Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/aOweO0p-oIXhAksX2z8xIBPhiQ4.roa
File: aOweO0p-oIXhAksX2z8xIBPhiQ4.roa (raw, json)
Hash identifier: cGtDiKAz+dOMJ1GCLSA/vW1gQ9r/LVUBAl7YVIplnoY=
Subject key identifier: 68:EC:1E:3B:4A:7E:A0:85:E1:02:4B:17:DB:3F:31:20:13:E1:89:0E
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 018CC56DED4B5DC568519755DB407A1BAD39
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/aOweO0p-oIXhAksX2z8xIBPhiQ4.roa
Signing time: Mon 01 Jan 2024 14:29:24 +0000
ROA not before: Mon 01 Jan 2024 14:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49870
IP address blocks: 45.95.145.0/24 maxlen: 24
45.95.144.0/23 maxlen: 23
45.95.146.0/24 maxlen: 24
45.95.147.0/24 maxlen: 24
45.80.36.0/23 maxlen: 23
2a0e:3980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ed:4b:5d:c5:68:51:97:55:db:40:7a:1b:ad:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Jan 1 14:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68ec1e3b4a7ea085e1024b17db3f312013e1890e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f8:5d:3b:bf:7b:f0:26:eb:81:59:e7:d9:d0:
93:63:fb:84:5d:37:24:22:c9:af:31:f1:38:d1:17:
c9:ce:c7:57:a6:89:52:fa:73:36:aa:6c:bb:4a:46:
66:74:67:9b:74:d4:e9:bb:d0:b6:02:3b:ff:17:9d:
98:24:13:e4:c8:fa:53:61:71:b9:5e:6f:04:66:59:
4a:cb:50:79:90:c2:32:66:32:2f:64:cb:25:93:bf:
6d:52:d1:63:65:37:58:03:03:a4:df:21:ba:55:89:
ab:2a:18:77:81:02:b0:c5:dc:c3:51:ae:4a:84:c9:
ce:28:63:15:0e:3f:85:1a:f9:79:97:03:42:e3:b4:
fd:57:01:54:ae:b6:73:e6:e2:33:df:85:34:28:af:
25:25:5a:0c:3e:81:ef:3d:96:e0:d0:8e:14:cc:21:
57:25:fe:bd:ba:d4:e1:1f:ae:71:d8:ed:7a:c6:56:
a5:43:d7:ea:09:de:96:ae:68:73:6f:08:d7:49:bd:
5f:86:7f:33:bb:e0:d5:42:dc:14:b0:e1:50:3c:6d:
23:5c:81:e8:39:8c:39:46:08:34:54:f4:89:89:bc:
d4:fd:32:76:40:21:f8:88:8c:21:b4:30:2f:79:7f:
ad:e8:ac:c3:53:08:20:c3:fa:c3:bf:ea:9c:e6:14:
5b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EC:1E:3B:4A:7E:A0:85:E1:02:4B:17:DB:3F:31:20:13:E1:89:0E
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/aOweO0p-oIXhAksX2z8xIBPhiQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.36.0/23
45.95.144.0/22
IPv6:
2a0e:3980::/29
Signature Algorithm: sha256WithRSAEncryption
07:1f:46:07:2d:da:cf:94:27:15:1d:5e:80:7f:a7:17:6a:a1:
45:59:06:67:c7:59:24:07:9a:89:4b:04:77:39:39:09:23:5b:
e3:65:5b:7f:a7:60:bc:ca:2d:3a:ec:fd:23:f5:99:60:8c:e8:
5b:cc:b2:5b:4b:f9:82:99:2c:58:8e:af:f4:a8:49:7e:8f:f8:
d7:0d:7a:b7:31:eb:24:ed:53:9d:da:ad:6e:15:5c:a0:cb:10:
5a:e0:4e:6b:cb:18:48:93:c1:c0:ff:37:a5:a2:fb:65:2d:4d:
a1:be:ec:8d:b4:b2:76:2c:1c:7c:3c:31:f9:0e:c1:1d:84:9d:
84:0a:a7:4a:e7:f0:1d:5d:24:57:d6:11:ed:de:a5:ff:f6:13:
3f:d3:74:b4:57:8c:aa:7f:dd:bb:89:14:e3:3e:a0:e9:a4:b5:
b2:0e:82:f3:cf:b4:93:79:c0:b6:8d:79:82:00:a9:1d:b5:6a:
d8:94:02:27:6f:33:a9:29:f3:08:79:fb:9a:82:25:6a:06:a9:
dc:a9:73:42:cf:d9:e5:e6:01:15:0c:cf:a9:ae:df:99:51:79:
98:44:20:6c:35:16:cc:48:a1:47:1d:df:a2:b6:0f:b8:1c:6e:
86:18:df:53:f7:71:b9:c8:3e:75:56:29:f2:ad:5c:24:e4:8e:
6b:f9:bf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:52:23 2024 by rpki-client on console-ams.rpki-client.org