Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/Rc2JFuK1yrGuzlv-g5AtxS8_hMk.roa
File: Rc2JFuK1yrGuzlv-g5AtxS8_hMk.roa (raw, json)
Hash identifier: /OXfxv02/cbOTsTuo4iyvpCqT0iQiLA+F5cJ1usTEVk=
Subject key identifier: 45:CD:89:16:E2:B5:CA:B1:AE:CE:5B:FE:83:90:2D:C5:2F:3F:84:C9
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 018F39D64C803F2CB83A512AC25D0FB3006E
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/Rc2JFuK1yrGuzlv-g5AtxS8_hMk.roa
Signing time: Thu 02 May 2024 15:04:56 +0000
ROA not before: Thu 02 May 2024 15:04:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.3.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:39:d6:4c:80:3f:2c:b8:3a:51:2a:c2:5d:0f:b3:00:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: May 2 15:04:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45cd8916e2b5cab1aece5bfe83902dc52f3f84c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:75:a3:04:49:fb:99:05:a3:0a:d2:d4:07:27:
b3:c2:89:95:df:2a:d3:f5:13:68:1c:d1:32:23:09:
6e:5e:b6:2f:8e:2e:50:f4:89:03:80:a1:92:40:eb:
0c:f6:12:95:3f:65:b0:49:f5:68:9f:4c:7b:dc:f1:
83:21:de:65:87:ad:2c:85:94:af:08:31:18:f8:10:
5b:d7:b9:11:fa:68:62:1c:0d:35:6e:88:7e:1e:77:
e4:aa:09:48:50:b1:2c:40:a5:18:f4:01:b2:1c:f3:
07:c3:e5:1b:e6:7e:3f:56:da:d8:e9:37:dc:6b:5d:
88:00:2e:af:9f:37:ed:66:3a:58:7d:63:3f:e3:30:
47:12:09:e6:07:85:84:2b:27:df:82:eb:ed:09:b7:
9f:bf:09:ef:94:e0:1c:a8:52:00:ce:de:72:11:a4:
70:37:25:8b:f4:33:19:0d:cf:0b:04:dc:61:49:ab:
ef:91:8f:a7:a3:c9:d3:7d:26:db:88:8f:82:35:b2:
cf:dd:0f:c0:c7:ba:2e:1e:2a:cb:fd:4e:f8:d6:31:
9d:90:2e:76:4a:d9:80:fc:5c:00:df:cd:4f:2f:7f:
9c:8a:6c:4d:d1:e1:c4:fb:aa:23:a9:d6:d9:9a:74:
c8:6c:d3:5d:e8:ad:3d:96:f8:ea:20:b4:86:90:ab:
a7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CD:89:16:E2:B5:CA:B1:AE:CE:5B:FE:83:90:2D:C5:2F:3F:84:C9
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/Rc2JFuK1yrGuzlv-g5AtxS8_hMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.60.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:db:2a:85:40:87:41:9d:a4:a2:2b:79:52:6f:00:82:7a:fe:
07:ff:55:ca:dc:4c:c8:1b:7b:2e:84:97:61:23:27:5f:45:83:
87:d1:2e:d2:a5:aa:fa:1d:11:79:7d:fa:d6:5f:e0:76:a6:c0:
22:1f:5e:6f:3a:d9:b0:3b:12:57:80:04:2c:97:dc:2e:f3:6b:
63:78:fe:83:5b:8b:e0:51:a7:55:5d:db:de:57:bd:93:e8:e9:
02:0b:3e:51:5f:72:a3:1a:15:9c:95:12:79:eb:f1:8f:9f:52:
b4:2f:f5:c6:88:69:1d:2b:e6:aa:0f:21:4d:c2:13:4e:74:07:
78:9a:09:51:e4:ab:ae:fa:ab:15:32:60:ff:80:54:09:1b:27:
4e:5b:13:a5:dd:d6:af:67:4a:a8:47:50:27:75:2b:62:d7:56:
15:e4:8a:2a:4d:a1:7d:96:a7:d3:c1:a7:49:93:df:42:72:e1:
09:1d:79:51:d3:82:36:8a:9a:9d:f4:8f:18:7e:b9:d2:ce:4c:
3e:e6:b6:21:da:1f:e6:bc:01:5a:df:ee:d5:d6:5d:80:d6:50:
e8:d5:79:e3:25:7a:d5:48:5e:a0:ac:b6:87:55:a3:24:ff:23:
0e:c6:c9:9c:69:c3:83:94:e1:38:21:44:47:08:29:96:cc:87:
47:50:6b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:59:41 2024 by rpki-client on console-ams.rpki-client.org