Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/daQhZDt0YumeomgQv-M7O1I7j80.roa
File: daQhZDt0YumeomgQv-M7O1I7j80.roa (raw, json)
Hash identifier: mfb3uLnKv766hR/3YokgzDoyhByPsIaOyGVr+0wvu6Q=
Subject key identifier: 75:A4:21:64:3B:74:62:E9:9E:A2:68:10:BF:E3:3B:3B:52:3B:8F:CD
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 018CC9BC3A6FC524FE3DA892100F3ED769D6
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/daQhZDt0YumeomgQv-M7O1I7j80.roa
Signing time: Tue 02 Jan 2024 10:33:25 +0000
ROA not before: Tue 02 Jan 2024 10:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47377
IP address blocks: 185.51.54.0/23 maxlen: 24
45.150.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:3a:6f:c5:24:fe:3d:a8:92:10:0f:3e:d7:69:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 2 10:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75a421643b7462e99ea26810bfe33b3b523b8fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:99:72:d1:f4:03:fe:63:dc:13:ae:92:41:26:
41:e7:43:fe:8c:8a:ec:13:26:2b:4d:55:a3:71:57:
d8:c7:8d:06:f5:aa:d5:16:2c:ae:b3:8c:f0:f3:69:
08:e6:45:1c:dc:71:7d:c0:27:7b:3c:4d:15:a8:b7:
23:b3:04:71:66:a0:7e:70:94:cb:58:db:a0:1c:3c:
25:16:1d:ad:2a:d4:a7:cc:85:a5:9e:60:65:db:d8:
54:1b:dc:39:e2:77:f6:7a:15:f3:b2:96:81:22:03:
c9:ab:fd:c6:57:a2:59:20:6f:d7:1d:fd:d9:55:16:
52:f7:ce:03:1b:ee:8f:39:af:62:da:c3:b1:37:46:
65:39:c2:92:e2:91:ca:27:c0:63:23:9e:b3:d9:19:
75:a0:5a:b2:5c:15:fc:94:ad:9e:05:7c:68:ec:14:
a4:f9:06:ab:61:57:76:12:fa:0a:5b:a1:65:fd:0a:
15:e4:12:e9:c4:a1:82:19:7f:37:15:5d:b1:78:38:
ab:44:16:0f:92:1f:5b:6b:39:1f:5b:5d:16:d1:59:
bd:d3:32:f1:04:dd:ef:76:29:a4:de:ee:9d:a1:de:
88:e6:f5:16:34:97:5d:82:b0:41:87:a5:ec:77:da:
c1:87:0a:53:45:ce:a3:6e:95:4d:c0:28:db:d9:ed:
d4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A4:21:64:3B:74:62:E9:9E:A2:68:10:BF:E3:3B:3B:52:3B:8F:CD
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/daQhZDt0YumeomgQv-M7O1I7j80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.116.0/22
185.51.54.0/23
Signature Algorithm: sha256WithRSAEncryption
26:53:b0:bb:90:b5:e5:c1:d5:59:13:07:03:32:bc:9a:d5:d3:
95:a5:35:cc:a1:91:60:cb:9a:91:f4:4a:0b:26:ae:d6:23:5e:
9c:c1:11:fd:ce:c3:79:44:1d:26:7d:05:1b:4a:77:6d:23:ab:
2f:bb:b2:8d:90:2b:44:b8:fc:cc:e5:fa:12:c9:91:a8:a0:3b:
f2:c9:2f:55:b0:a9:6d:59:4f:3b:67:27:b9:f3:69:d9:44:25:
9e:9e:8d:c5:fc:40:21:a0:d5:c9:7b:ae:51:2f:16:40:88:c6:
f6:c6:e7:88:00:ca:ce:c2:97:53:6d:be:b7:92:c7:d3:77:b0:
8d:bd:f2:a0:8d:1b:d3:a9:38:e7:c2:e4:7f:99:01:0c:0e:f5:
8f:18:3d:f8:63:e2:8c:dc:c9:be:f3:fb:3a:c7:46:43:e0:98:
17:62:fd:a5:ef:7d:19:eb:25:e1:98:3a:a4:be:5a:e1:f6:af:
77:ac:92:5f:62:e2:a8:ae:cf:74:24:c0:c1:2e:51:ff:44:33:
1c:99:d6:7d:26:16:32:0f:89:50:3d:88:43:38:16:f7:21:28:
17:f0:d1:0f:8b:fe:6a:54:dd:52:ee:b7:b8:fa:c0:94:95:5e:
79:87:54:a9:fe:87:27:bd:15:f1:5a:7f:27:28:77:2c:01:9d:
c0:c8:f9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:50:31 2024 by rpki-client on console-fra.rpki-client.org