Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/xwwZ7qgrp9_jwBKe-vmplXeZUOY.roa
File: xwwZ7qgrp9_jwBKe-vmplXeZUOY.roa (raw, json)
Hash identifier: CSkE6rEFHa+ydnZK0KDeMT3RInb2dYTxqVreCZlxCck=
Subject key identifier: C7:0C:19:EE:A8:2B:A7:DF:E3:C0:12:9E:FA:F9:A9:95:77:99:50:E6
Certificate issuer: /CN=31533690ab184f433f1760f3feaa184c443e70f9
Certificate serial: 018D56223885D51C5907928F5ACC3EE14FFC
Authority key identifier: 31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/xwwZ7qgrp9_jwBKe-vmplXeZUOY.roa
Signing time: Mon 29 Jan 2024 16:51:39 +0000
ROA not before: Mon 29 Jan 2024 16:51:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208252
IP address blocks: 45.150.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:56:22:38:85:d5:1c:59:07:92:8f:5a:cc:3e:e1:4f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31533690ab184f433f1760f3feaa184c443e70f9
Validity
Not Before: Jan 29 16:51:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c70c19eea82ba7dfe3c0129efaf9a995779950e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:37:bd:ab:10:76:a0:c3:05:93:5a:8e:24:07:
e0:7d:d1:ed:8c:06:99:e4:ff:57:a7:60:fc:97:14:
b4:b0:eb:c4:93:a7:ec:1a:20:49:d4:e9:92:ee:4e:
cb:ab:ca:49:49:cb:9b:51:db:54:d0:5a:59:35:2b:
6a:67:66:86:c5:07:18:c2:79:47:af:dc:a6:2b:82:
cb:22:87:7a:78:8b:5a:ac:36:31:da:6a:45:68:9b:
89:19:19:cf:8a:bc:68:40:1c:44:e1:7e:14:d6:c2:
f0:25:a8:79:53:16:87:3c:c5:20:60:80:85:1d:f8:
9b:a1:89:34:86:ca:c8:d8:e2:d5:f8:8d:6a:1f:da:
0d:c9:01:49:9f:1b:70:6e:68:6a:07:35:20:f6:b2:
fa:71:c1:f1:7f:a8:5f:71:5c:3b:e3:ca:4b:64:b1:
bd:b1:40:a3:1a:f2:a5:69:e9:31:12:08:02:d9:8a:
b3:1a:35:b8:6d:fd:94:a9:80:f7:94:44:fe:08:ee:
4b:72:28:66:13:cc:3a:b6:45:93:c2:6d:1c:70:1e:
e0:e2:e2:bd:be:f4:39:79:07:99:3d:fc:93:89:64:
68:69:fd:6b:b2:da:20:26:44:e7:94:94:17:67:39:
3f:67:d2:82:9c:a5:c1:7f:07:3e:ea:2e:e1:bf:b9:
d0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0C:19:EE:A8:2B:A7:DF:E3:C0:12:9E:FA:F9:A9:95:77:99:50:E6
X509v3 Authority Key Identifier:
keyid:31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/xwwZ7qgrp9_jwBKe-vmplXeZUOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.248.0/22
Signature Algorithm: sha256WithRSAEncryption
ea:7e:89:3c:82:f4:d4:a8:5b:d8:0f:ed:b6:d8:d2:e5:fc:7d:
aa:45:b9:cf:24:d3:27:68:4c:7e:84:87:77:8b:ba:bf:1e:23:
65:af:fa:f7:13:6f:46:bd:3c:f7:60:47:8c:b4:f8:6e:fa:67:
28:be:7c:21:3b:3c:db:f7:1d:26:00:7b:0d:70:56:da:31:f4:
73:cc:b2:92:ae:ff:8e:31:0a:63:d6:a2:0e:5f:bd:24:eb:1b:
4b:77:14:7a:a9:99:0a:b3:e7:aa:ca:cc:ff:71:6d:66:47:44:
3f:24:61:6c:6a:ad:63:77:ce:8b:d9:2e:0a:eb:da:54:50:6b:
41:64:ea:7a:e7:49:4a:45:cb:69:2b:0d:0e:2b:51:00:70:dd:
56:a2:56:74:64:d2:10:d9:c8:07:8d:02:f0:21:1c:8a:df:cb:
96:c3:34:f9:c6:72:a9:b5:8f:2d:bb:1d:58:8f:3a:d3:42:60:
f4:21:07:5e:47:f0:85:c3:55:02:60:09:de:ad:8e:5c:a1:5d:
65:2c:4a:db:fc:b0:b8:2f:ea:2a:2b:1c:f6:17:ba:fb:3d:b2:
b1:e7:90:2b:89:a0:47:cd:11:aa:f5:f4:65:49:75:44:7f:34:
15:fc:e0:c6:24:82:80:c7:61:22:de:e8:93:a3:5b:f5:b3:f1:
72:d3:48:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:42:37 2024 by rpki-client on console-fra.rpki-client.org