Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c5vJX3MEY-MK592Z3Nry72ieVdI.roa
File: c5vJX3MEY-MK592Z3Nry72ieVdI.roa (raw, json)
Hash identifier: iRpjFEsXYmkSktB43F1repuN+5BwTmQvmgTtb5W6J+M=
Subject key identifier: 73:9B:C9:5F:73:04:63:E3:0A:E7:DD:99:DC:DA:F2:EF:68:9E:55:D2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCE694AEDF48FF6FEB88C5D896E74F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c5vJX3MEY-MK592Z3Nry72ieVdI.roa
Signing time: Tue 02 Jan 2024 06:29:29 +0000
ROA not before: Tue 02 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47969
IP address blocks: 45.9.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:e6:94:ae:df:48:ff:6f:eb:88:c5:d8:96:e7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=739bc95f730463e30ae7dd99dcdaf2ef689e55d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:e8:4b:8f:66:a4:f4:1a:96:1f:75:9c:ef:
df:54:91:85:6e:a5:c7:7a:78:2f:ef:cd:e7:e1:89:
8f:71:55:34:44:3a:73:42:2f:4c:7e:bb:79:8d:59:
de:bf:8a:84:44:23:87:4d:aa:e8:6b:de:9b:3b:bc:
cd:f7:52:b3:a5:6d:2b:40:3e:73:63:cc:fa:5d:df:
d2:87:64:a3:13:90:23:fa:2f:d1:69:ae:0d:3c:0f:
fc:6b:da:69:56:8a:cc:bc:f7:92:03:f4:c4:75:4c:
67:cb:a3:d5:9c:f5:06:08:72:7c:00:9c:48:44:d7:
c2:c3:7a:8e:cb:7e:53:fe:42:0f:cb:e7:fe:e9:ba:
b2:6d:43:6e:0d:54:bf:e7:73:61:eb:e9:f3:82:41:
8e:b2:bb:db:21:52:f0:d0:13:28:00:6e:2c:3b:92:
e4:4b:86:29:fd:0e:52:8a:ef:13:c2:c5:1d:c9:74:
74:6e:60:19:42:99:21:0f:63:16:23:d1:32:d7:32:
71:2f:69:d9:3a:65:bf:c1:57:09:d2:cc:2c:13:18:
80:31:2c:da:c3:90:37:36:6f:19:26:71:00:40:33:
c3:e9:fa:29:63:5a:b0:07:e6:fd:ef:be:83:1e:ca:
fd:21:00:5c:e6:17:da:63:79:3d:42:81:7d:d4:8e:
59:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9B:C9:5F:73:04:63:E3:0A:E7:DD:99:DC:DA:F2:EF:68:9E:55:D2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c5vJX3MEY-MK592Z3Nry72ieVdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.158.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:67:bb:93:a5:a5:c5:4e:e0:6d:cc:2a:c6:65:3b:92:fa:d0:
d3:2c:e1:64:65:a2:27:55:f7:2d:67:ac:15:e0:0e:c1:95:04:
30:ee:d9:4b:5b:a2:25:aa:e3:c0:12:a5:50:0b:2c:ac:d8:63:
88:be:de:9f:48:98:b9:7e:6a:20:97:1c:d1:42:1e:d7:97:15:
ce:99:84:8a:db:73:e2:12:1b:39:5b:70:a9:84:4c:8f:be:e8:
4d:78:3a:36:24:15:f3:63:b8:d8:12:42:51:81:f8:4f:ab:d5:
d1:c2:6b:6a:7e:d2:71:90:94:5e:32:17:ad:ae:ea:cb:19:d2:
24:47:9f:d0:72:97:72:58:91:b9:99:ab:40:e0:a4:b3:1b:d6:
50:fa:7c:47:c3:b7:45:f0:ad:a0:d8:5e:f4:80:d1:7e:f4:08:
a5:92:66:38:ec:af:55:cc:37:c8:07:4f:f2:58:2d:79:63:ec:
9c:92:d6:3a:80:f7:cc:1b:11:46:b3:12:f2:46:f5:9f:49:95:
01:07:da:12:10:d0:11:a2:09:2d:70:a3:a3:6f:22:b6:18:1d:
aa:02:04:0e:d5:94:2d:54:ac:02:54:48:4d:f6:69:43:a3:be:
30:8d:a6:aa:4d:9a:4c:52:58:47:4c:3b:f1:6e:5e:2a:e8:fb:
38:84:5f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:58:06 2024 by rpki-client on console-ams.rpki-client.org