Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/A9vHb6jZFFaE_VyJ4ZZFSmkUclQ.roa
File: A9vHb6jZFFaE_VyJ4ZZFSmkUclQ.roa (raw, json)
Hash identifier: Uzwz0+lWVp7spGSNo+L4l8eVCpG7SBLtH3mSq8BEzE8=
Subject key identifier: 03:DB:C7:6F:A8:D9:14:56:84:FD:5C:89:E1:96:45:4A:69:14:72:54
Certificate issuer: /CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
Certificate serial: 018CC64AC1526EF8F5A0E9E1005FC753EF0E
Authority key identifier: A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/A9vHb6jZFFaE_VyJ4ZZFSmkUclQ.roa
Signing time: Mon 01 Jan 2024 18:30:36 +0000
ROA not before: Mon 01 Jan 2024 18:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208961
IP address blocks: 45.12.85.0/24 maxlen: 24
45.12.84.0/24 maxlen: 24
45.12.86.0/24 maxlen: 24
45.12.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:c1:52:6e:f8:f5:a0:e9:e1:00:5f:c7:53:ef:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
Validity
Not Before: Jan 1 18:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03dbc76fa8d9145684fd5c89e196454a69147254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:e1:a2:f9:d6:ab:59:9a:e7:78:a3:a6:91:
2f:d3:4a:3e:24:43:38:bc:99:19:c4:86:9e:18:c3:
e9:81:59:db:94:29:3f:e4:9f:d9:3a:ce:6a:26:b5:
76:08:d8:c8:e6:f4:33:07:6b:66:a8:a7:08:47:9d:
d0:46:fb:b9:a1:2f:8d:c8:0b:60:b7:e0:98:0a:c9:
e4:28:b5:64:2c:55:3f:9d:f8:2b:4d:4f:14:82:d8:
b5:1f:0f:21:77:c9:15:fe:0c:f2:ff:b3:9a:69:15:
75:46:48:b3:9d:42:61:7a:aa:41:1c:72:2b:84:b0:
dc:4c:d9:42:89:8a:f8:25:cb:f7:64:14:88:22:7c:
9e:95:d2:a0:b2:ca:f0:d2:86:67:56:f4:3c:a8:6a:
e8:c4:47:06:ec:1c:47:d1:51:f4:d2:9b:1f:8c:30:
d7:e5:a5:8a:12:e0:7e:be:c3:d6:9b:5c:18:9b:ae:
67:a4:1d:35:8d:de:27:77:03:19:c3:56:ab:6c:3a:
97:ab:af:ca:d0:ed:0b:5d:e4:d0:83:65:d9:77:52:
9f:d4:92:9d:e7:b2:6d:ca:5b:79:cb:08:22:19:6b:
9b:9a:a9:29:c7:aa:e9:b3:78:81:58:86:b8:29:9b:
c2:19:7a:d1:5e:b0:72:9c:88:b7:a0:26:95:11:b2:
e2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DB:C7:6F:A8:D9:14:56:84:FD:5C:89:E1:96:45:4A:69:14:72:54
X509v3 Authority Key Identifier:
keyid:A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/A9vHb6jZFFaE_VyJ4ZZFSmkUclQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.84.0/22
Signature Algorithm: sha256WithRSAEncryption
35:62:8d:c4:24:fe:cb:36:10:0c:6c:bf:0f:70:48:ff:a7:9e:
40:bf:c1:53:8c:b5:1b:bb:5a:ba:f8:e0:7a:00:38:e3:e9:c7:
01:3f:1e:dd:3c:78:1a:65:b1:b4:73:24:ad:13:7c:7f:bc:4c:
2a:4e:bd:ae:6f:3e:e1:be:76:c4:8b:ee:58:de:72:cf:35:b2:
18:6f:f3:c2:05:ce:cd:f9:76:4f:e7:bf:3f:a6:df:ed:1f:b7:
11:11:cb:03:38:79:45:a4:02:f9:50:45:3c:44:12:0f:75:a8:
8c:a0:b2:13:c8:89:60:93:24:e4:ab:77:0c:e7:b3:a4:62:e2:
3e:87:50:38:7d:c9:1b:23:d6:1d:0d:a1:d7:93:6a:e1:9a:f4:
54:58:74:66:d6:cb:11:b8:b4:05:63:c2:88:df:3c:12:7f:5c:
bf:a3:90:1f:4e:a6:7f:46:cb:34:3f:af:36:ae:31:ac:1a:7e:
1c:f6:84:1d:e8:b0:3a:ec:b3:b7:a2:35:b6:20:26:bb:e9:3e:
1c:d3:33:57:fa:97:67:b0:c5:fd:2c:6d:74:86:81:7d:bb:39:
0c:14:6e:ee:62:81:51:9f:22:a9:12:c1:c0:94:bd:56:8d:46:
bd:cc:ca:29:16:ba:15:af:6d:4d:cd:a3:2f:4a:df:3c:91:2f:
b3:2d:e2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 11:55:34 2024 by rpki-client on console-ams.rpki-client.org