Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/82PO-bTMjGd8Mf7_lOsKuVviCQI.roa
File: 82PO-bTMjGd8Mf7_lOsKuVviCQI.roa (raw, json)
Hash identifier: R+J+igw+3TYIug3/1zPlBRIiOxPH9LpyAfdWBOjxVYM=
Subject key identifier: F3:63:CE:F9:B4:CC:8C:67:7C:31:FE:FF:94:EB:0A:B9:5B:E2:09:02
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 018CC72748A8E3D8AF4D30BBBB7C19BFC37B
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/82PO-bTMjGd8Mf7_lOsKuVviCQI.roa
Signing time: Mon 01 Jan 2024 22:31:29 +0000
ROA not before: Mon 01 Jan 2024 22:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.56.224.0/21 maxlen: 21
45.56.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:48:a8:e3:d8:af:4d:30:bb:bb:7c:19:bf:c3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f363cef9b4cc8c677c31feff94eb0ab95be20902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:34:ea:4a:91:78:d6:d3:ae:39:c0:c6:49:
28:91:fa:80:3f:b4:6d:c6:2f:89:17:f4:c7:b3:f9:
37:ec:66:50:41:49:23:83:45:b2:93:1d:bf:56:6f:
fd:d4:67:b3:8a:5e:63:56:02:bf:17:ba:5d:f3:bc:
43:3c:96:c1:b1:b4:f5:71:3e:b6:f1:18:12:34:27:
01:97:0a:32:44:ae:22:71:30:17:46:3c:eb:69:f9:
5f:53:00:0f:17:97:3e:98:32:f8:0e:5f:cb:fb:ea:
94:a5:4c:8d:f7:23:b5:ee:e3:f2:1c:0e:2d:8e:73:
2e:13:96:79:83:dc:c6:25:70:04:94:6f:0b:0f:67:
ce:e7:04:2b:7e:8a:43:28:ba:81:2b:e7:89:fa:7a:
31:37:1d:02:85:76:31:bf:b8:3f:f2:c3:52:34:72:
49:5d:4c:58:46:22:06:29:c8:a4:b1:cb:77:1f:8c:
80:59:94:21:2d:47:d6:76:cc:b5:2d:00:4b:a1:d7:
8a:9f:06:85:e6:0d:b0:33:6f:ee:35:91:5f:69:89:
7a:6c:cc:ba:b0:4e:59:d2:73:e1:43:56:c4:b3:62:
a7:8c:4a:dd:64:a4:39:b5:89:d9:b0:2f:c6:7d:90:
5d:99:b7:ac:c2:16:3d:16:a1:a1:f0:3d:d2:43:dd:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:63:CE:F9:B4:CC:8C:67:7C:31:FE:FF:94:EB:0A:B9:5B:E2:09:02
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/82PO-bTMjGd8Mf7_lOsKuVviCQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.56.224.0/21
45.56.236.0/23
Signature Algorithm: sha256WithRSAEncryption
57:17:12:c7:55:e9:46:1a:06:cd:af:51:ff:5b:bc:b2:e5:9e:
fb:85:03:1d:cf:53:c5:d6:f1:f3:63:87:a0:fb:ef:fb:55:0d:
1c:21:fd:3a:37:35:dc:75:6f:a1:67:ab:01:21:f4:81:a9:5a:
47:36:9a:d4:86:94:b9:f5:f7:b7:a9:a8:60:bd:32:a8:8f:2e:
87:2f:33:c9:eb:99:9b:b5:d3:b3:a7:1a:2f:da:e1:bb:4c:6a:
7c:6e:f5:f8:6f:a3:62:e6:c3:cd:b3:be:c6:82:ff:af:7d:2e:
a7:69:f7:08:ef:f4:bc:93:68:ad:47:c4:f9:50:69:22:a6:f5:
a2:37:94:35:e8:f3:b1:ab:e0:05:8c:20:49:ff:97:40:c7:f8:
6b:06:94:68:1d:cc:29:e3:80:d0:f3:fd:3b:35:6a:51:d4:13:
e5:42:c8:ff:87:bf:9b:50:60:ac:9c:23:6f:11:9c:e1:b6:c5:
ca:08:ee:db:ab:06:7f:a9:ad:19:d0:c9:f6:76:4e:1f:39:1f:
bd:d6:26:2c:5a:c1:cb:e6:10:12:a1:16:28:68:3a:08:cb:47:
32:0c:c2:25:50:c0:7e:46:56:8b:c0:fe:64:f6:2b:a5:ae:ef:
a2:d7:1e:14:a9:a1:8e:31:26:97:68:0a:f0:8d:8f:69:dd:90:
5b:b2:69:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 07:46:54 2024 by rpki-client on console-fra.rpki-client.org