Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/rW6s7cuOUeMs2wQoGyZCgIaEPvc.roa
File: rW6s7cuOUeMs2wQoGyZCgIaEPvc.roa (raw, json)
Hash identifier: cO18oBgWcut7KAoaUuBsYossxE570ibGNalU7SZJtws=
Subject key identifier: AD:6E:AC:ED:CB:8E:51:E3:2C:DB:04:28:1B:26:42:80:86:84:3E:F7
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E4296D18510EE01DB66A9F2625B2E
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/rW6s7cuOUeMs2wQoGyZCgIaEPvc.roa
Signing time: Tue 02 Jan 2024 08:33:18 +0000
ROA not before: Tue 02 Jan 2024 08:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212794
IP address blocks: 45.86.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:42:96:d1:85:10:ee:01:db:66:a9:f2:62:5b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad6eacedcb8e51e32cdb04281b26428086843ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2a:ed:b3:7b:15:b8:9d:8e:90:5e:1e:29:c3:
13:70:7d:a3:02:03:9d:46:e8:22:75:bb:f2:d6:b4:
44:1b:23:56:df:2f:19:38:65:df:43:d1:fa:79:3f:
b0:c0:65:fe:75:f3:3c:57:30:16:77:5c:37:a7:02:
5a:da:8e:5e:72:d8:9c:91:5d:c7:04:c3:ee:5e:cf:
85:b9:76:ee:99:f5:7b:fb:34:c0:8d:f6:4d:e6:12:
9d:d3:4f:09:21:3a:52:16:9c:62:9d:c8:9e:ae:03:
04:13:fc:8f:44:cf:f3:ff:67:95:29:be:ae:e9:52:
50:eb:19:1a:3e:8f:05:bf:74:55:4e:f3:d0:05:93:
54:6c:ee:8f:d7:40:9b:20:45:af:6e:24:f3:43:1e:
25:5f:0b:25:c0:9b:e2:47:f1:43:24:21:95:7f:78:
fb:fa:96:5f:32:11:89:79:d1:7a:bb:07:aa:9d:14:
be:dc:57:29:04:17:b2:70:fe:eb:56:e9:84:28:1a:
9d:a8:f1:4a:5e:e3:4b:4a:67:26:36:0a:9d:84:cc:
0e:64:2b:e6:47:ee:fe:7d:13:fb:b0:2f:b6:a0:05:
27:e7:23:24:01:46:8c:bb:9c:6f:10:80:c3:89:b3:
4f:1c:73:93:e2:b9:28:56:9b:0e:9a:a8:19:fb:50:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6E:AC:ED:CB:8E:51:E3:2C:DB:04:28:1B:26:42:80:86:84:3E:F7
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/rW6s7cuOUeMs2wQoGyZCgIaEPvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.152.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:20:0c:54:e9:c3:6b:a9:01:4f:78:b1:a0:79:cb:aa:c2:a5:
d2:68:d5:b5:49:b9:d2:fd:9a:50:f4:e9:0e:d1:5c:10:49:1e:
e9:da:8c:f4:b7:20:d0:5b:d0:d3:fb:4b:5b:4b:bc:32:30:66:
8d:33:8d:54:dc:53:6b:08:16:06:e4:53:a0:53:c7:e6:3b:ea:
fc:3c:b5:c0:23:83:55:1b:f7:a1:b1:6c:4b:5b:77:74:e3:72:
9a:01:4b:33:b6:66:8f:f7:a1:5b:fa:e8:fb:4d:bf:d1:29:45:
d5:1e:37:c4:a6:f4:cc:4e:85:0b:ed:2e:16:dc:25:6a:17:60:
8c:c3:1e:c0:6a:d9:07:b9:de:4b:ef:54:fe:47:a0:0b:32:9c:
87:01:17:fb:a1:85:36:dd:fd:9f:04:1e:a3:6d:b3:34:a0:49:
6d:a8:74:c9:15:e2:85:fe:fb:76:51:ab:f4:13:cc:10:ee:d4:
92:52:62:58:0e:57:1a:a2:a4:d9:62:38:50:f0:c6:3d:c3:c5:
9a:7a:bc:a7:50:f8:fe:4f:5d:a6:5e:3a:65:a8:d0:1d:7d:5a:
1b:06:af:3b:c5:d7:23:23:84:b6:f4:9c:aa:62:71:bd:11:0a:
0b:23:58:71:f9:af:8e:0a:22:5b:00:fa:06:4c:b7:d4:19:57:
57:fe:93:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:47:09 2024 by rpki-client on console-ams.rpki-client.org