8b:31:5f:9b:46:17:43:83:7c:24:bd:1b:14:
53:c2:fc:f6:e3:01:a2:d0:6f:43:31:e7:82:04:c7:
f3:a2:8a:c1:13:36:3a:d1:9e:6b:6b:f9:8f:2a:30:
a6:16:91:39:f7:1e:62:f9:be:a4:96:76:70:0f:ff:
2e:80:fe:31:0f:1f:71:61:e6:37:89:d8:9d:f1:c1:
11:4d:b9:b3:a8:06:3f:c0:2e:43:48:f8:a2:48:43:
8c:5c:24:9e:3c:ba:0d:c7:ce:4d:22:dd:7c:1a:bb:
e9:0a:b6:72:5e:7a:d1:0b:8d:31:23:84:e5:8b:a2:
2e:ba:0a:e7:75:b1:78:35:b2:08:8b:7a:ec:2f:eb:
ae:8e:f8:bf:05:ed:62:33:18:4a:40:a7:e7:11:12:
b5:53:bf:aa:48:b6:af:cb:46:40:6f:70:76:6a:0f:
c6:48:2b:68:3b:3f:22:c7:e2:fe:36:8c:eb:94:75:
a3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FA:6A:B2:DB:A5:93:30:15:8E:45:13:A3:AB:B1:FF:C2:DD:D7:BA
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jPpqstulkzAVjkUTo6ux_8Ld17o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.135.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:97:72:6e:08:ed:9c:37:76:50:c6:cb:5c:25:e4:17:c7:df:
7c:cd:b6:d0:1f:35:3d:fa:db:b5:75:20:14:5b:ca:64:a4:f1:
35:2a:91:21:18:ff:65:b4:44:78:85:d5:6b:d5:a8:84:c7:e9:
42:4c:22:01:e4:05:c9:33:39:5f:4d:3f:45:ea:31:14:49:00:
94:46:86:09:11:1e:60:44:8d:9d:49:d4:cb:a8:70:4b:6a:3a:
43:f5:64:cd:d8:0d:39:13:c9:60:d3:47:7c:07:df:d1:e3:68:
88:27:36:4a:bf:5b:a7:51:e4:e6:41:70:a8:69:53:92:cb:20:
69:ec:09:73:6c:f7:de:8d:c0:e8:80:c1:57:c8:64:82:97:64:
bf:30:e1:54:01:b2:34:f6:fb:04:ea:12:ea:c0:c3:57:62:b2:
0b:26:9c:de:f2:26:41:c6:23:e0:aa:53:de:43:ac:b4:f9:89:
71:96:6a:a4:7a:a3:2a:a4:63:f2:2a:89:c9:6a:03:d5:2c:9a:
cc:2b:a1:0a:ac:b2:9a:fb:37:2f:33:11:16:c0:2d:64:90:c3:
0f:08:fe:75:c5:77:f2:18:bf:2c:66:6d:92:5f:c7:89:8e:5e:
7f:da:a4:9a:26:64:f7:85:f9:f8:fa:17:56:d3:c2:d9:e8:87:
98:4b:f0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:49:23 2024 by rpki-client on console-ams.rpki-client.org