Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/mXVorXrzSitENCASOyLe3z78wkU.roa
File: mXVorXrzSitENCASOyLe3z78wkU.roa (raw, json)
Hash identifier: g49ZcM5/zs7sN9wvqlJ+V52rlXcsAQmIitybG9dVbBk=
Subject key identifier: 99:75:68:AD:7A:F3:4A:2B:44:34:20:12:3B:22:DE:DF:3E:FC:C2:45
Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial: 018CC5DD27950F047306D265E58FBADACDC5
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/mXVorXrzSitENCASOyLe3z78wkU.roa
Signing time: Mon 01 Jan 2024 16:30:54 +0000
ROA not before: Mon 01 Jan 2024 16:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 45.144.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:27:95:0f:04:73:06:d2:65:e5:8f:ba:da:cd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Validity
Not Before: Jan 1 16:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=997568ad7af34a2b443420123b22dedf3efcc245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:73:7c:fc:2d:52:9b:d1:6f:cb:48:c0:0f:02:
83:03:21:38:de:c3:5e:30:2a:13:ef:20:97:0d:f2:
4c:25:56:23:6a:cf:26:fa:4b:6c:47:17:de:fd:2c:
57:19:3b:fa:a6:0a:4e:a7:ec:61:83:5a:71:3c:f5:
a1:c7:52:03:5c:a9:1b:c7:cb:9b:38:8b:19:6a:f2:
51:9d:11:b2:a0:0d:de:c6:5a:8a:e3:d6:b3:3d:32:
10:3f:d3:a2:6f:bf:72:46:40:5c:36:96:97:fc:15:
86:f4:2a:94:dd:10:05:33:a2:af:37:f0:5c:66:f0:
fd:c9:51:3a:4e:c8:5b:94:52:55:34:7e:99:ed:04:
47:9c:44:02:63:9a:37:aa:0c:c4:04:08:c4:d2:da:
3f:2d:a0:49:d4:36:30:b8:23:26:97:ce:ff:23:68:
af:45:24:81:57:b1:c0:1e:f6:18:30:20:3e:93:61:
80:de:10:42:9e:46:55:b1:26:0f:68:4a:23:1e:99:
d5:a5:fe:c3:4d:f5:b7:dd:c9:4d:54:c2:83:ea:63:
fd:c6:a3:bb:68:f3:ff:39:5b:04:67:6f:25:fb:7b:
a4:58:b0:f0:d3:6f:0d:1d:ae:17:2e:7f:8c:34:23:
00:54:da:4d:6b:23:27:e4:7f:6f:f4:c5:87:46:82:
3b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:75:68:AD:7A:F3:4A:2B:44:34:20:12:3B:22:DE:DF:3E:FC:C2:45
X509v3 Authority Key Identifier:
keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/mXVorXrzSitENCASOyLe3z78wkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.196.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ee:09:e0:e9:72:77:02:52:b4:b4:5f:24:6c:f0:b9:8e:c2:
8e:f3:0c:7c:fc:9e:ec:06:ce:25:35:05:e9:8d:02:64:27:fe:
ab:0a:af:85:e9:35:fd:c0:e1:04:01:6b:14:da:e4:ee:50:a0:
76:d4:00:a6:7b:ef:fb:48:79:15:ff:b8:df:4e:07:aa:34:1d:
30:47:61:7f:91:e6:c8:47:c1:11:86:af:b4:36:c2:18:35:7b:
72:c6:bb:d6:2e:1b:ce:5d:de:94:c8:a7:fb:d5:6f:6b:1c:1f:
32:b2:5a:10:9e:0c:d1:c2:8d:d5:4a:57:75:fd:58:cf:55:8c:
29:d8:5e:09:12:a3:33:ee:46:c6:5a:54:0e:b9:89:16:2d:5c:
4f:8c:2b:e0:3e:c0:b0:26:23:69:30:1c:48:26:d8:80:74:59:
ab:df:c3:69:33:96:2f:ea:6f:e6:40:ff:a8:51:39:27:57:53:
60:36:56:e3:22:33:0c:8c:63:4c:5c:b0:71:e1:59:97:83:4a:
2f:e4:08:38:6e:16:0e:60:a2:38:8b:f7:7f:56:1f:7b:95:9e:
86:33:42:66:19:1e:43:49:00:f7:8e:50:54:1f:16:95:8b:e0:
97:e8:3b:12:95:af:a9:11:a0:67:b6:25:86:f7:ae:b9:63:a9:
6f:60:7c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 19:40:20 2024 by rpki-client on console-fra.rpki-client.org