Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/drw5s3NMHM2GUe6Ha6KnLjAG44g.roa
File: drw5s3NMHM2GUe6Ha6KnLjAG44g.roa (raw, json)
Hash identifier: 9oKk4O5XllLlwPyVmFENcTJZQre1GGLCh0SawFLRWMg=
Subject key identifier: 76:BC:39:B3:73:4C:1C:CD:86:51:EE:87:6B:A2:A7:2E:30:06:E3:88
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018CC8DFA5B985E4C486ED2081A51AC854AB
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/drw5s3NMHM2GUe6Ha6KnLjAG44g.roa
Signing time: Tue 02 Jan 2024 06:32:29 +0000
ROA not before: Tue 02 Jan 2024 06:32:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133153
IP address blocks: 45.158.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a5:b9:85:e4:c4:86:ed:20:81:a5:1a:c8:54:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 06:32:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76bc39b3734c1ccd8651ee876ba2a72e3006e388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:9c:d1:2a:86:dc:6e:3e:f7:24:1c:a1:c6:
eb:60:5d:0d:07:8f:74:7d:4b:88:2c:ae:6d:ff:37:
80:6c:c1:cd:1c:b1:b3:db:63:7c:c0:52:20:07:35:
2e:89:97:62:04:0a:a1:09:ab:21:76:cb:1a:0f:fc:
13:8f:66:a0:ae:7b:a5:d5:2f:2e:94:a4:17:07:08:
fe:5e:a2:fb:72:24:08:9b:ee:d8:de:5b:e4:4a:08:
ad:d2:d0:51:14:6a:a9:3a:08:92:f4:b8:57:8f:6f:
9b:f7:e6:de:05:0d:df:6a:78:5c:e5:da:69:71:99:
a4:86:a9:a2:95:6d:ed:60:3a:03:4e:f1:79:ef:09:
f6:56:d2:53:2d:fc:3d:4e:5c:f4:f8:ff:18:37:6e:
a4:3a:80:70:36:3d:9b:66:57:db:c9:97:94:1c:0a:
b6:19:63:5d:00:a6:86:79:de:7c:e9:4a:c6:ca:dd:
e1:e1:05:d8:f5:c4:37:1e:26:62:44:49:c0:e2:97:
18:92:aa:cb:32:c4:57:71:7c:07:e4:a8:b6:7b:28:
e7:21:a1:c2:38:2b:4d:ba:17:ab:0e:7f:0c:da:e1:
1b:11:44:26:4f:ed:60:55:ac:8d:b0:b4:92:6d:76:
f8:1d:f4:ba:10:78:a4:f7:40:b0:4f:78:f2:a6:4c:
1c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BC:39:B3:73:4C:1C:CD:86:51:EE:87:6B:A2:A7:2E:30:06:E3:88
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/drw5s3NMHM2GUe6Ha6KnLjAG44g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.253.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c2:05:42:1a:e2:ba:01:54:bd:cc:69:78:9f:08:1d:15:46:
f2:7f:72:96:58:25:40:d5:14:02:45:4b:67:9c:73:02:e9:f5:
ca:82:ef:1d:a2:8e:1a:11:51:7a:a3:b8:78:b1:a2:45:51:cc:
12:05:59:3c:e7:da:f1:14:c3:1c:86:ba:29:80:b8:b3:50:e0:
58:3a:78:cd:36:d6:a5:99:e4:27:fe:55:1a:af:54:2d:bb:7e:
7b:bb:4c:df:7d:ba:d2:f8:90:9c:6e:a6:8e:69:02:e6:91:42:
0b:02:40:14:43:14:e5:b4:70:a7:04:e7:3c:c5:7d:53:d4:b0:
d2:c8:1c:b4:1d:70:da:61:16:0d:15:31:d2:65:71:66:b0:45:
36:d0:87:89:04:8d:d4:98:08:b0:57:7f:30:a2:72:98:91:26:
36:80:b1:f2:5a:ae:19:cd:8d:fc:c6:f5:c2:9f:fe:22:06:e1:
2b:c0:71:6b:a4:af:91:44:c5:8a:be:4e:17:e5:94:13:e4:17:
f5:94:87:af:a0:78:4b:a7:1b:1e:d8:1d:71:01:f8:46:14:16:
1f:ff:df:aa:59:dd:33:7a:2a:ac:44:d0:f1:d2:6c:23:36:53:
97:f4:1b:3c:94:70:b2:ef:82:d5:2c:03:19:9b:21:0a:16:e4:
be:85:f6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:50:31 2024 by rpki-client on console-fra.rpki-client.org