Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/7U5BOUk5ZxxwVE8sLDyVQRGI0hE.roa
File: 7U5BOUk5ZxxwVE8sLDyVQRGI0hE.roa (raw, json)
Hash identifier: rwMaCZVQtGgyX47xm0AkQKv27ModF6drItYb8xAPbPg=
Subject key identifier: ED:4E:41:39:49:39:67:1C:70:54:4F:2C:2C:3C:95:41:11:88:D2:11
Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial: 018CC5DD40FC01F47DB7FC4A7550F0191D61
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/7U5BOUk5ZxxwVE8sLDyVQRGI0hE.roa
Signing time: Mon 01 Jan 2024 16:31:00 +0000
ROA not before: Mon 01 Jan 2024 16:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206483
IP address blocks: 84.45.31.0/24 maxlen: 24
84.45.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:40:fc:01:f4:7d:b7:fc:4a:75:50:f0:19:1d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Validity
Not Before: Jan 1 16:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed4e41394939671c70544f2c2c3c95411188d211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:4e:db:bd:9a:64:2d:72:69:e5:6a:95:a0:
5c:68:3a:1e:e2:33:8d:d8:76:04:7c:00:bf:37:55:
32:ac:12:9a:60:40:f3:8e:d8:5c:b5:ca:60:4c:cd:
d5:5d:1c:58:96:22:11:a6:94:81:60:69:57:86:7d:
79:0a:f0:db:5d:62:97:9f:6c:30:d8:39:49:e1:45:
a6:0d:96:70:ae:24:2e:a8:9d:52:8c:34:3f:b5:3a:
9d:8e:67:0d:f9:7b:2c:7c:36:11:c5:dd:01:5d:63:
6b:43:ab:d8:07:9b:59:39:0b:7f:ba:e2:39:5e:1f:
5a:65:33:99:7a:36:cb:6b:af:ae:ba:8d:d8:eb:71:
fa:e3:5d:87:51:66:3a:4b:1c:83:46:4e:1e:6c:89:
ca:7c:10:ac:9c:a2:25:5e:86:25:6c:bd:e0:ac:6d:
4c:da:47:93:22:65:5b:19:75:eb:5e:de:f4:ab:d0:
b2:f6:a1:fb:99:4c:a0:1c:da:7f:45:02:f2:39:4b:
e1:7a:e5:ca:48:6a:0d:59:0a:c9:3a:36:0d:16:ab:
53:4c:83:de:d9:8f:af:a3:e9:ee:ff:39:39:8b:2f:
57:f5:51:a7:ee:65:13:bd:07:f6:6b:ef:d0:98:0e:
b8:51:e0:bf:7e:5e:86:40:c9:84:91:3c:37:52:63:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4E:41:39:49:39:67:1C:70:54:4F:2C:2C:3C:95:41:11:88:D2:11
X509v3 Authority Key Identifier:
keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/7U5BOUk5ZxxwVE8sLDyVQRGI0hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.45.30.0/23
Signature Algorithm: sha256WithRSAEncryption
24:12:db:9a:1b:62:73:61:28:d6:35:cf:bd:83:fc:38:53:c2:
d7:98:b3:1b:a9:c5:72:81:0e:92:39:c5:45:e0:c7:bf:2a:14:
9c:3b:94:f4:40:58:97:5f:98:7d:fd:bc:cf:06:54:db:e9:a0:
a1:72:24:98:6b:90:2e:7d:a0:1e:2b:e4:ca:80:01:cc:66:4d:
80:a0:76:83:57:28:f9:3c:3b:5c:79:df:d2:8f:57:71:c9:0a:
34:0a:fe:e0:ca:90:16:f8:a2:41:51:2a:d3:a5:91:a2:bb:87:
8b:3f:71:17:4f:38:eb:f8:d9:6a:ce:5b:50:c6:1b:cc:8b:8a:
a3:fa:63:bf:f6:be:a2:86:80:24:6c:a6:24:34:f5:61:a3:3a:
14:5f:8d:66:83:1f:a1:a0:9a:8c:b3:94:f3:fd:b9:fa:d2:b2:
dd:f1:3e:87:94:f8:d7:56:61:b7:76:47:f0:62:af:9f:41:3a:
b8:f8:52:e8:04:b9:23:bf:7b:ad:44:9d:01:61:fa:ad:d0:1e:
58:09:17:15:8c:57:4b:0b:e5:c8:aa:76:71:ac:b5:81:51:58:
55:a5:a4:42:8c:02:e5:0e:f8:96:f4:7b:b7:8e:39:97:91:ce:
06:8a:91:83:ed:19:f4:95:27:e4:40:59:d9:20:c2:d6:ee:1a:
37:37:c7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:07:29 2024 by rpki-client on console-ams.rpki-client.org