Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/1-_KJPDIJXPqZE6wlSMYKCN9PsD4.roa
File: 1-_KJPDIJXPqZE6wlSMYKCN9PsD4.roa (raw, json)
Hash identifier: pAnW6pceU/b3Fs/ciYw70J/5fQuyk3fb4arM4SLGndI=
Subject key identifier: FB:F2:89:3C:32:09:5C:FA:99:13:AC:25:48:C6:0A:08:DF:4F:B0:3E
Certificate issuer: /CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Certificate serial: 018CC3B68DC38D83292DF863DAF387DC48F2
Authority key identifier: 9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/1-_KJPDIJXPqZE6wlSMYKCN9PsD4.roa
Signing time: Mon 01 Jan 2024 06:29:30 +0000
ROA not before: Mon 01 Jan 2024 06:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208770
IP address blocks: 45.85.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8d:c3:8d:83:29:2d:f8:63:da:f3:87:dc:48:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Validity
Not Before: Jan 1 06:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbf2893c32095cfa9913ac2548c60a08df4fb03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:41:7c:5f:ee:e5:78:87:24:3a:97:58:a8:cc:
33:ef:d1:07:1e:8b:0d:6f:19:37:17:a2:d5:b1:7a:
d2:30:90:95:8e:4e:75:f8:9f:12:f8:49:e9:94:09:
a0:97:3d:32:e0:62:a5:5f:a4:54:78:fb:e9:08:00:
a0:57:ce:d9:9e:cc:0d:f3:f7:cf:74:65:85:9e:0e:
40:1e:5e:bf:36:37:b5:dd:8e:f7:f1:9b:e9:c1:64:
7b:3c:b9:3d:c7:e3:07:40:be:df:f2:cb:65:1e:02:
12:61:73:49:93:4f:da:2c:e2:44:48:f5:b5:7f:8f:
98:24:2d:88:58:c5:e5:40:e9:06:e7:64:7e:e6:7b:
ca:da:58:b8:08:37:59:08:cb:9c:df:29:99:c4:6c:
ab:73:7c:e1:be:f3:dc:7b:9a:76:73:f5:6b:55:bb:
4c:e2:9e:fc:78:a4:3f:ed:40:65:ba:2c:0f:73:6b:
fa:ec:62:db:98:ed:a9:03:c9:e3:22:71:20:a1:2f:
8f:45:3d:be:83:4a:4c:f7:88:57:c5:58:2f:9b:91:
fd:4f:ec:1b:12:01:fb:cc:42:73:07:93:af:67:a1:
b8:51:4f:c6:a0:5a:be:8c:de:9b:4b:85:d8:cd:97:
9b:62:a5:34:80:30:91:a4:b0:dd:66:f5:05:39:65:
5e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F2:89:3C:32:09:5C:FA:99:13:AC:25:48:C6:0A:08:DF:4F:B0:3E
X509v3 Authority Key Identifier:
keyid:9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/1-_KJPDIJXPqZE6wlSMYKCN9PsD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.196.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:59:45:db:89:dd:52:1e:64:58:87:4e:07:9c:39:40:91:77:
be:81:42:df:30:0a:37:ed:c7:f8:10:f7:ac:73:de:89:68:ca:
52:c0:76:44:db:70:bd:3e:d2:fe:49:a1:9f:91:27:f2:04:02:
fc:12:89:77:44:43:d4:80:56:79:c6:01:fd:d8:63:42:e4:d2:
0d:cc:d1:8d:5e:75:ab:0e:11:0b:f7:6c:ef:5b:60:f6:cb:f2:
df:4b:cc:cd:3b:24:4e:88:6f:c4:9a:16:85:4f:3b:f5:7a:79:
f5:d4:48:89:b2:56:2c:b4:06:18:2c:be:c4:6d:c1:14:7e:95:
22:1a:c7:14:9d:a7:18:ef:20:95:de:85:be:ca:a4:af:af:22:
7b:60:1e:9f:7a:31:cd:2c:b3:07:b0:15:45:ce:12:43:96:b0:
2d:a5:51:65:5c:5e:9b:d3:d6:5b:d0:17:ad:ce:ec:72:67:80:
b0:5d:fe:1d:a9:61:86:0a:a6:0d:91:27:1a:51:9b:ce:d4:23:
1e:00:db:1e:f8:59:2a:58:a5:c1:40:c3:f9:50:a9:88:dd:e1:
d9:b4:ce:24:61:de:4d:02:b9:19:f0:ed:fa:32:a8:a4:3e:ef:
90:b8:ce:85:81:32:7a:ac:e5:fa:5d:2e:c5:d1:1e:82:18:0b:
e1:a2:fc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 08:16:30 2024 by rpki-client on console-fra.rpki-client.org