Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/45Lq6bVmkhAwJ-5HoglaFlTjC7I.roa
File: 45Lq6bVmkhAwJ-5HoglaFlTjC7I.roa (raw, json)
Hash identifier: a0BKFhyNQy3t1VOY9sei7ff7oLoFQMoAuoPNAC5CgAM=
Subject key identifier: E3:92:EA:E9:B5:66:92:10:30:27:EE:47:A2:09:5A:16:54:E3:0B:B2
Certificate issuer: /CN=162e48329c8be8ef209e9958da66ab0240145e19
Certificate serial: 018CC94ABC21324103A9848D9784DFF7CEDD
Authority key identifier: 16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/45Lq6bVmkhAwJ-5HoglaFlTjC7I.roa
Signing time: Tue 02 Jan 2024 08:29:27 +0000
ROA not before: Tue 02 Jan 2024 08:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60893
IP address blocks: 185.144.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:bc:21:32:41:03:a9:84:8d:97:84:df:f7:ce:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162e48329c8be8ef209e9958da66ab0240145e19
Validity
Not Before: Jan 2 08:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e392eae9b56692103027ee47a2095a1654e30bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:6b:00:e1:32:91:1a:52:ee:4b:b5:2e:25:
c5:fb:73:b9:85:20:96:9b:8a:1f:4a:f8:07:bd:ba:
46:a9:d2:26:97:0f:34:ee:38:17:d4:0b:d1:b7:23:
ec:12:f7:1c:a8:2d:47:0b:0e:2d:9f:13:f4:1b:6e:
7f:78:c5:c7:da:4f:99:dc:31:9f:da:ab:00:07:dc:
7b:91:73:62:ef:cb:3e:a4:1e:a8:f6:96:3b:eb:cd:
e1:44:7d:c5:2d:c4:50:e1:94:bc:3a:5e:b1:7e:b4:
7e:2d:5b:2f:b2:18:db:eb:99:2b:dc:27:30:e4:25:
d1:ae:c5:2c:83:36:28:16:d2:8e:f5:0f:df:25:fc:
b1:47:67:72:d6:37:e9:d7:d0:e8:cf:65:42:57:4a:
98:c9:78:3d:a3:6a:a1:ca:6f:73:fe:80:37:2a:a2:
91:f9:7d:21:fc:53:d1:95:21:1b:93:68:2b:01:16:
09:2a:2c:3c:d5:0d:10:0e:5b:65:69:56:69:86:d0:
8a:cb:66:de:58:eb:44:ee:26:06:5a:a8:d6:bd:f0:
a5:b0:8e:fe:7e:fd:7f:ad:64:6e:41:a8:9d:b0:12:
e6:d8:f6:1f:99:4d:62:fd:d0:4f:e6:d2:54:b2:ad:
d6:0d:2e:18:77:cb:61:8f:e1:0f:79:31:61:b6:55:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:92:EA:E9:B5:66:92:10:30:27:EE:47:A2:09:5A:16:54:E3:0B:B2
X509v3 Authority Key Identifier:
keyid:16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/45Lq6bVmkhAwJ-5HoglaFlTjC7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.20.0/24
Signature Algorithm: sha256WithRSAEncryption
05:4c:6e:b7:1e:87:a5:1a:21:88:b2:1e:66:f1:07:fb:52:fd:
d5:d2:0b:d2:1c:64:c6:d6:d9:c2:04:01:b9:70:c5:67:aa:be:
50:dd:df:d0:09:19:05:ba:35:48:3b:20:64:9d:cb:2c:cf:ad:
e2:0d:e1:cf:b8:05:16:53:20:ae:a1:cb:c7:c6:4b:6a:00:7f:
ce:a1:47:54:61:53:c6:54:d6:28:88:69:09:35:0e:91:b5:16:
61:c2:03:0e:fa:fa:a8:c0:db:76:d6:7c:a7:2f:a1:8e:1f:f5:
10:ed:a3:20:ca:f5:13:c0:b2:eb:6d:03:40:9b:b9:4b:f6:8b:
4e:4e:f7:94:f1:87:55:f4:3d:df:d4:44:e4:17:53:04:6e:98:
d0:f3:11:18:51:34:2e:0c:e5:1c:ff:b0:41:5b:86:d1:45:8f:
3c:bb:66:eb:a9:43:ed:e1:ce:91:a5:8e:02:6e:d1:4d:e1:17:
48:37:17:aa:2f:3a:4d:99:d9:72:d4:07:62:12:6b:d0:36:31:
af:38:f6:60:44:bc:4b:88:0b:9f:2c:39:4b:09:ad:f9:f6:d6:
18:73:0b:91:47:9c:6b:bd:26:33:15:36:2b:26:40:72:09:e6:
9c:48:5e:95:3a:bf:e8:62:16:7e:c2:c3:eb:e5:3e:de:56:ed:
40:8d:a9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:59:37 2024 by rpki-client on console-ams.rpki-client.org