Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/kGnfACXD2MPTE68WHVl4Hi2E3C0.roa
File: kGnfACXD2MPTE68WHVl4Hi2E3C0.roa (raw, json)
Hash identifier: +0/uds5TM8GvtnOnVkwdemRQAbJALV9oIcs6d6ZLLOc=
Subject key identifier: 90:69:DF:00:25:C3:D8:C3:D3:13:AF:16:1D:59:78:1E:2D:84:DC:2D
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018DD00D98A9FFAF6BCC67D12CB4E72C826D
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/kGnfACXD2MPTE68WHVl4Hi2E3C0.roa
Signing time: Thu 22 Feb 2024 09:02:48 +0000
ROA not before: Thu 22 Feb 2024 09:02:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216463
IP address blocks: 45.153.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:0d:98:a9:ff:af:6b:cc:67:d1:2c:b4:e7:2c:82:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Feb 22 09:02:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9069df0025c3d8c3d313af161d59781e2d84dc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:d4:32:ab:d1:d8:ac:44:58:d0:21:5d:95:
e7:6e:5f:e3:63:34:73:01:34:ae:29:e2:df:51:16:
f2:24:c0:bf:92:75:49:cd:c9:b6:4e:42:57:6a:02:
3d:08:c4:2b:80:2a:7d:35:54:0b:2f:00:7d:fe:32:
9d:71:be:44:71:d0:5f:a2:fb:e7:a9:d1:25:ec:d1:
41:51:13:ff:af:62:4e:13:5b:aa:94:7f:ed:69:47:
8c:2f:a0:7a:53:61:b3:3e:32:12:c9:f6:50:06:78:
ef:8b:0e:73:c0:93:ea:6e:ae:52:a2:4e:d7:f3:8a:
2e:9d:42:f6:32:ab:06:8e:51:8d:77:00:d5:16:01:
9b:40:72:57:dd:05:cd:8e:1c:ed:d9:79:ad:ae:fa:
13:a6:68:4a:97:ae:1e:27:2b:4e:65:5a:76:ae:c6:
19:35:91:89:c2:a3:ed:c7:f1:37:0a:f7:21:ed:ed:
75:83:f3:69:75:98:7e:a5:5d:5d:f4:6e:47:f2:2f:
53:49:e9:fe:36:50:9c:58:1b:dd:db:5e:94:0f:c9:
53:5f:9d:85:7a:77:0c:14:e9:6b:83:76:56:96:3b:
9e:65:a1:cd:ac:cc:e2:eb:21:64:56:81:7c:b6:92:
f9:4c:41:ee:b2:ce:d8:4b:92:fc:73:0e:7b:f8:5a:
66:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:69:DF:00:25:C3:D8:C3:D3:13:AF:16:1D:59:78:1E:2D:84:DC:2D
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/kGnfACXD2MPTE68WHVl4Hi2E3C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.24.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:1b:5d:62:10:19:35:17:ee:b6:ec:ce:6f:3a:99:f6:7c:fe:
2c:a8:0c:cb:59:a7:e4:a8:ad:16:26:61:2e:ba:fc:b0:48:97:
5c:f3:1f:c0:8c:7d:87:97:28:86:db:8d:bd:83:a5:86:62:dd:
e5:2c:04:09:99:c2:f4:2a:39:bf:4f:35:4e:eb:aa:06:3e:af:
63:16:9a:fc:46:91:bd:7d:35:30:3d:97:74:e5:79:9d:58:56:
04:73:83:2a:93:6b:40:19:ca:0a:81:d8:54:fb:69:8b:43:ca:
c9:61:c1:65:63:4e:d1:f6:cb:6e:71:c7:aa:76:0a:72:f3:75:
9c:9e:b2:d2:57:b9:35:68:76:da:98:20:da:78:66:bf:a7:3e:
ea:a0:5d:85:36:06:f4:a0:92:7d:ce:d6:82:11:29:39:bd:39:
99:6b:d3:96:fd:ac:3d:f1:95:51:cf:9d:c0:d6:70:a2:b9:c6:
d6:0a:20:0b:59:ab:c6:ca:b6:21:d2:bc:d8:17:5f:b6:f2:46:
f6:d8:a9:e8:b9:2c:f5:6b:1b:e5:21:97:26:ac:be:6e:cb:00:
2f:90:f4:56:57:db:08:6b:9a:1c:e4:e7:ee:55:c4:f5:4d:a5:
7f:c8:de:f8:59:f1:c3:73:57:2e:e8:4c:c3:cf:1b:a9:04:a2:
8d:a5:a7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:43:45 2024 by rpki-client on console-fra.rpki-client.org