Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/G_SAoqaEiJ096namykASikB7JsE.roa
File: G_SAoqaEiJ096namykASikB7JsE.roa (raw, json)
Hash identifier: FoNHY2JPtoAhbzB0yNg+qdKISxF88NcOYIhwayOrrJY=
Subject key identifier: 1B:F4:80:A2:A6:84:88:9D:3D:EA:76:A6:CA:40:12:8A:40:7B:26:C1
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 018CCA2B418C233E62076362634726EF0B15
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/G_SAoqaEiJ096namykASikB7JsE.roa
Signing time: Tue 02 Jan 2024 12:34:41 +0000
ROA not before: Tue 02 Jan 2024 12:34:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18013
IP address blocks: 45.145.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:41:8c:23:3e:62:07:63:62:63:47:26:ef:0b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Jan 2 12:34:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bf480a2a684889d3dea76a6ca40128a407b26c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:52:3a:31:b2:b0:2f:25:e4:cc:99:84:f9:
e1:05:c5:08:ff:6e:95:09:e9:17:c4:eb:c0:2a:a3:
fc:04:a4:95:7d:af:50:78:ae:82:e0:ec:87:c8:66:
06:cf:f0:60:fa:ae:dd:cf:a7:da:e2:af:42:86:f1:
51:80:d3:44:0c:7f:7b:e2:5b:8d:09:04:c0:48:13:
66:04:07:93:db:58:4f:7c:02:e4:5e:45:74:61:62:
82:26:22:5f:37:fb:21:e8:3d:7f:be:8d:13:55:46:
44:d2:45:84:83:9a:b9:53:d1:4c:ee:4e:e6:a6:c3:
fb:20:5e:e7:e6:4a:74:80:4c:8c:56:0c:b0:72:cf:
a5:98:6c:8b:8b:cc:7a:db:12:fb:b0:d3:1c:94:96:
3e:df:1b:ee:23:67:ba:95:c3:fe:ef:9b:45:b2:65:
f8:b5:2a:5c:11:b4:a6:00:7c:03:6b:0c:9d:4d:14:
86:e8:de:2a:26:7c:b9:69:cb:55:2a:1a:d7:d4:07:
e8:36:c4:40:47:80:b9:54:a6:4f:7f:35:ff:5f:62:
b9:fa:56:37:88:d4:34:95:51:30:a8:ca:e4:5d:40:
7d:98:64:1c:7b:83:b9:c2:71:19:16:a1:f2:63:11:
42:17:73:ac:f9:db:35:0a:c0:9f:07:16:6e:2f:d0:
89:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F4:80:A2:A6:84:88:9D:3D:EA:76:A6:CA:40:12:8A:40:7B:26:C1
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/G_SAoqaEiJ096namykASikB7JsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.230.0/23
Signature Algorithm: sha256WithRSAEncryption
25:b3:d3:de:60:9a:20:b2:4d:54:69:65:8d:ba:72:d6:29:eb:
85:ea:ce:fe:e4:ce:9e:c3:23:4c:c9:87:54:ef:95:2f:2c:c5:
9d:32:ab:f3:78:31:f4:2f:2f:61:e9:f4:5b:be:79:e7:44:4c:
ed:ca:7e:c1:0e:1a:af:7a:b7:40:bd:c3:dd:63:b7:23:17:d5:
2e:81:b3:42:0e:36:0a:54:c2:6b:ab:3f:d8:3d:87:15:e4:54:
3c:15:e4:f8:69:72:f7:6b:cb:27:c0:31:d3:d6:31:ff:56:3b:
df:1f:31:8c:82:b2:8f:c7:2e:b9:f5:bd:fc:df:b0:3a:ba:f6:
55:90:42:88:b8:10:a6:9b:48:47:d1:37:ea:e6:b4:1f:2e:47:
fc:db:3e:e1:15:95:16:b0:48:cf:20:e2:f7:e5:d5:a6:73:61:
db:bc:ce:0c:12:96:2f:b3:74:e5:14:1a:04:0a:e8:10:4e:69:
15:ca:86:09:14:0b:2a:54:59:d0:f2:ff:7f:c4:49:a7:5b:45:
71:36:c0:31:e9:62:61:ac:b5:e3:10:af:90:49:07:fe:01:84:
81:e8:09:18:e7:0f:30:88:4f:5f:d5:8b:a3:ec:73:29:b8:30:
8a:1f:e9:eb:a9:6a:c1:5b:0a:63:12:d2:4c:29:ee:e5:d5:04:
19:f4:c6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:38:35 2024 by rpki-client on console-ams.rpki-client.org