Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/DSmY0digd3_FMEq48nMrPJa48hI.roa
File: DSmY0digd3_FMEq48nMrPJa48hI.roa (raw, json)
Hash identifier: XKLtrnLtXo1sfPOPYRn7KQDcQoQP2vZrpLaDum1d4NE=
Subject key identifier: 0D:29:98:D1:D8:A0:77:7F:C5:30:4A:B8:F2:73:2B:3C:96:B8:F2:12
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 018CC6B78AB576245F7C16CAAF6DDBADCD65
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/DSmY0digd3_FMEq48nMrPJa48hI.roa
Signing time: Mon 01 Jan 2024 20:29:26 +0000
ROA not before: Mon 01 Jan 2024 20:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 45.140.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 07:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:8a:b5:76:24:5f:7c:16:ca:af:6d:db:ad:cd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 20:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d2998d1d8a0777fc5304ab8f2732b3c96b8f212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:27:b6:53:e2:34:37:cc:c3:45:55:85:9c:
17:b7:0f:2a:62:57:0c:d3:f3:75:6a:f0:59:a2:69:
04:7d:87:a4:cf:7e:05:5e:1e:f6:ac:f6:dc:cf:6b:
7d:52:f7:e3:6f:de:a1:55:3d:f3:e3:40:c3:6e:70:
42:25:fe:40:83:a2:1a:fb:91:15:c4:95:af:24:b3:
8f:a8:79:f9:60:7a:76:90:e4:9f:af:41:a3:55:63:
f0:e6:8a:b7:8c:56:cc:2b:b2:3d:a7:b6:50:f4:c9:
dc:3d:f1:67:df:f9:19:35:e7:ed:b9:b5:b9:56:94:
dd:e0:75:6a:a9:b1:60:33:37:96:58:d6:fe:96:36:
88:ac:7d:37:69:3c:71:bb:16:20:13:01:43:b8:76:
fd:8d:75:54:1d:43:7f:f3:01:90:f3:13:c2:6a:a0:
ba:de:c3:f7:2e:20:16:56:58:19:6e:c3:e0:86:0a:
4b:4c:49:5e:a6:a6:c0:3b:db:dc:24:d9:46:db:a6:
a6:56:b1:db:ac:ae:85:86:05:30:4f:9f:6a:84:70:
ca:b5:54:b9:f2:1f:cc:80:42:71:a3:1f:5d:41:d6:
49:e8:5c:d7:d0:ee:a1:4f:2a:9e:9f:c0:01:b6:0d:
6c:ff:65:42:b1:23:4a:b3:af:90:40:dc:13:b8:a8:
84:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:29:98:D1:D8:A0:77:7F:C5:30:4A:B8:F2:73:2B:3C:96:B8:F2:12
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/DSmY0digd3_FMEq48nMrPJa48hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.56.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f4:26:54:8f:d5:33:52:dc:3c:30:a7:0e:a9:53:de:77:72:
50:e7:77:63:9f:69:fb:7c:0e:98:b8:97:95:dc:c0:a5:f8:20:
42:97:95:14:4f:39:60:d8:60:7f:f2:ca:6c:b4:6c:31:51:48:
dc:7c:2d:ff:a1:39:4b:14:a2:f9:b1:4e:c1:f0:e3:e8:81:be:
9d:36:88:0b:36:8b:dc:da:cb:64:fc:89:8e:ed:18:91:0b:22:
ea:69:f1:cf:78:f6:c6:9a:c2:db:b4:6b:d9:b3:70:10:5e:ca:
c2:e5:60:48:46:06:ba:5b:77:dd:ec:bd:d3:bb:ce:5d:a9:4b:
82:dd:87:59:32:ce:4b:46:62:5c:45:4f:d1:4b:02:bf:3c:70:
46:2b:d0:bd:d9:a2:5a:66:9d:df:25:2f:0c:94:8d:3a:14:ab:
64:46:b7:d2:6c:50:dd:e0:2b:30:9a:a0:93:33:30:9c:12:ed:
2b:cd:db:70:29:60:7f:c6:43:52:23:70:05:80:1d:60:15:21:
1c:73:28:e9:d7:83:af:50:f7:42:d1:be:50:88:d8:dc:85:d9:
b1:20:27:44:cf:22:b7:8c:36:ca:29:80:11:4f:6b:e3:7a:d4:
01:ef:f4:0c:d2:55:4e:a9:44:86:3d:a8:ab:70:e4:72:a5:58:
78:f1:f4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 16:23:47 2024 by rpki-client on console-fra.rpki-client.org