Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/sBjpCv4IedKx9oUK0VBG9teqHFk.roa
File: sBjpCv4IedKx9oUK0VBG9teqHFk.roa (raw, json)
Hash identifier: X/sBvhOXJKf6a1x5ECJCEWLDjhz9NXwm4uJVzHyoefM=
Subject key identifier: B0:18:E9:0A:FE:08:79:D2:B1:F6:85:0A:D1:50:46:F6:D7:AA:1C:59
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 018DFB1538077C94B09D7CFC76783DECD5E3
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/sBjpCv4IedKx9oUK0VBG9teqHFk.roa
Signing time: Fri 01 Mar 2024 17:34:48 +0000
ROA not before: Fri 01 Mar 2024 17:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200260
IP address blocks: 45.92.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fb:15:38:07:7c:94:b0:9d:7c:fc:76:78:3d:ec:d5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Mar 1 17:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b018e90afe0879d2b1f6850ad15046f6d7aa1c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:e2:bb:a9:ba:3e:6f:b1:8c:71:8a:3f:eb:
ca:72:2d:f4:84:1c:59:7e:c9:0a:bd:e7:99:20:b0:
cb:04:d0:cb:2d:20:cd:6e:c5:2b:e5:c1:f4:4e:a2:
e5:f2:96:d7:82:ce:e2:68:c8:ff:08:af:ac:d8:19:
2b:71:52:1e:63:7a:11:ae:01:dd:d3:56:99:e6:ce:
04:c5:4a:59:a5:97:80:83:2c:0a:01:34:f7:6f:69:
da:91:df:76:b5:e0:83:05:6c:00:6a:08:7b:37:03:
0b:1f:f4:47:90:0b:eb:ad:bb:16:9f:a1:a4:81:6d:
7a:95:57:ce:f6:c1:3c:6d:17:17:3e:37:0b:24:85:
4f:25:9e:c5:8f:a4:b7:96:40:17:a6:53:cb:e8:23:
68:22:bb:77:01:9f:c5:cc:0b:9e:50:ec:26:cb:70:
5f:a4:2d:2c:b2:d2:58:02:2a:d6:bd:72:df:2d:69:
1a:ea:52:5d:05:0d:b4:02:b6:d0:b5:14:df:0c:52:
b9:72:9e:b7:e1:f2:30:b0:4c:18:6d:2d:24:f0:7a:
04:7a:2e:c4:53:94:8c:35:93:9f:92:89:8c:0e:1e:
dd:ff:ab:9b:3c:38:38:53:e0:93:ee:22:3a:4f:aa:
8e:d6:72:df:6c:27:8d:59:d8:62:02:69:f0:dd:7f:
bd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:18:E9:0A:FE:08:79:D2:B1:F6:85:0A:D1:50:46:F6:D7:AA:1C:59
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/sBjpCv4IedKx9oUK0VBG9teqHFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:0a:9e:bd:28:1a:20:94:1e:a8:c1:e6:19:67:85:63:35:e9:
1f:5a:f7:94:d4:1f:6a:c8:c1:bf:40:76:ee:6e:58:4b:a0:51:
56:05:7a:c7:30:19:73:50:8f:6b:ed:ee:49:13:a3:2b:3e:ab:
a8:38:3e:5e:f5:03:29:c8:43:a0:50:c2:5d:79:91:14:62:9f:
eb:8b:17:34:f2:ac:f4:5c:9a:d2:fc:00:30:29:a0:70:f5:c6:
f2:42:2b:c2:da:62:ae:1b:90:ae:30:b8:de:0f:0f:02:ab:0c:
69:07:79:9a:8a:63:08:c3:4f:1d:56:21:8b:0b:5f:e9:a2:91:
00:79:1d:1f:69:ca:a7:c0:6e:42:ae:a8:21:97:38:7f:72:3b:
5d:57:5e:f7:34:c6:67:6d:5a:ce:1b:77:da:d9:c0:7a:94:27:
5f:09:ee:a1:c4:13:2a:86:31:72:22:7e:02:5d:1c:88:fb:3b:
ff:7e:29:d2:14:41:95:ac:9d:ee:c2:f1:a0:b4:ef:cf:71:34:
5b:76:d2:3c:42:bd:24:27:eb:26:83:4b:9b:e9:fe:db:07:d9:
d5:2a:0a:e4:40:7e:4a:48:6f:38:e2:84:e6:a6:65:28:d8:db:
0c:ba:6b:b1:98:eb:75:06:b8:5f:e0:24:d7:3c:d0:6f:20:1c:
d6:62:37:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 00:13:52 2024 by rpki-client on console-fra.rpki-client.org