Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/crhCspLQ22E19F4xZr2GUhXbmEI.roa
File: crhCspLQ22E19F4xZr2GUhXbmEI.roa (raw, json)
Hash identifier: q+cnvbNjjftYLfnJ/wC+ysM6+9PNDjC+G5tFutIx33U=
Subject key identifier: 72:B8:42:B2:92:D0:DB:61:35:F4:5E:31:66:BD:86:52:15:DB:98:42
Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial: 01928B07275632B833B27F6FD0CFB741E382
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/crhCspLQ22E19F4xZr2GUhXbmEI.roa
Signing time: Mon 14 Oct 2024 12:35:54 +0000
ROA not before: Mon 14 Oct 2024 12:35:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20853
IP address blocks: 45.145.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8b:07:27:56:32:b8:33:b2:7f:6f:d0:cf:b7:41:e3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Validity
Not Before: Oct 14 12:35:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72b842b292d0db6135f45e3166bd865215db9842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:42:a3:4a:d0:9b:aa:2a:cb:34:5f:d2:59:
cd:b9:6c:eb:2b:f3:c3:c6:7f:f2:be:b6:f2:68:3a:
02:d6:d2:84:5c:01:d7:a3:32:d9:8e:e4:a7:8f:90:
73:63:35:6e:f5:f8:46:93:20:89:03:c7:35:9c:57:
ad:2c:3a:c8:39:6b:19:3a:77:8e:70:2f:0d:16:ef:
aa:0d:4c:41:fd:a7:bb:8b:89:18:7f:ef:c7:79:a5:
43:d0:07:cb:af:0b:58:3e:4f:f9:8a:de:8c:70:40:
02:e6:a9:1b:5c:ff:a9:26:72:8f:4c:89:a9:b3:33:
a2:27:1b:a0:a3:52:ef:ee:03:f7:fb:7d:58:f9:3f:
f5:3e:e3:ef:b9:9d:1e:d6:9b:b9:44:bc:84:0c:f5:
35:ec:6d:fa:1c:44:a5:00:34:53:d6:74:7f:86:a1:
52:4d:a4:fe:14:ac:42:81:f3:a8:a7:95:d7:b4:72:
94:4e:7c:d4:b5:4b:d6:83:c3:80:7b:68:65:13:e5:
8d:f2:1f:f6:43:8e:18:7b:97:cd:b8:46:38:a9:d4:
4d:80:8a:0a:68:5e:2d:7e:58:a7:52:0a:21:e2:e9:
84:00:d4:3b:29:a8:17:b5:6d:67:58:3d:e2:c5:93:
3a:63:e9:23:28:ea:80:6c:96:28:b6:cc:c6:80:6d:
36:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B8:42:B2:92:D0:DB:61:35:F4:5E:31:66:BD:86:52:15:DB:98:42
X509v3 Authority Key Identifier:
keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/crhCspLQ22E19F4xZr2GUhXbmEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.217.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:27:b6:9f:4e:6d:5f:ab:10:f8:88:58:8d:7a:27:40:8e:8a:
88:da:c9:a6:71:61:31:d1:b9:2e:78:f9:fb:d0:1a:01:74:af:
cc:c3:b2:38:4e:b1:2e:ff:87:9f:a4:db:2a:ac:67:f8:a0:d8:
ea:b6:e2:e7:46:8e:d8:73:00:97:47:d0:89:a2:b3:91:eb:25:
59:2b:1a:ff:e6:73:fd:ec:c9:7d:af:d6:0f:cc:1b:f9:06:d8:
f6:36:b7:0d:14:7b:9b:d0:86:30:dd:4d:c0:b3:10:07:e7:10:
19:65:4c:1f:b8:1d:bf:40:86:4e:0b:94:a9:bf:a5:f0:c5:12:
f6:17:0c:c4:31:21:a2:7f:56:17:af:c7:1b:a3:cf:73:18:0f:
ef:32:c5:21:54:2b:a4:55:95:ea:c9:14:9f:36:ec:de:8b:f3:
3d:bd:8f:1a:40:2b:c5:89:6b:ec:99:93:e4:67:e0:1c:5a:a6:
d7:b8:3c:6c:fd:3a:53:0b:d9:38:8d:ef:06:ca:43:09:c6:d4:
4b:77:5a:19:d7:fa:cf:6b:5e:21:d8:ef:f7:51:25:fd:a7:52:
2b:92:23:f0:2e:89:58:2b:d0:e0:20:ed:85:69:02:9e:eb:6b:
42:93:f2:d9:13:4d:48:e6:25:d6:03:95:b9:2f:db:a0:40:6e:
f1:9b:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:32:39 2024 by rpki-client on console-fra.rpki-client.org