Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/drAV5aQnsXQbAQWnecdmDfOIbP4.roa
File: drAV5aQnsXQbAQWnecdmDfOIbP4.roa (raw, json)
Hash identifier: /2eySzWxLCdHBNVa7650p2dDEMWxpR2foird5N7V3z0=
Subject key identifier: 76:B0:15:E5:A4:27:B1:74:1B:01:05:A7:79:C7:66:0D:F3:88:6C:FE
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B5069381B366FF61D533F22576C81
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/drAV5aQnsXQbAQWnecdmDfOIbP4.roa
Signing time: Tue 02 Jan 2024 12:34:45 +0000
ROA not before: Tue 02 Jan 2024 12:34:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35487
IP address blocks: 45.136.0.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:50:69:38:1b:36:6f:f6:1d:53:3f:22:57:6c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76b015e5a427b1741b0105a779c7660df3886cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:f8:83:2a:11:44:ff:f4:5e:8f:0f:ef:e5:
23:1d:ac:34:67:63:95:45:50:a0:14:b9:9f:6f:8d:
1d:85:17:9b:07:87:34:73:94:d7:4f:1a:0a:67:59:
2b:4d:19:89:d7:e1:28:5c:3d:92:a5:c3:b6:ca:40:
27:77:3f:71:83:2b:75:22:f9:39:64:da:8f:82:ed:
8e:08:ee:00:a4:d4:32:15:b2:95:d7:af:33:0a:72:
aa:09:be:2c:0c:1a:67:ca:af:47:3a:3b:31:8b:29:
da:bc:c5:95:ef:b7:3b:d2:f2:cf:3e:92:19:57:34:
e1:92:3d:a3:ba:2f:32:54:dd:5b:f6:af:e3:5a:63:
33:59:64:28:72:69:56:1e:ef:69:8c:97:bb:7c:b1:
61:47:04:d1:5b:1b:d4:af:62:45:73:e0:c3:54:cb:
ef:19:29:9d:7c:ea:8d:af:c7:b6:61:10:1b:21:66:
6b:b4:61:7b:82:78:eb:56:2d:a3:3e:58:c2:5a:35:
3a:5b:4a:d6:4e:93:78:51:bb:06:1e:2f:cd:8c:7a:
32:fb:44:9d:37:cf:4b:2b:41:8f:19:e5:f2:9e:28:
8e:43:63:ce:b6:62:05:56:0a:fa:ea:36:ec:9a:1c:
01:0e:3a:7c:25:5f:2d:16:d9:cd:19:09:44:f5:7d:
6a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B0:15:E5:A4:27:B1:74:1B:01:05:A7:79:C7:66:0D:F3:88:6C:FE
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/drAV5aQnsXQbAQWnecdmDfOIbP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/24
Signature Algorithm: sha256WithRSAEncryption
52:68:0e:73:a2:05:99:ba:b4:29:e9:da:9a:73:79:c7:a5:db:
79:d3:32:c0:a5:03:e0:b8:6b:30:e6:ea:ca:01:aa:85:3f:af:
5b:de:64:82:0b:41:ca:ba:a8:14:1c:2e:0a:c6:2d:f8:df:f2:
c7:1e:39:f6:82:8a:1c:ed:ab:f7:e0:43:1d:df:b0:09:ba:54:
70:57:91:b6:70:88:6e:81:d5:77:ee:46:cc:98:51:29:88:c7:
1d:88:d6:af:a8:f0:70:9a:ac:70:3d:92:27:2b:98:03:51:ff:
39:d9:4e:e7:13:14:d7:73:4c:23:b2:12:a8:9a:f5:c0:59:6e:
47:af:4d:c6:e2:8d:73:0c:1e:a6:bd:00:b2:bb:89:a4:be:53:
15:27:9b:85:7a:bd:f0:27:99:f5:ad:f4:4f:4f:93:57:30:73:
3c:ee:99:82:b6:cb:71:47:0c:95:37:59:05:cb:cc:96:21:e5:
b7:bb:e8:05:7d:a5:47:d4:f7:72:47:d0:87:43:13:c5:53:23:
3c:24:26:17:5c:86:13:d1:17:34:86:5a:3e:ff:be:0a:0a:cc:
8d:c5:68:44:ec:a8:64:16:61:f3:fe:27:ba:90:11:1c:d5:23:
65:40:8e:06:eb:44:6a:37:6c:07:e2:24:2c:f5:c2:a1:da:11:
8f:13:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:43:59 2024 by rpki-client on console-ams.rpki-client.org