Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/x5X5B_i56F3wk3jyWkDA_NrwJfI.roa
File: x5X5B_i56F3wk3jyWkDA_NrwJfI.roa (raw, json)
Hash identifier: BGZMi2euOu9n10MVJwrEpFnHK6Y+kgzvSakPzuc3Dlo=
Subject key identifier: C7:95:F9:07:F8:B9:E8:5D:F0:93:78:F2:5A:40:C0:FC:DA:F0:25:F2
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B4C9303DA5EEDB9DAFEC3F15023D9
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/x5X5B_i56F3wk3jyWkDA_NrwJfI.roa
Signing time: Tue 02 Jan 2024 12:34:44 +0000
ROA not before: Tue 02 Jan 2024 12:34:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18464
IP address blocks: 45.136.0.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:4c:93:03:da:5e:ed:b9:da:fe:c3:f1:50:23:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c795f907f8b9e85df09378f25a40c0fcdaf025f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d4:2c:0e:04:f1:48:15:57:07:0e:3f:76:bd:
65:d8:d3:b7:ef:50:b5:31:4f:16:cc:d9:cd:b7:fa:
8c:b3:86:c3:82:62:5c:e8:d3:82:72:51:3a:b6:8b:
03:a0:05:1c:9e:94:52:cd:cf:26:7e:30:15:c7:9f:
c1:4a:52:80:7f:8f:0c:d8:66:ae:a3:5a:46:80:51:
8c:5d:22:2a:0d:4f:0a:58:0a:77:d0:b5:0d:94:90:
9a:cf:13:4f:4a:7c:8a:13:75:6f:75:e1:bd:1d:c9:
09:51:a4:55:dc:0f:d3:7e:e1:37:64:d9:94:da:cd:
1f:5f:26:56:45:2c:d7:64:ec:c0:91:47:b3:7d:dc:
17:32:09:f2:a2:31:e8:13:d7:d0:fd:3d:d9:af:62:
dd:fe:ff:80:03:54:d5:fd:af:35:c3:fc:7f:b3:57:
7f:41:40:71:fb:b6:cc:36:22:74:1e:5a:00:e5:67:
6d:b9:60:04:d3:d2:09:95:84:8d:dc:67:33:0e:37:
72:ba:d9:a9:c8:73:0b:fb:fc:48:1b:06:e7:48:20:
6b:76:ff:96:99:5f:b8:d5:e7:70:4c:b7:46:83:e8:
61:cd:27:ab:fe:5a:8d:fe:bf:df:4b:e3:a8:6e:94:
fc:8c:1b:99:f3:34:8e:cc:40:b1:04:7f:18:dc:f7:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:95:F9:07:F8:B9:E8:5D:F0:93:78:F2:5A:40:C0:FC:DA:F0:25:F2
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/x5X5B_i56F3wk3jyWkDA_NrwJfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:ba:75:9a:f4:08:40:ae:6f:f6:38:83:1d:d3:fa:fa:ae:ff:
dc:27:ea:c5:53:7f:cb:f2:f9:bd:8e:23:0f:34:e2:a4:5a:ec:
96:96:a5:b7:eb:e2:91:9c:67:02:4c:5b:8e:22:3f:1a:b5:47:
84:0c:bd:10:fa:45:cb:28:40:de:e9:72:88:b8:42:c6:77:85:
bf:74:72:15:29:15:85:ba:a6:99:df:a5:5f:11:f1:c7:d2:30:
3e:36:be:bd:28:58:58:30:47:9b:f8:8d:1a:76:7f:b3:90:d3:
75:1d:54:8e:73:fc:8f:18:6a:9a:1b:84:6d:0a:d5:fe:d2:c1:
55:d8:2a:38:be:e6:49:8e:dd:88:2f:ac:d4:42:ff:e3:dc:d7:
aa:f6:50:ef:2d:f2:f8:f0:0b:7e:32:0b:1e:8e:e6:60:db:9d:
22:cc:18:73:53:56:82:09:c5:78:9c:6e:b5:83:04:19:ca:13:
3d:f5:6d:45:e3:a0:02:e2:f3:75:82:51:83:12:70:2c:e4:c7:
13:86:4b:ca:bd:07:ac:c8:28:66:b9:67:32:da:ef:b6:8f:d7:
02:ea:f4:1c:66:b1:b3:36:86:f9:03:2e:27:20:8f:92:1e:3e:
be:5f:f2:3f:85:fa:23:88:77:74:af:c6:de:7b:98:05:fa:33:
93:97:eb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:10:49 2024 by rpki-client on console-ams.rpki-client.org