Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/oxKHaIyHeWBK14TG1MdJYhHDOC4.roa
File: oxKHaIyHeWBK14TG1MdJYhHDOC4.roa (raw, json)
Hash identifier: hv9kaxShiMVx6pxsSYm4t+A5Ct/Uzvroaag7lDakuzw=
Subject key identifier: A3:12:87:68:8C:87:79:60:4A:D7:84:C6:D4:C7:49:62:11:C3:38:2E
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 018F39D64D5770296C47E2571DA5CD0AD7E1
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/oxKHaIyHeWBK14TG1MdJYhHDOC4.roa
Signing time: Thu 02 May 2024 15:04:56 +0000
ROA not before: Thu 02 May 2024 15:04:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 45.3.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Jun 2024 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:39:d6:4d:57:70:29:6c:47:e2:57:1d:a5:cd:0a:d7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: May 2 15:04:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a31287688c8779604ad784c6d4c7496211c3382e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:25:b5:c4:0d:3f:74:97:99:dd:e4:07:e7:ce:
50:bc:5b:78:62:cc:ae:45:3a:4c:d0:aa:20:46:0e:
ef:2a:4d:c6:e9:e9:79:c2:19:a7:56:33:50:6a:cf:
cb:47:58:a4:34:da:a2:d8:b1:7b:e7:77:e4:fa:86:
1d:0e:dc:d4:d6:7b:c6:6c:b6:0e:12:b1:00:46:51:
d1:1b:58:ab:0f:13:02:77:fb:cd:50:3f:09:00:18:
1e:e3:f0:2d:0e:1a:ce:9e:99:a0:4c:fe:3a:c3:eb:
7f:06:0e:2a:de:9e:0d:b0:e7:9f:84:91:75:ae:7f:
14:34:83:8f:26:64:aa:db:a3:7c:9a:00:7d:bb:2a:
e3:71:2d:e9:47:08:4f:bc:26:98:d6:2b:b7:41:5c:
0a:b6:ea:60:79:37:97:36:13:b6:36:4a:4e:1c:33:
5d:ab:a2:f8:56:a4:2a:f9:d1:4b:2b:6d:49:54:c2:
78:7b:e7:9f:3a:37:14:74:42:65:8e:37:87:c0:98:
e8:7e:ce:95:37:19:1a:11:63:86:89:4d:56:95:33:
68:9b:ea:1b:aa:d3:14:ec:70:11:df:d4:55:57:50:
15:4c:aa:20:93:2e:7e:71:64:7d:eb:81:84:cb:73:
cf:a3:e2:77:ca:1d:5b:b8:60:f1:e1:ed:d0:55:3a:
9d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:12:87:68:8C:87:79:60:4A:D7:84:C6:D4:C7:49:62:11:C3:38:2E
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/oxKHaIyHeWBK14TG1MdJYhHDOC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.60.0/22
Signature Algorithm: sha256WithRSAEncryption
95:c7:4f:f4:aa:cd:3d:96:c2:89:2f:34:68:71:8e:73:02:3a:
23:86:e8:1e:71:68:84:e5:8d:38:b6:5c:41:ea:6e:57:46:ba:
5b:49:21:a2:17:79:66:82:52:48:e7:47:eb:a4:6b:aa:b8:51:
c4:c6:a1:71:da:05:e9:28:a4:1b:68:fd:f9:51:84:2f:3b:e5:
da:02:f3:d4:6a:73:55:d8:90:ac:56:6f:c2:4e:be:f7:b3:88:
40:fd:b8:4d:b9:0d:76:4c:ed:7b:c3:8d:62:02:6d:39:79:2b:
7c:8c:97:74:c9:41:a3:f1:c9:0d:b5:9b:d3:eb:7e:88:98:9e:
cd:0c:04:b4:62:ef:b4:80:4d:8e:59:25:32:d1:b5:46:67:09:
76:95:c1:af:ca:e7:11:e6:6e:05:53:36:43:34:a1:ba:79:09:
d3:21:c6:8f:54:4e:f4:63:37:88:93:66:ad:87:b1:c6:7a:68:
9c:55:cf:62:62:b2:a6:c4:e6:b9:1f:a3:fc:c5:8d:51:c6:a5:
1b:d7:6d:5d:a4:5b:7e:8d:bc:f0:ec:bc:7a:a0:98:02:9c:7f:
0e:2a:89:64:03:e3:f9:6d:1d:83:a1:19:54:01:a2:3c:bb:74:
a0:ae:9a:76:48:61:fc:d5:f5:04:d2:08:b7:92:70:9b:84:6c:
97:4e:57:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 21:23:22 2024 by rpki-client on console-ams.rpki-client.org