Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/aQ7kWw-zQ8wa8-Oi5QtiXI85emc.roa
File: aQ7kWw-zQ8wa8-Oi5QtiXI85emc.roa (raw, json)
Hash identifier: fsuVQdrsvsdVTo68zIzKws5KfqRf0ASYdBaFusQquBM=
Subject key identifier: 69:0E:E4:5B:0F:B3:43:CC:1A:F3:E3:A2:E5:0B:62:5C:8F:39:7A:67
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 018CC80134AB8B842163FB5526BA6FAA7E87
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/aQ7kWw-zQ8wa8-Oi5QtiXI85emc.roa
Signing time: Tue 02 Jan 2024 02:29:31 +0000
ROA not before: Tue 02 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34549
IP address blocks: 45.83.124.0/22 maxlen: 24
45.83.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:34:ab:8b:84:21:63:fb:55:26:ba:6f:aa:7e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jan 2 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=690ee45b0fb343cc1af3e3a2e50b625c8f397a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:27:ae:98:43:f4:17:9c:46:fa:52:cb:42:a1:
7a:33:2f:d0:92:e4:b6:f0:c4:87:cb:14:82:1a:c4:
26:d3:0c:58:0a:a4:92:bd:27:b2:c9:a5:4e:af:b2:
d9:7d:91:a1:6f:08:78:4c:ad:55:56:f0:53:48:0f:
d4:04:51:85:4b:6f:c6:d7:b5:0a:9b:04:cb:fc:7e:
8a:86:5f:c9:be:ee:d0:61:88:00:12:56:77:c1:9c:
d3:7c:01:c6:7b:c2:05:ad:f2:b7:4c:ea:48:c5:47:
19:06:7e:77:98:a3:f5:a5:5a:78:f1:fa:82:e7:fb:
ff:fa:1f:c4:30:0f:ed:9d:a4:7f:e3:bc:68:46:dc:
f2:2b:c9:8c:7a:9b:55:87:ac:0c:5a:84:d6:fc:44:
e2:a9:2c:7c:27:3e:31:47:56:16:df:b7:2d:e9:79:
bc:39:a4:9a:f6:31:5b:14:f7:62:39:af:c0:98:07:
62:a1:91:d3:9d:ec:a6:07:09:91:b1:02:31:80:8d:
4b:38:40:2e:f5:dc:e3:f5:b5:b3:17:f5:b1:e4:d6:
99:87:a0:f0:e9:5d:60:0c:cd:50:16:9e:fc:0e:7d:
03:03:59:59:11:ca:48:46:ce:48:4e:43:8f:59:3e:
8a:19:e9:cc:ec:56:28:db:c1:a2:8d:7c:57:3d:0a:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0E:E4:5B:0F:B3:43:CC:1A:F3:E3:A2:E5:0B:62:5C:8F:39:7A:67
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/aQ7kWw-zQ8wa8-Oi5QtiXI85emc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.124.0/22
45.83.144.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:33:23:46:d6:72:a6:e0:21:83:ca:5b:07:26:94:65:1b:5c:
a1:fa:1c:ca:c1:d6:71:fe:8e:fc:e0:5f:0c:6b:c0:6a:8d:57:
12:d6:d1:e7:a8:9c:6b:ac:11:4b:bd:0e:c1:ce:71:99:ea:6f:
0c:dc:c7:00:d9:c0:16:ef:be:d6:6a:3b:61:ac:d8:1e:dc:45:
d5:8c:fc:51:c0:3e:30:bd:bb:8a:ed:6a:7b:63:b7:7a:0f:60:
bf:1d:d6:21:ff:de:d4:21:e5:31:cb:1b:1a:3d:9a:8f:de:a6:
a5:0e:64:c8:64:76:28:ce:43:f3:c4:4e:d8:f8:ca:9e:22:7f:
39:d1:2c:99:08:85:64:a6:23:1d:7b:91:27:a4:13:38:00:50:
35:ec:64:d6:7f:df:10:53:bf:d6:7b:b0:2b:1c:51:c8:c7:ee:
3b:7c:3a:53:6e:be:4d:52:28:f0:fe:f9:cc:de:03:14:4b:28:
90:73:b7:98:f0:d8:bb:d4:1e:a6:8e:9d:8f:7f:2d:ed:5d:3e:
e4:fa:b0:94:4a:28:c5:36:b5:d5:61:ef:f8:dc:cb:a1:47:d2:
9e:8b:7c:fa:c4:81:cd:4f:3b:56:2e:10:54:ab:c1:a3:f9:9e:
22:f6:e4:c7:78:7b:45:0c:cb:ad:42:b4:6e:31:81:be:af:37:
dc:d5:92:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:24:42 2024 by rpki-client on console-ams.rpki-client.org