Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5CbGrQWosqm3smEJ3mH0R7MB4M0.roa
File: 5CbGrQWosqm3smEJ3mH0R7MB4M0.roa (raw, json)
Hash identifier: wj9T5p8H75KBEae4FCcINFWsCjV/jWsubmIJHi8lUVY=
Subject key identifier: E4:26:C6:AD:05:A8:B2:A9:B7:B2:61:09:DE:61:F4:47:B3:01:E0:CD
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8F0F6EFD5CCC2C90A0E4F6757E8C7
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5CbGrQWosqm3smEJ3mH0R7MB4M0.roa
Signing time: Mon 01 Jan 2024 20:30:58 +0000
ROA not before: Mon 01 Jan 2024 20:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213064
IP address blocks: 45.134.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:f0:f6:ef:d5:cc:c2:c9:0a:0e:4f:67:57:e8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e426c6ad05a8b2a9b7b26109de61f447b301e0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:50:de:f1:18:13:6f:fa:12:96:fc:34:6a:
6b:1e:00:89:3a:35:d0:ce:04:e8:a7:c6:f3:57:d6:
cb:98:13:3f:9a:13:ce:6b:32:f5:4a:45:50:4e:aa:
40:a1:25:2d:29:af:2d:ae:8c:b0:bf:77:22:be:43:
a4:1a:cd:c3:80:92:39:26:5e:f6:b0:16:0f:02:76:
0c:6b:75:ad:f6:2d:d1:8b:2f:b0:98:03:e7:6b:9f:
5f:d8:94:b2:1b:59:9d:68:e6:9b:7d:94:26:f6:9c:
57:f3:eb:10:05:1f:84:5d:4a:cb:cb:bb:1d:d9:b3:
4f:85:7f:90:59:01:b6:68:e5:5b:4e:4b:f0:6a:e1:
07:1f:9a:47:ad:92:a9:0c:86:6b:7f:b5:af:0a:12:
f5:fc:92:4f:ca:0d:8d:d2:f6:bb:24:71:0b:d6:eb:
6c:ef:92:58:14:8b:98:4d:d5:10:f1:9c:b1:31:41:
a2:68:a1:e2:b5:c0:21:97:92:9a:c8:51:6b:ec:33:
74:32:97:bd:03:79:c7:ce:2d:49:fa:66:6f:58:7b:
d2:72:70:8e:e8:55:44:d2:01:84:01:3c:63:62:a3:
de:a5:b5:86:91:47:84:47:3d:4e:61:a7:8e:cd:e2:
8a:b7:d7:de:d1:68:83:1a:eb:1c:42:f8:ca:dd:61:
8f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:26:C6:AD:05:A8:B2:A9:B7:B2:61:09:DE:61:F4:47:B3:01:E0:CD
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5CbGrQWosqm3smEJ3mH0R7MB4M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.90.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:0a:c7:73:2a:18:48:c5:53:86:28:75:4a:f4:7d:da:3c:54:
99:5b:35:61:93:5e:0a:c6:5b:e8:4f:50:d2:d4:7f:82:0d:99:
0f:91:90:1f:27:68:03:2d:60:62:ab:d1:32:5a:7a:44:43:37:
5b:a7:12:3f:6a:37:bf:75:06:1f:83:3e:2f:10:2d:e0:6c:43:
09:3e:26:3f:eb:bd:e4:e4:7f:2d:37:0c:d7:0c:f4:ed:98:0d:
02:39:b3:b7:e7:e5:bb:35:a0:1b:77:f8:1f:56:49:2e:1d:6a:
64:23:dd:d4:09:c3:1a:ef:8c:92:fe:8a:8f:ba:f8:e5:50:07:
e0:2b:d6:c7:48:ae:49:63:e8:b7:cd:13:37:23:06:d3:00:0e:
21:09:0e:ea:3b:aa:57:5a:e5:67:68:aa:d4:27:d7:d6:1d:dd:
27:98:18:5b:ad:e6:ae:07:32:41:bb:61:c6:aa:c0:4b:68:dd:
0a:fc:b7:14:92:32:58:75:c2:3c:54:26:ac:73:b6:86:a0:dd:
b5:01:f0:4a:3a:2b:b6:38:b6:e6:76:80:d5:4c:6f:da:b0:1d:
2c:cf:6c:17:63:3f:3a:f2:e3:03:fe:87:ea:6f:4f:24:90:e4:
b9:bc:41:61:a4:62:d9:32:de:fc:9a:cc:b9:73:f6:f5:f5:fc:
60:6f:17:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:27:29 2024 by rpki-client on console-fra.rpki-client.org