Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/jV7VXT5oeg4POGPg2rlVQ7Bck2k.roa
File: jV7VXT5oeg4POGPg2rlVQ7Bck2k.roa (raw, json)
Hash identifier: Sg8C397Y7V099d7uDeUVm1bfIlVQD7Z7sE1VbMbE1Dc=
Subject key identifier: 8D:5E:D5:5D:3E:68:7A:0E:0F:38:63:E0:DA:B9:55:43:B0:5C:93:69
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649DACD401B5C2F93057A20979EAF8D
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/jV7VXT5oeg4POGPg2rlVQ7Bck2k.roa
Signing time: Mon 01 Jan 2024 18:29:38 +0000
ROA not before: Mon 01 Jan 2024 18:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42157
IP address blocks: 151.251.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:da:cd:40:1b:5c:2f:93:05:7a:20:97:9e:af:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d5ed55d3e687a0e0f3863e0dab95543b05c9369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:5d:95:ea:04:fa:eb:7f:2c:98:e3:2b:02:
37:65:5a:a2:53:d4:56:22:3b:d5:45:3c:90:6c:73:
c6:6c:b4:5c:14:50:64:d1:47:2e:87:aa:e8:ee:1f:
7f:10:6c:85:fc:09:9a:c7:28:d3:d4:00:0a:59:ce:
ad:44:fc:af:78:60:c3:30:8e:46:66:f0:2d:12:22:
71:85:a1:68:71:9d:f2:5b:ad:0c:22:d8:69:85:e0:
6f:9b:6c:24:19:a8:51:d7:bc:4e:8a:25:41:0d:85:
95:66:dd:de:a8:ca:d2:6e:83:3d:ab:25:fa:22:32:
e5:ad:87:6b:ed:32:8f:2f:69:bc:94:d9:14:8e:37:
e8:70:4e:a7:cb:db:dd:a1:79:ef:e6:4e:40:b2:98:
70:50:75:f8:8a:13:5a:8e:f6:95:85:b0:16:97:73:
cd:09:f0:1d:17:1b:d1:c4:5d:a7:f5:c5:32:11:87:
d1:59:49:c9:92:2d:39:de:6b:9b:04:7c:68:fb:7b:
90:44:65:fc:dc:03:67:aa:07:09:43:79:71:3a:be:
9f:31:45:62:c2:85:4c:e3:3b:0c:81:7d:9e:e2:79:
ab:f2:cd:76:66:0f:b9:b2:c6:69:89:41:96:d7:f7:
62:ee:2d:63:f2:f9:2d:55:2b:7a:ab:cb:5d:56:86:
7c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5E:D5:5D:3E:68:7A:0E:0F:38:63:E0:DA:B9:55:43:B0:5C:93:69
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/jV7VXT5oeg4POGPg2rlVQ7Bck2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.251.64.0/23
Signature Algorithm: sha256WithRSAEncryption
11:73:14:2f:de:e0:47:50:39:80:f7:14:53:a6:d7:38:53:1f:
28:de:b8:59:91:15:87:f1:2a:1c:51:a6:0a:90:ec:04:96:4f:
6e:07:79:e3:f9:2f:34:0e:89:12:e1:a6:39:ee:0c:4c:4b:be:
12:98:2f:66:d5:ff:d1:de:c8:73:e1:ad:af:5f:35:e4:3b:6f:
d9:a4:41:50:31:5d:a5:51:bf:bd:05:94:a4:85:19:24:26:87:
07:44:9e:37:64:a7:af:10:ae:93:52:85:5d:f6:db:b9:53:df:
be:32:01:60:ca:c5:4b:c7:93:ff:e0:09:1a:58:9e:9e:a5:d1:
5a:12:e5:b9:58:dd:8f:e7:60:8a:4c:7f:60:c7:bb:60:da:b5:
f7:7a:54:e5:22:08:1e:ce:f4:6f:6c:76:70:67:95:fc:0d:65:
cd:0a:df:c6:b5:34:60:8c:82:96:eb:03:74:97:8a:d4:44:7f:
ef:58:90:72:5d:6a:70:9e:9f:c8:d5:3b:0f:1e:6d:43:a9:5b:
b7:f3:24:9f:0d:af:bb:26:ba:4b:09:e7:b1:c9:b1:d3:e1:eb:
38:57:2e:a7:0c:77:3c:00:0c:58:bd:e0:74:cb:c2:9f:84:5a:
83:cb:26:ed:40:84:d2:90:2f:82:6c:d8:8e:b9:65:13:a9:64:
ad:28:b2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:19:57 2024 by rpki-client on console-fra.rpki-client.org