Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/1CmlHkj_FexbJISlVzU-k89HfFs.roa
File: 1CmlHkj_FexbJISlVzU-k89HfFs.roa (raw, json)
Hash identifier: I1MHq+EHDNOcumFiIt17GdPgxbr+RemvccMrVI7tDiU=
Subject key identifier: D4:29:A5:1E:48:FF:15:EC:5B:24:84:A5:57:35:3E:93:CF:47:7C:5B
Certificate issuer: /CN=377c264d388333d342372931aa0d192b0fba62c1
Certificate serial: 018CC4932AD8B9B597ABD70EF7FDCA1D8A07
Authority key identifier: 37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/1CmlHkj_FexbJISlVzU-k89HfFs.roa
Signing time: Mon 01 Jan 2024 10:30:28 +0000
ROA not before: Mon 01 Jan 2024 10:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208108
IP address blocks: 45.159.232.0/22 maxlen: 22
45.159.232.0/24 maxlen: 24
45.159.233.0/24 maxlen: 24
45.159.234.0/24 maxlen: 24
45.159.235.0/24 maxlen: 24
2a0f:8780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:2a:d8:b9:b5:97:ab:d7:0e:f7:fd:ca:1d:8a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377c264d388333d342372931aa0d192b0fba62c1
Validity
Not Before: Jan 1 10:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d429a51e48ff15ec5b2484a557353e93cf477c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c8:be:cf:ac:da:76:35:27:e1:b5:11:8b:a8:
a1:71:70:03:96:a8:f7:9f:89:72:24:d5:dd:2e:fc:
70:fd:6e:e8:6e:1b:4d:39:58:6f:1d:92:20:26:ce:
85:7c:22:d3:27:cc:33:73:33:00:b8:af:35:53:67:
a2:6d:b0:76:ce:3c:f7:62:72:ba:7e:8b:66:f4:88:
5f:ee:da:b1:ce:7a:4f:e0:3a:ce:4b:72:20:3d:aa:
89:74:22:96:e7:8d:7f:0c:27:8d:05:64:83:8b:4d:
29:96:ea:d8:b5:69:52:cc:06:df:66:19:4f:22:79:
ed:d8:66:c1:4f:84:8a:04:74:11:a2:f4:57:47:6b:
f9:2c:9e:ba:37:2c:ca:8a:cd:d3:ef:8b:f2:f1:7e:
b6:5e:2c:07:05:05:89:19:5a:36:9a:e6:f1:34:cd:
0e:b0:d9:ec:db:18:86:5a:0e:b9:a5:ad:4b:74:37:
81:1d:42:a4:65:74:9a:e4:3e:08:de:12:0e:a3:12:
ab:09:20:db:cb:23:84:c3:68:2d:21:04:21:e5:50:
24:0e:13:82:cb:be:f5:ff:ca:a7:e1:98:b9:c1:6f:
d4:64:63:a7:7a:e0:bc:19:8f:2e:fc:af:5f:63:a2:
7b:2d:1d:8d:f9:ca:40:7c:2d:17:68:ab:ef:a9:7d:
15:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:29:A5:1E:48:FF:15:EC:5B:24:84:A5:57:35:3E:93:CF:47:7C:5B
X509v3 Authority Key Identifier:
keyid:37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/1CmlHkj_FexbJISlVzU-k89HfFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.232.0/22
IPv6:
2a0f:8780::/29
Signature Algorithm: sha256WithRSAEncryption
44:57:ca:44:ba:e4:bc:c9:72:f9:53:c8:12:f6:09:74:b4:12:
5b:79:22:77:d8:1c:7c:b7:4b:34:e8:f0:c9:a9:54:38:20:60:
ac:a5:bc:c6:d5:91:d3:51:82:ab:ea:2b:51:2b:69:84:c2:54:
da:9f:e5:5b:17:aa:34:d6:ce:20:00:4d:02:9e:0a:09:b8:63:
ee:de:2e:ab:b2:24:a2:93:a4:0f:de:1e:8b:3d:42:b8:84:1b:
48:7b:7f:a1:eb:3e:fd:4e:df:6b:a1:5b:1d:9b:90:67:c6:42:
72:45:46:9d:39:6d:00:84:44:26:b4:48:9f:10:59:82:eb:bf:
81:3c:59:d3:80:bc:26:c5:d1:d9:f0:79:59:3d:2e:fa:89:dc:
f5:93:38:9f:38:79:99:ee:c6:73:6c:10:99:fa:24:28:fb:cf:
e3:60:4d:53:3c:8b:d5:21:58:f5:09:50:da:cf:d5:ed:49:66:
e6:73:49:0b:2d:c2:69:94:20:54:f0:f2:a0:d2:09:f6:e6:11:
6e:62:9f:87:61:b7:e7:41:c5:f3:43:b1:e2:dc:6b:18:2e:ea:
36:a9:3a:2f:33:26:f7:cd:a6:02:b5:81:7f:40:a0:84:81:0f:
d2:9f:58:c1:9c:20:fb:63:7c:4a:67:21:74:e6:5d:4e:40:30:
49:cc:a1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:59:09 2024 by rpki-client on console-fra.rpki-client.org