Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/kndkiw9neTv8Dn6VPos4isZLb5Y.roa
File: kndkiw9neTv8Dn6VPos4isZLb5Y.roa (raw, json)
Hash identifier: G4ELmwFyu3dA1+bKmDRBpXSgUXHEvnd5ckivnsMuzjQ=
Subject key identifier: 92:77:64:8B:0F:67:79:3B:FC:0E:7E:95:3E:8B:38:8A:C6:4B:6F:96
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B54AC141BD044ADABEB75FC57B094
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/kndkiw9neTv8Dn6VPos4isZLb5Y.roa
Signing time: Tue 02 Jan 2024 12:34:46 +0000
ROA not before: Tue 02 Jan 2024 12:34:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48024
IP address blocks: 45.136.2.0/23 maxlen: 32
45.136.2.0/24 maxlen: 32
45.136.1.0/24 maxlen: 32
45.136.0.0/23 maxlen: 32
45.136.0.0/24 maxlen: 32
45.136.0.0/22 maxlen: 32
45.136.3.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:54:ac:14:1b:d0:44:ad:ab:eb:75:fc:57:b0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9277648b0f67793bfc0e7e953e8b388ac64b6f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e1:ca:f1:9b:1f:55:08:86:8f:db:22:de:6f:
59:68:a4:23:b5:e6:bd:61:0a:ab:8a:ab:99:31:1d:
cc:5a:10:54:93:76:ac:e1:5d:5d:e8:4a:0e:b2:ca:
4a:36:14:f5:fd:d7:89:23:da:ff:25:dd:c2:ba:c3:
97:65:14:d5:de:94:5b:4f:19:32:76:c4:47:21:ed:
84:4b:25:02:f3:9d:55:2a:d3:65:11:14:34:3f:34:
15:f0:71:e3:45:90:cd:94:c1:96:85:62:14:26:d6:
eb:14:df:d6:18:31:4a:b1:fe:ca:67:ea:ff:d9:a9:
73:53:ec:7c:09:cf:e0:f0:cd:57:86:57:95:a0:03:
2b:fb:55:ea:46:17:09:e5:f0:7b:03:68:32:e5:59:
9f:8f:01:86:56:75:f6:1b:81:4e:9d:b9:f9:43:cd:
cc:38:41:f5:0f:f9:aa:aa:84:2e:14:4b:f4:df:6c:
09:e9:18:12:1f:34:25:4a:b3:36:9a:04:0e:ef:6e:
ec:ae:c6:e4:f1:54:f5:47:40:a8:86:1b:44:eb:89:
75:31:a9:17:78:cd:21:62:48:7b:55:94:37:99:92:
c1:0e:b8:35:e7:54:a6:ca:2e:a8:18:c1:f2:05:fa:
ba:a2:5d:3b:fc:be:65:b0:d7:3b:09:99:90:6a:21:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:77:64:8B:0F:67:79:3B:FC:0E:7E:95:3E:8B:38:8A:C6:4B:6F:96
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/kndkiw9neTv8Dn6VPos4isZLb5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:36:12:f7:4c:04:37:d0:01:21:7b:2d:8a:4b:83:a6:98:06:
b8:b4:4a:b5:5f:2a:20:50:54:76:9a:28:38:26:01:7a:1c:4b:
99:64:f2:c2:f7:d6:f2:66:f7:bb:ac:bc:38:54:71:2b:78:b4:
23:11:fe:63:81:2b:f2:a6:b6:97:04:1f:09:33:5e:e7:6a:2a:
46:a4:81:ea:02:67:ca:1a:2d:b7:d4:db:4d:f5:9d:9b:a0:da:
ca:2a:e5:4c:d8:95:f6:ba:33:81:12:30:67:a2:94:79:d8:80:
e9:5b:c4:0e:85:68:45:d4:a7:92:4e:dc:a5:bf:8c:4a:79:08:
ff:b2:46:8e:fc:07:df:f9:f7:a6:7a:df:71:df:5e:5e:c3:a9:
73:30:02:79:df:d4:19:99:d0:21:d1:4e:8b:f2:34:80:bc:55:
6d:27:ea:57:43:33:b1:7a:8c:b1:27:50:f1:dc:ee:5c:35:7e:
7d:d5:2c:5a:62:6c:fa:a9:86:4b:c7:e2:37:6b:f8:eb:d5:c2:
42:57:e0:bc:ef:bf:a8:3c:d2:75:a7:f0:19:54:82:63:53:9f:
e8:49:b1:6d:79:05:bd:00:ad:e6:8e:39:21:b7:da:c4:83:37:
53:ba:87:3c:b8:ab:42:2f:7b:cf:3d:66:e0:ff:05:2b:2a:2e:
99:f4:66:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 23:05:21 2024 by rpki-client on console-ams.rpki-client.org