Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/jYk7yAuSTNOCzugG3X3kq8373LM.roa
File: jYk7yAuSTNOCzugG3X3kq8373LM.roa (raw, json)
Hash identifier: hRoaM3cXWjUd/CfYvZI6zBW+RfoWxnUN4/2GZdVIe/M=
Subject key identifier: 8D:89:3B:C8:0B:92:4C:D3:82:CE:E8:06:DD:7D:E4:AB:CD:FB:DC:B3
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 018CC4930CAC5568094401B10E124BCDAF39
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/jYk7yAuSTNOCzugG3X3kq8373LM.roa
Signing time: Mon 01 Jan 2024 10:30:20 +0000
ROA not before: Mon 01 Jan 2024 10:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.134.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0c:ac:55:68:09:44:01:b1:0e:12:4b:cd:af:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Jan 1 10:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d893bc80b924cd382cee806dd7de4abcdfbdcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:78:da:c6:a1:0b:2b:60:58:70:70:a9:14:d7:
cf:88:a1:81:1c:a1:ad:2a:78:00:bb:0c:62:28:20:
18:1b:a8:5d:34:19:16:7b:93:52:fc:f8:03:e1:3e:
fc:d4:1e:5b:da:44:db:1a:1a:8e:d6:fa:99:4b:ce:
5e:36:64:7a:3b:1d:0a:4c:61:8d:14:d0:01:71:dd:
b8:ed:78:08:e3:7f:79:fd:a4:dc:ab:5c:ad:5b:5d:
73:b4:be:ec:78:f8:7c:4f:a8:dd:22:0b:5a:d1:9d:
fb:f8:80:7c:53:92:86:75:72:09:0b:97:f2:4b:92:
8b:60:78:87:69:e7:d4:1c:5e:85:93:7d:d7:7e:e9:
2d:10:a9:4b:90:48:4e:86:39:41:50:fd:0f:3d:35:
4d:4d:3b:65:e8:16:17:34:ce:73:6e:2a:9a:a3:d3:
97:8b:60:d9:25:bb:a4:ba:31:f9:ad:c0:bf:80:ef:
25:6c:e7:fc:c0:a3:fd:70:e3:9b:3f:06:7a:d3:76:
8a:60:0b:ba:7a:bc:19:0a:1e:71:c5:8e:21:7a:dc:
c8:3a:0f:f1:8f:f4:62:f0:0b:da:12:e8:a8:f2:fa:
89:cb:29:a0:59:9b:71:7d:80:2c:91:bc:14:9f:b0:
1a:40:37:e3:24:e1:58:65:ee:ca:78:4e:3a:3f:7a:
12:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:89:3B:C8:0B:92:4C:D3:82:CE:E8:06:DD:7D:E4:AB:CD:FB:DC:B3
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/jYk7yAuSTNOCzugG3X3kq8373LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.8.0/24
Signature Algorithm: sha256WithRSAEncryption
88:28:13:0a:15:1f:43:d5:df:23:f6:9e:c4:9c:09:7a:2c:65:
66:ef:ce:9a:48:34:4c:b5:0e:37:cd:87:fa:e5:75:fd:e0:77:
15:2a:82:6d:9d:20:79:a9:a4:c6:cd:ae:d2:b8:2d:07:66:91:
f0:2e:ce:b2:03:d9:3e:99:62:4c:48:8e:28:32:df:eb:2e:3a:
5a:58:1d:74:eb:6b:ff:52:20:2a:38:77:fb:82:9e:91:44:ef:
fd:66:e8:ce:7d:c7:a2:f5:63:fe:f2:08:3c:b2:b8:17:c4:d1:
5b:89:15:a6:16:1e:99:34:5e:6e:42:81:d3:1e:e3:e0:27:e0:
47:90:59:af:8c:73:11:e7:72:e9:2b:af:28:e6:42:fa:07:10:
9e:5b:da:bd:94:01:ba:5d:17:2e:93:d1:cd:7d:d1:be:18:c2:
c0:94:8e:22:74:71:5a:d5:83:d0:69:83:b8:26:5b:34:65:a5:
56:46:12:fc:f7:ba:c7:f9:57:53:02:d2:41:7a:09:4e:ec:01:
10:11:62:26:75:98:0e:79:10:e1:c4:09:8e:54:d3:05:03:53:
ce:73:98:10:f4:65:22:90:96:fb:d4:bb:24:a0:99:48:0e:58:
a5:c2:f8:ee:6a:fb:93:7d:11:f9:79:07:82:9b:61:ab:43:61:
d2:68:35:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:25:40 2024 by rpki-client on console-fra.rpki-client.org