Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/jS0tJg3MpFo_OoYJjkgIR9MttaQ.roa
File: jS0tJg3MpFo_OoYJjkgIR9MttaQ.roa (raw, json)
Hash identifier: qhJIjLzvLfDbuXdlBEhtzrbgJkELFDvi/HwtSuKj7bQ=
Subject key identifier: 8D:2D:2D:26:0D:CC:A4:5A:3F:3A:86:09:8E:48:08:47:D3:2D:B5:A4
Certificate issuer: /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Certificate serial: 018CC5DBE894D5AE9A325C979D1F1526F026
Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/jS0tJg3MpFo_OoYJjkgIR9MttaQ.roa
Signing time: Mon 01 Jan 2024 16:29:32 +0000
ROA not before: Mon 01 Jan 2024 16:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208710
IP address blocks: 45.66.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e8:94:d5:ae:9a:32:5c:97:9d:1f:15:26:f0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Validity
Not Before: Jan 1 16:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d2d2d260dcca45a3f3a86098e480847d32db5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:c5:fc:90:c0:5b:82:8c:2e:a6:ab:96:57:
8f:ce:0c:a0:0d:df:c4:4f:ba:7a:bf:7e:9f:5f:15:
84:9a:95:20:9d:f6:7c:56:a1:59:a2:8b:73:99:d9:
19:4d:64:4c:79:3d:2d:6c:dd:eb:3d:12:f1:c8:0a:
bc:b4:e2:69:9f:cf:06:6b:3f:d8:99:8b:c3:16:40:
e5:da:42:3d:20:34:9f:5f:83:cb:06:da:38:fe:b2:
37:c0:22:25:11:20:5c:5c:d3:85:3e:7c:4a:fb:42:
a9:48:bb:9f:f0:d0:c1:a3:03:ff:75:0b:19:64:a6:
ab:4a:c5:3e:87:e7:bb:2b:04:ae:db:92:7f:ad:50:
80:29:89:b6:54:34:a3:a8:47:4d:ee:0b:96:08:c3:
46:65:a8:84:8f:6d:6e:5a:d1:cd:5e:7b:f9:37:c1:
de:6f:8d:81:2b:4b:47:dc:86:77:da:f5:07:4a:2c:
30:48:63:42:a0:e0:d1:45:13:29:ed:7d:8f:18:37:
b5:d6:94:7a:9a:2e:02:85:b6:12:9e:f4:7a:5c:de:
65:11:2a:bb:31:37:4c:a2:07:ef:79:5a:37:c5:ba:
06:f1:be:e3:96:8c:a8:66:50:0d:af:14:80:4f:b1:
cc:65:3f:4d:33:62:b6:b2:5f:09:cc:35:f1:54:72:
f3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2D:2D:26:0D:CC:A4:5A:3F:3A:86:09:8E:48:08:47:D3:2D:B5:A4
X509v3 Authority Key Identifier:
keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/jS0tJg3MpFo_OoYJjkgIR9MttaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:f8:89:78:e6:1d:01:0d:8d:54:b8:46:11:64:fc:fa:4a:4c:
ba:b1:4d:e5:6c:92:6b:4a:38:04:f2:42:37:91:23:9b:32:fe:
2e:31:6e:f7:ce:aa:f3:95:6a:a3:49:b2:af:6c:3c:f5:39:4c:
3a:9d:28:4b:94:1f:44:d5:67:9e:dd:c0:1e:b2:ce:0f:d5:e1:
0b:06:1f:81:32:c9:f7:ec:ae:6a:74:ae:96:a2:29:de:40:7d:
e2:4d:2a:9c:28:c2:2a:ab:5b:1a:ef:3a:8c:4e:8a:ce:57:e4:
bd:ce:b7:99:08:cd:5a:f5:c6:ce:dd:bd:e1:ae:a3:5d:bf:2d:
f4:48:51:5a:aa:80:8e:0d:c5:46:86:08:8a:b1:d9:7e:98:90:
26:3b:2b:ab:ce:8e:ee:47:84:10:1f:5c:24:3a:d5:56:73:3e:
32:c7:bb:60:ba:7d:b7:96:3e:e7:51:03:ff:ad:84:b0:49:fb:
29:cc:85:69:c0:e3:89:e1:62:e2:0c:23:f7:e8:4f:0d:5e:42:
ba:fb:b4:b3:0e:d5:26:35:69:44:c9:21:67:87:58:2b:bb:0f:
ab:2d:18:1a:28:f1:02:a3:fb:6c:8a:3f:20:25:a2:0f:6a:4d:
7c:dd:97:b8:c7:13:c5:ff:bf:63:e0:83:f7:af:10:e2:3d:dd:
6b:cc:9f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:19:51 2024 by rpki-client on console-ams.rpki-client.org