Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1gBnyQUMACFemPbNOOJBDW5fQDc.roa
File: 1gBnyQUMACFemPbNOOJBDW5fQDc.roa (raw, json)
Hash identifier: FhzA+PXd0cpTOjchM4JPJ+GzHq/tyCBOaRI8leoFK+U=
Subject key identifier: D6:00:67:C9:05:0C:00:21:5E:98:F6:CD:38:E2:41:0D:6E:5F:40:37
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DF9F16213877084918624DD8897F29
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1gBnyQUMACFemPbNOOJBDW5fQDc.roa
Signing time: Tue 02 Jan 2024 06:32:27 +0000
ROA not before: Tue 02 Jan 2024 06:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59994
IP address blocks: 45.137.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Jun 2024 15:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:9f:16:21:38:77:08:49:18:62:4d:d8:89:7f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d60067c9050c00215e98f6cd38e2410d6e5f4037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:49:81:e6:5b:db:07:27:75:59:d4:b9:46:
46:ce:e4:79:90:a9:bc:c6:ee:4b:74:7b:f8:06:d8:
ee:bf:16:92:91:83:ee:87:c8:7d:87:af:4a:fb:3b:
0f:1c:44:76:19:7b:ae:c0:7e:cf:72:55:41:0c:69:
64:6f:a0:ab:92:00:1f:b9:ba:8d:c7:3a:17:fa:61:
0c:59:09:05:d9:5b:b4:63:3a:14:60:83:07:31:f9:
48:2a:c3:e0:a0:00:68:28:3f:68:2d:61:89:52:50:
39:aa:97:55:fa:6e:57:0d:b1:e2:55:61:7e:23:89:
2d:7a:79:34:28:24:ff:81:f9:50:e1:49:60:40:1f:
8e:de:74:5f:26:8f:f7:26:b9:92:b1:2d:12:00:04:
20:fa:cc:b1:e7:41:94:6d:5b:d5:93:bc:49:33:7f:
d4:9e:fc:01:42:a4:cb:0b:fa:d2:5c:f0:48:b8:61:
2e:47:f5:39:cc:d7:78:c6:a8:ac:d4:11:89:bf:9b:
12:72:95:4b:aa:be:a6:69:db:78:2a:f2:61:1d:ba:
f5:64:c4:6e:36:3b:af:54:df:eb:f2:ea:56:7c:30:
ea:59:08:e9:53:59:19:ca:7e:16:32:05:2d:5a:79:
79:de:6a:a2:45:d5:0c:fc:ec:31:ba:d3:79:c7:42:
ad:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:00:67:C9:05:0C:00:21:5E:98:F6:CD:38:E2:41:0D:6E:5F:40:37
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1gBnyQUMACFemPbNOOJBDW5fQDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.107.0/24
Signature Algorithm: sha256WithRSAEncryption
32:73:08:fd:ff:8e:07:9d:42:61:2e:91:d9:c1:96:0d:c4:0d:
e7:ac:fe:5b:f5:7d:dd:7b:b7:f7:e6:0b:75:17:16:7e:c5:e9:
29:80:e8:23:f6:13:b7:91:55:38:68:fe:cb:8d:a0:eb:25:5b:
3c:c6:3e:5f:77:c3:3c:93:89:54:a2:df:14:1c:e4:8f:07:f9:
d8:79:56:ea:d1:89:46:9c:76:0b:85:33:ca:9e:2a:11:89:ff:
e3:79:a6:c9:70:46:c4:c2:d2:55:77:e9:ea:bf:2c:fb:ce:f6:
7b:ba:0a:57:bc:ab:94:21:ac:12:39:59:ca:cf:1c:d6:2e:72:
86:bc:73:08:ac:b7:01:65:21:93:41:e3:6b:44:d9:3e:61:19:
83:a9:7c:5e:5f:bb:f1:7b:07:cb:28:3e:46:e7:27:19:d1:14:
9d:62:f1:a2:24:33:fd:8d:e4:58:ee:c7:68:c1:58:5e:80:26:
15:09:28:97:7e:be:fa:8d:e4:e3:bf:c6:f9:3d:c9:26:a6:ab:
74:5a:cc:b9:35:34:9b:85:46:31:ef:20:15:2d:bd:69:97:39:
1d:25:52:3f:ec:fe:19:ac:ca:0a:c3:d7:69:50:59:ef:a7:ee:
e9:8e:e1:e8:98:f2:6b:a2:28:cc:44:07:76:34:fa:fb:d4:7d:
ae:8b:e4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 22:45:36 2024 by rpki-client on console-ams.rpki-client.org