Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/Cl3B7bcUl_zIkyT5cu787IaCCgo.roa
File: Cl3B7bcUl_zIkyT5cu787IaCCgo.roa (raw, json)
Hash identifier: o+Gr64WzU329/FDIQLe9ZX1Rh5jTjVre+DhLC+X3XIE=
Subject key identifier: 0A:5D:C1:ED:B7:14:97:FC:C8:93:24:F9:72:EE:FC:EC:86:82:0A:0A
Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Certificate serial: 018CC94AD22AEA09AA812980541D806CC317
Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/Cl3B7bcUl_zIkyT5cu787IaCCgo.roa
Signing time: Tue 02 Jan 2024 08:29:33 +0000
ROA not before: Tue 02 Jan 2024 08:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202468
IP address blocks: 45.82.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:d2:2a:ea:09:aa:81:29:80:54:1d:80:6c:c3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Validity
Not Before: Jan 2 08:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a5dc1edb71497fcc89324f972eefcec86820a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6d:bb:d9:20:a4:53:be:a9:b4:5c:27:9f:7b:
8f:b9:d3:50:7c:42:79:1a:96:4d:20:58:f3:d5:b2:
84:96:bc:8a:8e:ef:c2:b0:8f:6d:e2:45:81:ae:cd:
0b:38:aa:34:4b:f4:21:51:60:5e:6d:a9:2e:4e:15:
64:2e:c3:3d:c8:77:e3:f6:38:0f:1f:a8:7d:9a:6c:
c1:26:1b:ca:40:59:02:93:b9:c1:a0:57:a3:d2:39:
c3:a0:4f:6a:2e:72:23:1c:28:96:e1:65:62:69:40:
ad:d4:b0:76:89:6a:7e:31:bd:b6:91:59:ee:bb:86:
80:9f:1c:b1:c5:50:ae:18:20:c6:8c:e8:84:40:8d:
4a:ef:77:2d:15:00:b1:e4:cc:c5:47:98:3a:ce:43:
1d:01:f8:12:40:de:3a:ec:46:37:4b:bd:a0:49:5f:
76:1c:f6:4a:18:ce:dd:a4:45:4c:60:d0:7e:05:a4:
fa:ae:df:eb:db:2d:16:24:6b:cc:39:cd:54:01:56:
96:8b:d0:3f:a3:ce:52:19:2c:a7:a3:46:f6:e6:00:
a6:3e:36:1e:f3:39:8a:33:6a:fc:fe:f1:1e:e8:f3:
03:4c:61:e3:03:34:06:d7:72:bd:1a:15:c6:86:64:
2c:d0:8b:15:3d:28:e0:5b:b7:04:94:aa:2d:27:e7:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5D:C1:ED:B7:14:97:FC:C8:93:24:F9:72:EE:FC:EC:86:82:0A:0A
X509v3 Authority Key Identifier:
keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/Cl3B7bcUl_zIkyT5cu787IaCCgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.136.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:f0:80:52:e9:08:c0:e0:15:87:7f:4b:3e:96:b9:7b:63:3d:
9f:97:a1:26:98:6c:9c:34:e3:23:9d:bf:ed:cc:d2:95:17:7a:
08:f1:68:6b:c0:09:43:ee:2c:0c:57:ec:dd:01:f4:a5:1d:b3:
f4:ba:9f:0f:e8:b0:b1:fb:ea:b6:6d:36:48:30:2b:c5:ed:2f:
43:81:de:97:cf:1c:44:b7:59:ac:aa:3e:9e:7b:b6:99:f0:40:
93:f5:70:72:85:a1:60:c1:f9:a9:45:27:76:ee:11:9b:f2:b6:
37:28:72:45:1d:27:de:8d:17:73:90:aa:a5:a6:b2:56:87:48:
65:61:87:4d:10:5a:0c:92:6a:97:6a:90:52:8f:e1:b7:b7:67:
59:78:c0:a2:53:aa:f6:bc:09:d0:42:9c:f1:a2:0f:5f:3b:81:
25:f7:fa:0d:e5:2f:01:a2:a7:02:d5:cc:fd:f6:b7:70:04:8b:
53:f9:62:69:dd:01:64:ea:b3:aa:e8:51:12:57:22:a3:6a:ab:
fc:b3:b8:eb:ff:9d:03:52:d4:9f:88:47:c2:4e:be:06:0a:27:
6e:d9:7d:28:da:0a:13:95:c6:84:38:7b:bd:c7:f1:d1:a9:62:
b9:cb:4e:c9:c4:b2:1e:02:f0:89:9c:d7:d4:a3:15:9a:b7:2c:
df:fd:17:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:01:52 2024 by rpki-client on console-ams.rpki-client.org