Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/oSCoPpqvnvFa5C-lIo5B4ZIz9uM.roa
File: oSCoPpqvnvFa5C-lIo5B4ZIz9uM.roa (raw, json)
Hash identifier: GlH5kPJm+W3wohQpyiNQanh6fdm6aH+LZc6DnMqSwVc=
Subject key identifier: A1:20:A8:3E:9A:AF:9E:F1:5A:E4:2F:A5:22:8E:41:E1:92:33:F6:E3
Certificate issuer: /CN=5871720a8884167fef82a49267661fb346d7561a
Certificate serial: 018CC94D86BE24BDA1165CF2F4967D6E1DC9
Authority key identifier: 58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/oSCoPpqvnvFa5C-lIo5B4ZIz9uM.roa
Signing time: Tue 02 Jan 2024 08:32:30 +0000
ROA not before: Tue 02 Jan 2024 08:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208070
IP address blocks: 45.159.169.0/24 maxlen: 24
45.159.168.0/24 maxlen: 24
45.159.171.0/24 maxlen: 24
45.159.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:86:be:24:bd:a1:16:5c:f2:f4:96:7d:6e:1d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5871720a8884167fef82a49267661fb346d7561a
Validity
Not Before: Jan 2 08:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a120a83e9aaf9ef15ae42fa5228e41e19233f6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a6:ab:67:ce:48:52:45:f5:57:b4:61:30:3e:
7d:5c:9a:d2:25:98:d6:7a:2e:dd:e5:fa:71:d4:37:
6c:78:d4:67:fa:10:f5:77:39:de:de:20:82:ff:b1:
46:3b:e2:29:7e:49:8e:71:3e:3e:fc:b6:72:d9:5b:
db:22:c7:51:ce:e7:38:32:a7:02:e9:8d:3a:20:3f:
ff:bc:8b:23:31:aa:8c:63:4a:c5:45:52:db:23:15:
af:1c:75:ef:c6:11:57:05:a1:b5:f2:d5:01:80:39:
9a:a0:7a:1d:0d:67:53:d7:e3:db:be:f9:f0:40:97:
cd:39:24:fc:3b:09:f7:25:47:2f:cd:83:7b:2d:db:
a8:8f:f1:53:ad:24:8f:bb:fb:f1:cb:b7:24:3f:c9:
b3:4e:a2:40:b5:b0:18:d1:40:84:90:81:e5:e3:42:
e3:d6:20:b6:64:a0:47:6f:7d:44:65:49:2b:30:f8:
cc:76:40:0b:a6:54:40:f1:ee:7f:2e:de:16:c0:43:
6f:22:0d:59:37:8d:67:37:ff:2f:06:38:1a:18:b3:
1d:90:57:b9:2e:c4:42:19:0f:12:f8:9f:ab:b9:bc:
f3:e5:5a:01:32:b2:97:21:2e:1b:9f:7f:35:24:c2:
52:b9:ab:fa:44:2f:6a:3c:6f:76:80:79:f7:e4:a2:
af:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:20:A8:3E:9A:AF:9E:F1:5A:E4:2F:A5:22:8E:41:E1:92:33:F6:E3
X509v3 Authority Key Identifier:
keyid:58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/oSCoPpqvnvFa5C-lIo5B4ZIz9uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.168.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:c7:2e:e8:f6:99:83:61:57:f5:4e:c6:4a:de:55:41:ee:2c:
c2:59:68:db:09:53:88:11:49:f0:b2:e0:91:3b:d9:e3:c6:51:
09:42:e4:7b:42:fe:be:05:13:f1:fc:e3:08:ca:30:1a:37:c0:
13:03:6a:4d:9f:61:c9:e4:08:f2:9c:25:67:54:fa:2f:a4:9e:
37:3d:5d:92:fc:4b:78:76:e2:00:8b:06:cb:30:1f:07:62:91:
56:c6:7e:bc:92:cb:4a:2d:93:70:86:b2:57:ea:98:0e:52:36:
38:8b:d6:9f:d7:bc:49:91:60:35:06:ad:d7:ec:67:85:5d:23:
45:9e:34:a9:e6:cf:83:9b:2a:4b:87:43:dc:c4:00:d9:11:a5:
ec:23:ce:92:f3:12:b9:fa:43:6b:ae:69:c2:60:f3:53:48:f9:
a4:dd:15:76:26:71:18:f0:47:4a:1e:7b:34:db:d5:91:bc:b8:
e9:4d:ed:86:06:9c:dd:ab:10:22:6c:8b:f6:51:ab:d9:9d:0f:
7a:72:63:90:26:7b:f8:f7:43:09:5a:4f:65:0c:dc:f0:4d:1c:
45:e7:a6:ff:14:56:15:fd:13:2b:69:05:a7:bd:31:68:ca:10:
f1:48:3e:20:e3:b1:c5:b3:17:d8:35:1d:eb:27:c9:fb:5b:a7:
61:a0:77:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:44:30 2024 by rpki-client on console-fra.rpki-client.org