Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ROZAAeyrAtBwVo7XqFEs6UZ8_-I.roa
File: ROZAAeyrAtBwVo7XqFEs6UZ8_-I.roa (raw, json)
Hash identifier: AlJDPx2P2ggLyEhtMjnKbz4jL0sFpxED8wPZAXRh1+k=
Subject key identifier: 44:E6:40:01:EC:AB:02:D0:70:56:8E:D7:A8:51:2C:E9:46:7C:FF:E2
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018CC795196EB59C9D449A9C0B811EB35F3C
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ROZAAeyrAtBwVo7XqFEs6UZ8_-I.roa
Signing time: Tue 02 Jan 2024 00:31:26 +0000
ROA not before: Tue 02 Jan 2024 00:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34642
IP address blocks: 45.136.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:19:6e:b5:9c:9d:44:9a:9c:0b:81:1e:b3:5f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 00:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44e64001ecab02d070568ed7a8512ce9467cffe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:25:ac:36:35:dd:1d:29:97:f9:a6:c5:2b:
5f:a4:68:2b:4f:de:82:c5:86:56:a5:97:d6:d3:cf:
c9:06:05:a8:8b:ee:cc:7e:c6:d2:b2:7b:e6:4a:7f:
1a:65:65:7f:4c:c8:ca:9a:9f:84:51:0b:77:b0:32:
97:45:a2:c1:d2:e1:01:85:86:1d:cc:38:b4:a2:a2:
b5:a4:de:7b:7b:18:e2:6f:da:64:f2:29:a4:22:56:
5d:06:0d:83:a2:d9:c0:e6:b7:c8:59:d7:44:0f:45:
f0:1c:14:23:5e:d8:89:23:a0:2d:7d:e6:12:11:eb:
25:ba:a6:2a:d7:8b:41:ba:64:eb:46:ab:7c:0e:e5:
d4:eb:35:f4:95:d9:c7:c5:1b:dc:ef:da:a6:c1:72:
56:0c:28:d2:0a:b4:db:bc:21:8e:61:1a:4c:e2:7a:
e9:4c:51:29:da:99:62:71:27:ac:24:f9:bc:7c:4c:
fa:00:1c:7a:fe:de:2a:6e:31:8e:59:0e:bc:c7:8c:
df:f8:49:2e:52:9b:b7:17:2a:79:aa:0d:eb:7d:26:
2f:10:be:f5:14:5d:af:46:43:39:95:5b:a7:1e:4a:
b8:88:1e:ad:16:3b:a2:9b:75:c4:2e:8e:f7:97:1d:
85:6f:b2:d9:b5:02:7e:5e:0b:d0:56:91:17:bf:02:
1d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E6:40:01:EC:AB:02:D0:70:56:8E:D7:A8:51:2C:E9:46:7C:FF:E2
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ROZAAeyrAtBwVo7XqFEs6UZ8_-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.249.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:86:18:5e:3b:fc:ef:4a:85:0c:ae:73:9c:a1:ac:25:49:4b:
ef:b0:7e:c0:79:8e:2e:72:dc:08:3d:df:53:66:ff:b7:41:e0:
ae:81:d7:df:84:79:7b:50:c2:4d:d0:66:1a:a9:ad:2f:c0:c8:
e8:d5:24:86:f9:94:b8:04:5b:74:d5:48:d2:83:07:0d:d7:43:
55:4a:42:36:39:6a:a5:74:fc:00:bb:9e:c3:aa:ff:2b:94:7a:
35:5e:80:89:48:a3:b3:0a:29:cc:70:8e:40:4b:a8:c3:71:73:
d2:8d:96:ae:80:35:eb:4a:01:83:4a:9f:ef:90:34:55:e3:51:
de:9b:ae:30:81:cf:95:a6:39:9f:75:13:ae:4a:b5:18:af:28:
00:56:4e:1b:82:79:2b:cb:58:19:bf:11:33:fe:78:13:85:16:
19:a7:d7:cf:9f:76:11:4a:56:6e:95:a1:09:61:08:18:e6:53:
35:36:02:cc:1d:dd:37:e4:c2:6a:60:95:e2:8e:69:2f:8d:ad:
1a:07:0a:2c:ba:44:31:55:d3:cf:56:5b:96:1b:ac:8e:7c:d2:
a3:b7:12:1c:b7:06:8a:39:83:0b:58:1f:d2:6d:5a:14:32:7b:
0e:92:80:3d:b0:03:b1:b4:e4:0d:3f:69:39:85:25:5a:f8:84:
84:32:6d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 22:32:18 2024 by rpki-client on console-fra.rpki-client.org