Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/tWo7yREmIQuNqLti4WP1FRzmi5M.roa
File: tWo7yREmIQuNqLti4WP1FRzmi5M.roa (raw, json)
Hash identifier: 3BIjQle4C5RLrwpkhF5frzfPotrQ7RlWlbHngyDW4/4=
Subject key identifier: B5:6A:3B:C9:11:26:21:0B:8D:A8:BB:62:E1:63:F5:15:1C:E6:8B:93
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 018CC348B7D87F17B1609286F24AA55C2182
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/tWo7yREmIQuNqLti4WP1FRzmi5M.roa
Signing time: Mon 01 Jan 2024 04:29:31 +0000
ROA not before: Mon 01 Jan 2024 04:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 45.90.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b7:d8:7f:17:b1:60:92:86:f2:4a:a5:5c:21:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Jan 1 04:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b56a3bc91126210b8da8bb62e163f5151ce68b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:86:c5:62:98:7b:6f:1f:c4:30:13:95:4f:a7:
a7:d6:c9:0e:b9:f5:e1:a6:18:c3:ae:d0:f3:9b:f1:
70:00:f6:01:db:67:45:46:06:d1:ec:ba:cd:4f:a9:
d0:71:16:f3:f0:84:cb:00:a7:e7:44:ff:db:78:61:
5d:4b:4b:4a:4f:83:73:cf:6b:5a:bf:87:56:bc:ae:
4e:eb:ab:d5:ed:13:8c:ca:99:54:f1:0f:7a:10:da:
5a:5a:12:ae:76:c0:07:7e:e2:a7:e5:e0:33:f0:c5:
8d:74:1e:08:3a:82:9b:cd:59:dc:15:98:fa:d0:d9:
4c:99:b9:85:e3:eb:55:52:3e:13:56:5a:b4:7b:a1:
1c:c8:92:3a:04:41:4e:69:13:d6:90:cb:e3:1a:29:
91:e5:f3:53:a0:fa:56:ea:0d:b8:82:68:e9:a7:d1:
c7:d0:23:dc:a2:3a:84:85:28:5f:5f:dc:8b:6e:82:
96:7c:ce:58:ab:ed:d5:50:bb:e3:34:f6:31:60:a0:
57:a5:b4:62:eb:c3:a6:e6:1d:1e:fb:d6:05:1e:ef:
17:df:4e:c3:fd:43:3c:18:6c:4c:e4:7a:1a:c9:e7:
7c:1d:87:c9:49:f9:8a:d4:17:e5:ee:67:ae:ae:50:
02:ac:60:74:16:9b:df:c5:f4:e6:a7:89:b6:55:cb:
3c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6A:3B:C9:11:26:21:0B:8D:A8:BB:62:E1:63:F5:15:1C:E6:8B:93
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/tWo7yREmIQuNqLti4WP1FRzmi5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.41.0/24
Signature Algorithm: sha256WithRSAEncryption
99:1b:40:c2:e0:df:37:75:b9:c5:c3:3c:75:8c:12:9c:7d:10:
1a:5f:b1:99:60:79:b0:25:f9:e3:c0:65:f0:84:6e:91:a7:cc:
04:2c:64:37:ef:c7:b2:d7:89:9b:34:1b:c9:7c:2f:73:40:5c:
1b:18:4f:ee:b2:0a:62:10:ec:90:b0:af:d3:a0:a8:07:5f:eb:
f2:58:81:2c:79:77:01:70:18:10:f8:10:50:c5:a3:32:cc:6e:
64:fa:e5:c1:a5:d5:05:6f:04:66:00:ad:88:be:07:89:57:8f:
3e:aa:96:1e:2b:69:64:eb:b7:c5:2f:03:d1:c7:1e:8f:c1:08:
d0:9d:f7:32:7e:9b:a7:82:b6:e1:64:a6:c0:a0:68:44:05:04:
83:00:32:3a:d0:6d:19:49:84:37:f4:db:2f:ac:f3:b6:d5:e9:
7f:0e:06:0a:d7:8c:14:57:eb:8b:6c:a3:ef:17:76:63:d6:77:
4d:c5:15:8e:ca:91:f5:2b:67:36:0a:3c:88:6c:bb:f9:ba:2b:
0b:4f:d9:89:35:cb:ba:70:28:a9:0d:75:b0:b9:70:49:8c:27:
1c:8a:87:7f:f0:cc:9b:1a:2b:62:15:0d:eb:9c:81:29:21:d0:
fb:5f:ef:e5:20:34:33:17:0f:c4:a1:de:93:58:37:bb:dd:ce:
74:b8:9e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 14:55:00 2024 by rpki-client on console-fra.rpki-client.org