Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/3wRP9eWzk1HmZJaiFZpAxl78yi8.roa
File: 3wRP9eWzk1HmZJaiFZpAxl78yi8.roa (raw, json)
Hash identifier: j9zkhKNPUUho+lRSdfMXFBzT9dNRvv8uBYgUdgMYuo4=
Subject key identifier: DF:04:4F:F5:E5:B3:93:51:E6:64:96:A2:15:9A:40:C6:5E:FC:CA:2F
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 018F81862A66A01BDC7FD67340B3FBCB6A9E
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/3wRP9eWzk1HmZJaiFZpAxl78yi8.roa
Signing time: Thu 16 May 2024 13:10:04 +0000
ROA not before: Thu 16 May 2024 13:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208275
IP address blocks: 45.149.152.0/22 maxlen: 22
45.149.152.0/24 maxlen: 24
45.149.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:86:2a:66:a0:1b:dc:7f:d6:73:40:b3:fb:cb:6a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: May 16 13:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df044ff5e5b39351e66496a2159a40c65efcca2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:2b:45:59:a4:d6:cb:c9:3b:73:0d:a0:1b:
b2:75:56:96:fd:b7:31:99:96:67:bc:6e:9f:62:56:
c0:f4:c2:71:6f:4b:d5:92:b7:d4:02:e7:de:96:14:
4b:9e:96:9b:df:e6:0a:6f:c4:52:5f:d9:db:82:51:
39:e1:09:65:81:bd:19:75:d2:ca:bf:61:3e:1b:b2:
03:50:75:dd:31:cf:1e:e7:ec:65:9b:66:57:da:f8:
0a:c8:72:2a:cc:3a:fd:dc:09:a5:9a:a6:16:6c:a6:
15:27:a1:43:e3:4c:13:25:e8:12:28:61:fe:f5:8d:
39:e1:19:9e:e0:96:b1:e8:b0:c4:90:66:f2:b9:dc:
ba:eb:80:6d:d3:d6:51:00:a8:72:c6:28:09:91:c8:
e7:88:8e:27:60:3d:36:28:5c:e7:f4:57:d3:4e:12:
28:9e:96:09:6f:1d:f1:cc:57:c7:bd:6f:89:29:d4:
3d:a2:88:08:b3:a6:f5:c4:b0:84:5f:5a:97:d3:4f:
47:46:04:4b:b2:c8:5f:60:96:d4:f0:eb:c5:21:48:
37:1b:a6:65:9e:d6:9a:25:a2:6f:7d:45:dd:f7:77:
92:a2:14:83:c3:08:62:3f:14:3a:e8:c9:5b:89:8a:
21:8c:48:cc:40:02:31:86:0a:d4:05:72:e2:58:cd:
8d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:04:4F:F5:E5:B3:93:51:E6:64:96:A2:15:9A:40:C6:5E:FC:CA:2F
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/3wRP9eWzk1HmZJaiFZpAxl78yi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:05:06:b3:36:96:50:11:3f:8a:37:48:43:42:0c:b6:29:1e:
13:5b:e3:c1:f6:61:32:62:00:1a:bb:3a:02:7f:73:45:9a:d3:
64:39:47:8e:66:84:25:9a:54:55:ce:e1:a2:0e:ba:b0:92:c5:
13:2a:57:0e:5d:9a:9c:1d:4b:95:8a:aa:db:71:62:2d:05:e9:
cb:a8:43:ef:8c:79:10:d8:33:61:a9:74:bd:24:7e:bc:ed:c6:
e9:7a:57:49:f2:93:67:b8:e3:5c:41:b1:d1:a9:70:1f:94:1f:
26:71:38:a5:be:36:6a:57:5e:a8:bc:dc:45:5f:64:24:c4:33:
d7:2f:fd:e7:c7:06:6f:91:e7:19:f0:8a:47:a9:15:43:2c:17:
8a:13:07:4f:b3:3a:ef:27:0a:41:97:16:2f:a4:fd:01:9e:bc:
ae:3e:58:a9:8c:89:1d:38:17:dd:85:4a:3c:ff:da:aa:a0:b1:
62:da:7f:0e:95:61:c5:b3:c9:eb:ad:59:f6:8d:a8:cf:7b:75:
3d:52:37:20:b8:2c:02:6e:43:b0:f1:f9:51:af:1d:da:9b:9c:
5b:ed:d1:2a:03:69:88:34:77:34:a1:e8:05:94:8e:ad:ae:03:
fe:df:aa:53:f6:bf:97:5f:e2:4b:df:67:d1:dd:a4:67:5b:20:
d2:ad:7e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 13:12:53 2024 by rpki-client on console-ams.rpki-client.org