Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/bui5NFlRO1fwZtx4u5P1IBHq-Mo.roa
File: bui5NFlRO1fwZtx4u5P1IBHq-Mo.roa (raw, json)
Hash identifier: xed8Wfv/fhkQfqqDxWqldGuDTapPMfaFRfcotwhJ2EM=
Subject key identifier: 6E:E8:B9:34:59:51:3B:57:F0:66:DC:78:BB:93:F5:20:11:EA:F8:CA
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 018EBA1A5F4684D10AF9F83D244F39ABAAEE
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/bui5NFlRO1fwZtx4u5P1IBHq-Mo.roa
Signing time: Sun 07 Apr 2024 19:47:54 +0000
ROA not before: Sun 07 Apr 2024 19:47:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.153.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ba:1a:5f:46:84:d1:0a:f9:f8:3d:24:4f:39:ab:aa:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Apr 7 19:47:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ee8b93459513b57f066dc78bb93f52011eaf8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9b:46:a0:7a:5f:6f:4b:14:e2:d8:7b:3f:8b:
a5:6d:e7:ab:77:7b:f9:68:0b:88:cb:71:4b:98:dc:
9e:26:9a:c8:82:26:28:11:6a:78:f2:df:ee:4e:51:
56:98:84:6a:f9:db:dd:36:c6:55:e5:0d:1f:6b:aa:
71:d7:a3:72:89:8e:50:bd:50:9e:59:4d:e2:09:d5:
de:c7:4e:10:44:e8:ae:a3:13:21:43:b7:b7:9f:a5:
a8:40:4b:0d:f1:22:e9:58:a5:27:43:28:35:d5:58:
28:04:a7:dd:1e:4f:c5:c5:0d:43:7d:62:7f:53:37:
a3:63:73:bb:1b:9d:c0:88:39:a1:9d:f1:b7:5a:a6:
66:53:35:9e:38:0a:ef:4e:b1:47:ca:06:c7:37:49:
ca:e6:f7:b9:ca:ec:79:d3:70:ed:68:13:72:97:9c:
03:0d:ca:4a:29:0f:a8:98:67:60:6b:0b:8f:e3:c6:
1d:62:72:c0:0f:ef:c5:94:5e:4c:23:9f:49:0b:a1:
33:a5:89:d1:d7:e4:91:6c:b7:a9:a0:4d:b9:fd:c1:
3d:35:47:9e:f9:7a:de:1c:ca:f6:e1:d4:3f:ed:34:
bf:3b:c0:d6:1a:67:af:34:3a:e4:d8:ee:c6:18:6d:
8a:55:d5:ba:0e:6f:3a:a0:30:58:d9:f7:0f:17:e1:
5b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E8:B9:34:59:51:3B:57:F0:66:DC:78:BB:93:F5:20:11:EA:F8:CA
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/bui5NFlRO1fwZtx4u5P1IBHq-Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.160.0/22
Signature Algorithm: sha256WithRSAEncryption
37:78:85:4c:fa:48:91:cd:f3:15:4d:e4:b4:f2:7c:40:f3:d0:
ae:c6:c1:79:e6:3c:83:de:6c:cc:4a:06:3d:f4:9f:76:e9:f1:
de:ee:26:cd:7f:08:12:8e:e0:df:b8:14:b4:f0:ab:f5:45:59:
b6:7c:0a:a4:58:37:cb:21:d3:29:e0:a8:ea:19:29:0c:5d:bd:
ac:33:58:ab:57:e4:7b:84:77:63:d4:55:3a:ad:dd:72:68:91:
16:53:ce:d4:47:3f:71:a3:4e:b9:78:74:a4:24:87:4b:69:2f:
77:90:13:5e:a2:41:b5:d9:17:e3:ee:0d:5f:f2:26:5f:71:07:
6e:75:90:0f:53:07:a0:72:66:b4:46:12:80:92:b8:7d:99:06:
6c:f0:a8:20:da:12:b7:0e:bc:30:f5:13:46:4c:f6:99:a5:4b:
be:62:2c:c6:c7:56:24:90:2e:d7:c9:1b:5a:8d:bd:2e:1e:ee:
34:78:40:e7:d8:a5:e1:11:89:48:d3:54:15:39:38:bf:fd:75:
ec:33:71:e0:cd:1f:b8:eb:05:55:de:0b:72:5e:b0:c8:2b:3f:
24:b7:0b:09:39:95:db:20:b1:0c:00:94:c6:ae:a5:65:ad:9c:
b4:3f:44:7c:32:81:63:3e:95:78:e9:03:d6:65:67:06:42:07:
f3:63:30:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:25:53 2024 by rpki-client on console-fra.rpki-client.org