Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/_cOnO3fBJY2ylwv9NSvma31nUSE.roa
File: _cOnO3fBJY2ylwv9NSvma31nUSE.roa (raw, json)
Hash identifier: NtRmIqV7/yQvD+GgCMy9/JloKpihqYeUu6l4nkZb9p8=
Subject key identifier: FD:C3:A7:3B:77:C1:25:8D:B2:97:0B:FD:35:2B:E6:6B:7D:67:51:21
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B65B3A3E42104499145BD44D3D506
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/_cOnO3fBJY2ylwv9NSvma31nUSE.roa
Signing time: Tue 02 Jan 2024 12:34:50 +0000
ROA not before: Tue 02 Jan 2024 12:34:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209859
IP address blocks: 45.10.0.0/24 maxlen: 32
195.85.10.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:65:b3:a3:e4:21:04:49:91:45:bd:44:d3:d5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdc3a73b77c1258db2970bfd352be66b7d675121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:85:3d:bf:aa:04:ac:4c:97:7e:c6:82:94:06:
e0:f1:f5:0a:d2:96:16:30:1f:09:89:29:39:72:da:
4e:2c:9f:45:14:18:9e:98:e6:1c:d5:e3:33:ba:fe:
c9:d9:c7:87:fc:c6:63:bb:d3:e8:21:e9:f9:87:c9:
0d:e0:f7:f4:47:89:c6:b8:1d:e4:38:6b:fa:83:7e:
dc:f9:a4:a5:bd:14:f5:67:49:9a:28:18:e9:5b:08:
ea:9f:ed:21:7e:bf:b3:19:32:66:21:c7:26:93:15:
cd:8c:28:97:04:49:6f:f6:97:55:12:e9:dc:b4:e3:
3d:77:aa:bf:da:17:f5:00:ef:f0:0f:35:cf:7d:41:
27:a0:76:80:8c:78:d9:b4:cf:c5:8e:50:8a:64:e6:
e2:05:8d:70:bf:1e:ee:29:ac:05:f4:18:2d:23:dc:
82:bd:6b:d6:dc:39:f2:1c:66:13:ba:c7:c1:5e:6c:
c8:3f:52:a8:d9:e2:a5:2d:85:4d:17:a1:05:fd:a7:
64:62:77:64:48:d1:35:3b:36:6c:16:8a:0b:68:96:
f2:52:6c:66:4e:8a:00:7e:c4:71:ed:0d:9f:3a:2a:
8e:8e:ee:fb:65:78:f7:46:5b:bb:0c:fe:04:1f:cd:
44:c3:a7:8d:f2:57:77:f8:ee:e5:7c:bc:fc:aa:57:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C3:A7:3B:77:C1:25:8D:B2:97:0B:FD:35:2B:E6:6B:7D:67:51:21
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/_cOnO3fBJY2ylwv9NSvma31nUSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.0.0/24
195.85.10.0/23
Signature Algorithm: sha256WithRSAEncryption
56:c5:ee:09:f5:e8:c5:c2:70:b6:a9:02:ee:4c:d5:c2:76:7c:
66:a0:f3:78:a4:7f:00:b2:1c:05:27:c7:30:00:da:40:2b:27:
15:8c:dc:30:be:6b:70:40:99:f8:3f:df:53:7f:c7:f0:2c:ca:
3a:df:31:01:b5:5f:fd:16:38:26:74:94:2b:fa:42:86:87:0f:
b9:8d:3d:46:0a:2c:f0:1b:c4:d2:f7:e7:2d:66:2f:09:69:1b:
a8:d7:e6:ff:51:44:c9:a2:8c:46:29:cb:b4:dc:ae:8b:86:5f:
ae:54:c6:0a:9a:fb:30:89:9d:09:c1:be:f7:07:b1:74:7b:24:
50:70:22:79:3c:94:e0:0e:49:34:24:8c:7e:5f:c2:3b:44:90:
25:b2:22:6d:29:0e:c7:e1:ab:ca:c5:60:e0:d4:21:34:a9:88:
1d:92:80:05:c3:e2:ec:7b:16:c5:bb:24:a3:10:45:1d:e6:a5:
6a:4e:d1:49:52:9d:c0:de:c8:20:ba:ef:e8:93:93:e5:ee:37:
e9:f8:c9:e1:cb:8e:a1:31:44:ca:b2:d8:00:83:83:5c:74:7e:
fa:c2:10:d6:82:77:bd:b5:15:4d:c5:b9:c7:09:52:f7:6d:ef:
64:41:4c:4f:c6:68:12:fc:9f:f5:42:09:35:df:f4:45:4b:3d:
7e:97:02:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 23:05:21 2024 by rpki-client on console-ams.rpki-client.org