Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/9fxRoS56ITlpv5kobtrqSU-Y2V0.roa
File: 9fxRoS56ITlpv5kobtrqSU-Y2V0.roa (raw, json)
Hash identifier: uM1nxC8BhuPDE1d6ITiaHe9I6AvxD6ZrdhGHRNfhfTw=
Subject key identifier: F5:FC:51:A1:2E:7A:21:39:69:BF:99:28:6E:DA:EA:49:4F:98:D9:5D
Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial: 018CC3B67C39A874D73B7B8FF62EC7A892ED
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/9fxRoS56ITlpv5kobtrqSU-Y2V0.roa
Signing time: Mon 01 Jan 2024 06:29:25 +0000
ROA not before: Mon 01 Jan 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 45.91.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7c:39:a8:74:d7:3b:7b:8f:f6:2e:c7:a8:92:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Validity
Not Before: Jan 1 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5fc51a12e7a213969bf99286edaea494f98d95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c5:60:8c:ee:ca:49:fd:71:6c:d3:4a:16:ff:
3b:02:b7:77:a8:80:c9:3a:d5:d8:11:e6:ab:83:20:
8d:98:2b:28:10:44:6f:8a:27:aa:5b:5c:fb:d8:02:
0f:0c:aa:52:bd:39:65:e2:77:c1:fd:41:45:c7:95:
d0:74:73:3c:a5:c9:fa:4a:28:f0:d1:94:c9:01:1b:
ed:8a:a6:df:1c:ec:f1:89:f3:97:61:cc:70:d4:67:
8a:cf:a0:36:7c:6b:60:b2:01:37:02:5e:27:58:4a:
76:a8:b4:65:f1:d6:96:f6:92:f0:9d:de:9c:cb:a3:
14:47:31:66:f6:11:d6:e4:1c:b3:af:f1:e2:cf:9e:
cb:b0:60:87:0d:5f:13:0c:c6:0b:91:cf:4e:3f:83:
b4:01:2a:70:77:d0:0c:44:5b:b0:7f:a7:df:bd:e7:
db:2b:b1:7a:16:96:1a:50:b1:35:c4:28:0e:ec:fa:
c3:35:48:ab:d9:c0:29:ec:14:c7:2e:11:84:82:62:
81:77:88:ac:9e:02:bf:7b:b3:e0:16:e4:4b:c1:0a:
08:2d:ad:7d:48:34:86:c3:00:f4:d7:90:de:e1:54:
22:0b:16:f5:9b:42:bd:d9:fd:1b:a0:00:18:b8:e8:
b9:a3:8c:62:94:8c:ca:72:be:f8:91:52:74:89:cd:
9c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FC:51:A1:2E:7A:21:39:69:BF:99:28:6E:DA:EA:49:4F:98:D9:5D
X509v3 Authority Key Identifier:
keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/9fxRoS56ITlpv5kobtrqSU-Y2V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.254.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:47:0f:6a:b3:07:0c:f2:45:7d:7b:21:45:52:b9:8a:f0:f2:
cf:3c:c5:95:0c:36:ea:6b:df:39:d9:04:d9:06:13:59:3f:c3:
ba:79:8a:96:0e:5e:81:ee:50:6d:64:3a:ce:1d:94:3b:89:df:
f8:3f:00:0d:7b:65:9b:b9:77:40:c6:4a:05:08:0d:93:81:24:
2b:aa:57:e2:0c:43:2c:2e:ce:54:5e:a8:eb:b4:3f:41:a5:6c:
d0:b3:21:b5:47:34:ac:58:41:84:6e:87:cc:ee:3b:1f:f4:42:
72:9e:21:d8:8d:06:c1:4a:5b:89:b4:61:a1:29:43:ea:fc:02:
d6:74:41:c6:b1:9b:75:69:c3:9f:e9:15:3c:05:ff:06:42:43:
3a:0d:31:2f:42:f4:a0:47:27:43:0e:69:46:cf:f7:34:be:a5:
84:73:77:99:51:c0:5d:cc:d7:b1:52:4e:6a:c3:d6:c0:78:df:
52:d4:6a:a4:49:db:64:ae:ac:7d:01:97:1e:12:7a:34:c7:e6:
3d:1a:5c:d9:28:76:ce:7f:3b:c8:c0:ef:70:3f:6b:ee:b3:1f:
93:d7:12:8a:dd:4d:aa:21:ec:b9:c6:58:2d:e3:4c:c2:57:d2:
f3:d4:71:18:2d:30:54:02:0c:b4:40:8d:1c:7e:b0:78:b7:c3:
75:c7:f2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:05:56 2024 by rpki-client on console-fra.rpki-client.org