Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Jcoh4y6gYB3YE7Y0W-brVFJBSoU.roa
File: Jcoh4y6gYB3YE7Y0W-brVFJBSoU.roa (raw, json)
Hash identifier: fkWLTJqKlG+vf1YdQdMNhDbxH0Oij7cOWSvmHKJ9vj4=
Subject key identifier: 25:CA:21:E3:2E:A0:60:1D:D8:13:B6:34:5B:E6:EB:54:52:41:4A:85
Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial: 018CC8015767C96E3780CF9937D602E1E5C2
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Jcoh4y6gYB3YE7Y0W-brVFJBSoU.roa
Signing time: Tue 02 Jan 2024 02:29:40 +0000
ROA not before: Tue 02 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8796
IP address blocks: 45.81.128.0/24 maxlen: 24
45.135.116.0/23 maxlen: 24
45.91.83.0/24 maxlen: 24
45.91.82.0/24 maxlen: 24
45.91.80.0/24 maxlen: 24
45.91.81.0/24 maxlen: 24
45.155.222.0/23 maxlen: 24
45.140.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:57:67:c9:6e:37:80:cf:99:37:d6:02:e1:e5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Validity
Not Before: Jan 2 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25ca21e32ea0601dd813b6345be6eb5452414a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:43:4b:6b:ec:18:96:23:66:c2:09:84:ff:f5:
05:dc:a5:c0:87:de:c1:67:e0:7d:9b:8e:19:7d:89:
05:9c:4e:79:b0:87:f7:33:e5:25:71:3c:a2:87:97:
44:44:19:66:37:61:04:94:8b:90:2a:08:6a:d8:69:
92:9c:85:91:54:94:a0:61:30:17:ea:c3:82:0b:ff:
7e:10:24:43:f6:06:01:a1:f6:62:97:2d:58:05:5d:
93:0d:a0:61:14:12:9f:4c:03:c6:75:65:b4:4f:49:
89:c6:b7:8e:3f:be:a0:f2:68:ba:53:5e:c6:64:57:
55:26:33:ae:18:87:bf:d4:ef:af:a1:84:c7:83:35:
56:b0:7d:5b:97:69:89:d1:26:19:c4:98:5c:81:4c:
4b:6b:c3:3d:b9:bb:88:3d:9e:1e:d8:a5:43:94:e4:
bd:53:27:98:2d:cb:29:e6:ac:a5:47:ef:09:ff:a5:
40:b0:1d:ac:09:4e:66:d0:fd:57:7b:85:3d:ef:30:
79:aa:d0:0f:18:1b:f4:a9:e9:81:fb:13:b7:33:1f:
60:a7:45:8e:75:db:5e:e9:a9:fb:92:2f:7a:34:ae:
b4:fc:4d:c1:25:3d:c7:18:78:0e:a7:74:bf:d7:a6:
78:c9:38:52:e4:b3:51:63:08:9e:71:c3:bd:96:4e:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CA:21:E3:2E:A0:60:1D:D8:13:B6:34:5B:E6:EB:54:52:41:4A:85
X509v3 Authority Key Identifier:
keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Jcoh4y6gYB3YE7Y0W-brVFJBSoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.128.0/24
45.91.80.0/22
45.135.116.0/23
45.140.88.0/23
45.155.222.0/23
Signature Algorithm: sha256WithRSAEncryption
56:a0:d2:77:90:b6:6c:fe:c3:2c:da:3a:85:ea:25:e2:29:c1:
f0:ed:79:9d:e9:35:d2:2c:01:89:91:79:e7:58:bb:f3:c2:f8:
56:c6:b1:f8:af:c6:d4:f0:93:59:0d:8b:3f:c8:4e:2e:48:e8:
de:b4:93:62:02:64:95:0f:bd:43:1e:30:74:0d:23:86:e1:3a:
ae:18:6a:96:dd:d6:c6:1b:02:cf:51:8b:ac:21:3c:8c:b3:2f:
18:4a:48:34:e4:16:bd:33:d1:c8:bc:21:7b:c6:4a:d0:bc:23:
09:e0:6d:77:4d:61:93:a5:b5:31:b4:ca:e7:fa:6b:bf:9e:c0:
49:54:86:aa:62:36:d0:fb:63:8e:a4:12:8c:95:be:d6:0a:f1:
ce:50:54:6d:f2:45:5d:4a:01:e1:de:bc:eb:11:5f:0c:17:3c:
1c:0c:e5:e4:86:34:1b:cd:ab:44:45:e1:67:a8:d6:12:da:57:
93:db:8e:7c:2f:bb:67:85:9e:bb:74:f6:96:ef:1d:be:eb:d9:
f9:6e:2f:ba:42:9f:d7:eb:3a:44:99:7a:52:66:02:ae:6b:dc:
a4:80:03:6b:37:e1:28:27:34:b1:a6:bc:70:ae:44:ea:24:d2:
16:07:a9:95:a8:e4:05:d2:95:b9:cc:24:62:69:06:03:70:c8:
94:32:da:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:40:48 2024 by rpki-client on console-ams.rpki-client.org