Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/fG-gkspwtXVWp8YrldqZfdtnQ-U.roa
File: fG-gkspwtXVWp8YrldqZfdtnQ-U.roa (raw, json)
Hash identifier: Xu8JSOukOxGKPcuWoWzssoybBoWwyvEnyNEggsE14Qg=
Subject key identifier: 7C:6F:A0:92:CA:70:B5:75:56:A7:C6:2B:95:DA:99:7D:DB:67:43:E5
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018CC795259F8BD5579A877F10E7AF0D18A5
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/fG-gkspwtXVWp8YrldqZfdtnQ-U.roa
Signing time: Tue 02 Jan 2024 00:31:29 +0000
ROA not before: Tue 02 Jan 2024 00:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60655
IP address blocks: 45.91.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:25:9f:8b:d5:57:9a:87:7f:10:e7:af:0d:18:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 00:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c6fa092ca70b57556a7c62b95da997ddb6743e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:99:30:9e:e1:55:d3:c4:63:81:0c:6b:05:62:
58:fa:5d:c8:b8:c2:c6:29:2c:e1:94:ae:1e:14:b7:
f2:dd:3c:04:09:6b:6c:dc:84:de:93:7a:05:39:09:
b4:96:b5:5b:db:0d:9e:04:c0:d8:a4:3e:99:8b:24:
80:e6:ad:da:5f:76:ae:56:22:f2:9f:9a:57:c9:3f:
03:4c:96:2e:a4:97:a0:fd:14:80:e5:f4:91:2c:e8:
a6:c4:12:40:bc:64:09:c0:2c:15:a1:15:23:af:9c:
d8:a8:b1:d6:39:93:c1:5f:83:8f:64:5e:c0:0e:a1:
f2:ff:94:d8:64:50:33:b7:6b:d7:6f:66:01:56:64:
9b:15:00:7c:21:45:fa:09:d3:58:23:80:b8:63:42:
34:3f:50:06:c6:c1:98:f5:56:6d:09:ca:46:75:70:
32:bc:20:95:9c:de:6a:25:82:15:c2:8f:b4:98:61:
e1:0e:b2:b6:ba:7b:3c:57:d2:89:63:c3:f4:68:a1:
1d:22:2b:e0:a3:85:bd:9b:2b:71:8e:cb:97:4a:8a:
cd:1c:60:18:62:8a:a9:d0:f1:e5:ab:cf:81:fa:da:
39:92:43:d0:02:be:f3:f0:53:89:79:eb:f1:99:59:
4a:ee:8f:7a:37:78:c3:a8:7a:10:2a:b4:10:f8:fa:
1f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6F:A0:92:CA:70:B5:75:56:A7:C6:2B:95:DA:99:7D:DB:67:43:E5
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/fG-gkspwtXVWp8YrldqZfdtnQ-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.163.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:39:2c:9c:f0:e6:81:ff:29:5f:69:5b:c6:59:24:fa:91:1f:
58:8f:25:02:b3:e0:eb:1f:5f:81:64:8e:6f:7f:81:78:e3:10:
1c:8e:0c:49:2c:ee:7b:bc:85:72:e1:cc:da:ab:2e:44:64:98:
54:3d:72:ab:e6:96:a2:36:7e:a4:57:d6:a3:d6:0c:43:a1:46:
73:43:25:70:f9:92:e2:49:71:04:34:03:ab:0b:cd:44:92:27:
83:fb:69:44:2a:b8:76:8c:95:c9:a7:9b:47:48:19:e3:d0:14:
c8:af:06:59:43:24:46:bb:48:7e:f2:7d:5e:6f:5c:43:08:fb:
17:6b:c2:5e:fb:16:44:71:1c:6b:3d:9c:d2:33:8e:c8:c6:38:
4a:70:3e:34:7e:14:56:c2:16:c2:a6:31:69:ba:5a:10:65:6f:
4a:c1:99:d3:30:41:ac:c0:ea:6a:50:43:f0:4d:91:9a:06:d6:
23:e1:44:3d:c2:89:42:a6:b9:99:1e:52:05:b3:67:04:89:72:
df:b8:e2:62:6d:83:e5:1e:97:99:70:c3:64:b9:c2:29:6c:3c:
77:f7:f0:1c:ff:cf:f4:e9:f2:5b:57:d7:5d:92:44:b3:b6:09:
8c:43:3e:ca:16:9a:42:37:c4:6b:01:c9:ea:96:8c:7e:b7:b8:
09:c6:02:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 10:41:39 2024 by rpki-client on console-fra.rpki-client.org