Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/CcXH-cLLA_SKELt2JW2HdU571Hw.roa
File: CcXH-cLLA_SKELt2JW2HdU571Hw.roa (raw, json)
Hash identifier: k9VenjScAMHHa0twfvU2xTA1u/GJ2yM+7pdsqZ8t+mM=
Subject key identifier: 09:C5:C7:F9:C2:CB:03:F4:8A:10:BB:76:25:6D:87:75:4E:7B:D4:7C
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 018CCA2B433A9D9FF7C712C76088AD0EF92B
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/CcXH-cLLA_SKELt2JW2HdU571Hw.roa
Signing time: Tue 02 Jan 2024 12:34:41 +0000
ROA not before: Tue 02 Jan 2024 12:34:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133199
IP address blocks: 45.145.229.0/24 maxlen: 24
45.145.228.0/23 maxlen: 23
45.145.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:43:3a:9d:9f:f7:c7:12:c7:60:88:ad:0e:f9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Jan 2 12:34:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09c5c7f9c2cb03f48a10bb76256d87754e7bd47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:2a:67:a8:9b:61:d5:cb:b5:f1:12:75:2a:
ce:6e:e9:50:11:c9:0d:22:f6:b0:96:8f:05:0b:bb:
99:63:63:26:9a:b3:0d:7f:bb:9d:53:a7:f0:d7:d2:
9d:de:fc:95:84:1a:b9:7b:de:d8:8b:88:6a:fd:72:
c5:db:44:ec:98:ba:92:7e:b7:d3:d4:2a:76:25:e4:
a7:d7:82:b2:8b:a5:32:c2:77:a8:ee:6c:da:3a:3f:
ed:37:c5:38:27:4e:2d:59:47:2d:70:f7:86:76:43:
b2:bc:1a:50:a8:2b:6a:18:05:00:92:81:6b:1b:dc:
9b:cf:cb:23:52:8f:a8:b7:58:50:6f:86:30:a8:f4:
50:10:75:15:58:e7:ed:4e:09:a0:7f:a3:3c:27:55:
83:ed:54:e1:47:e4:3a:44:5a:6f:0f:e9:ff:9c:bb:
df:de:65:84:09:d2:82:ee:ff:a8:67:9f:c4:0a:c3:
67:1b:6d:6c:30:01:ee:8e:7a:09:2f:7e:8f:9f:f6:
74:79:3e:fb:57:0d:99:4d:23:73:a9:fa:3b:3d:45:
07:c5:4f:0f:d4:26:59:6f:a4:27:02:53:52:48:3c:
9b:d3:f6:83:29:f2:d1:12:e1:e5:55:da:b1:11:a5:
00:fb:7e:52:bf:30:60:f5:4f:f6:26:65:73:c4:e2:
d5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C5:C7:F9:C2:CB:03:F4:8A:10:BB:76:25:6D:87:75:4E:7B:D4:7C
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/CcXH-cLLA_SKELt2JW2HdU571Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.228.0/23
Signature Algorithm: sha256WithRSAEncryption
06:d0:72:a1:37:90:e0:97:ef:64:c7:3e:7d:f4:0f:80:49:a6:
ab:57:e7:8f:92:ad:f1:fa:4d:34:b1:7c:b9:cd:e9:b5:d6:08:
9f:36:c1:57:ba:dc:03:5e:e6:68:f4:0e:34:3e:73:af:cb:34:
71:5c:58:ca:e3:17:49:ca:a7:14:96:48:db:d4:37:cb:8c:17:
00:53:9c:ad:6d:89:92:6f:d1:1c:64:d5:58:68:b9:e2:b2:9e:
4e:8a:d7:41:0e:74:a6:a8:3f:46:72:9a:71:de:a3:27:97:1e:
dd:a9:bd:03:02:1b:ce:4b:a6:1f:64:b4:84:6c:51:24:57:28:
d2:ed:01:7f:ae:05:7e:2e:08:0b:81:d7:b5:50:80:dc:94:c6:
fb:fd:c3:90:32:97:73:35:e9:25:e2:d0:e4:46:d3:82:47:39:
9a:a0:c2:02:26:11:43:e6:31:57:1b:07:95:0e:40:ef:b2:cc:
2e:c2:5f:9d:46:d9:45:87:f7:d6:98:6c:c8:a4:cc:cf:7e:6b:
dc:33:57:f8:bc:32:b3:1d:b4:bf:94:26:55:26:ff:20:9b:2a:
49:6a:70:aa:76:d4:37:f2:d5:58:3c:b3:f1:93:bc:32:4b:48:
3d:ff:5a:d1:b4:7d:36:3c:9a:4e:dd:8f:96:12:84:bc:bc:a4:
e3:06:d8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:12:06 2024 by rpki-client on console-fra.rpki-client.org