Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/NoEVq66JTUF7RgzFWpBMW1-GaYs.roa
File: NoEVq66JTUF7RgzFWpBMW1-GaYs.roa (raw, json)
Hash identifier: eOZ1cyzJqNOrzrTbqMlruuIFCz5Z6sdOYNQW9C+G/6w=
Subject key identifier: 36:81:15:AB:AE:89:4D:41:7B:46:0C:C5:5A:90:4C:5B:5F:86:69:8B
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E3E0C09D2BA3EC1FE68199F0C1BCB
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/NoEVq66JTUF7RgzFWpBMW1-GaYs.roa
Signing time: Tue 02 Jan 2024 08:33:17 +0000
ROA not before: Tue 02 Jan 2024 08:33:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200950
IP address blocks: 45.86.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:3e:0c:09:d2:ba:3e:c1:fe:68:19:9f:0c:1b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=368115abae894d417b460cc55a904c5b5f86698b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9a:91:da:6f:f7:98:da:36:10:74:4e:00:c4:
85:eb:3d:70:bf:c7:a0:6d:54:42:2e:a6:a3:bc:1b:
fc:c6:5d:93:c6:61:5e:fe:d7:70:8b:94:6d:e8:43:
d2:71:bd:e9:01:5f:eb:4a:e2:fb:84:13:71:c6:a4:
ed:41:3b:f9:8c:d9:fe:27:c1:3d:f6:04:63:a3:bf:
8d:27:ae:0d:ab:d0:38:c4:42:58:fe:20:58:24:95:
c4:e9:e7:89:87:3d:f7:88:fc:e5:07:1a:41:99:15:
b2:ac:3e:27:55:bb:9b:0d:ca:99:75:d0:bd:18:3a:
c4:96:42:2a:d4:8a:82:03:6a:49:98:fe:4e:a5:d7:
83:fa:ae:f6:4c:0b:e9:7b:53:50:1b:ed:b4:5f:b4:
63:72:f4:10:4e:0c:db:78:99:46:51:84:96:e9:26:
e9:df:d8:af:30:a2:40:99:42:7f:cf:d8:19:4b:d4:
4f:4a:d1:69:b0:23:0c:a0:f6:67:13:b0:1c:37:41:
d6:67:27:51:ea:42:e1:f8:1b:66:89:ee:83:cd:d7:
d5:b1:ed:63:d2:14:6e:26:7a:c3:16:30:58:07:19:
bc:30:d2:b2:56:5b:dc:63:ae:e7:87:75:fb:c6:aa:
40:f5:89:e2:77:b8:bd:f9:cd:8d:b6:ab:c2:c0:5d:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:81:15:AB:AE:89:4D:41:7B:46:0C:C5:5A:90:4C:5B:5F:86:69:8B
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/NoEVq66JTUF7RgzFWpBMW1-GaYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.153.0/24
Signature Algorithm: sha256WithRSAEncryption
14:9b:1c:9e:d8:09:48:e5:a9:3f:17:63:c9:7c:5a:ff:dd:6e:
1b:7a:d8:f0:7c:a3:c5:17:23:9b:09:a4:b3:24:fd:cf:b1:82:
ca:77:0a:03:80:5b:c2:38:68:3c:01:77:50:78:7a:30:d1:ef:
14:32:90:60:17:03:2a:da:ec:7c:60:82:ce:9f:cd:6d:a5:65:
1a:83:f7:f2:39:e0:31:90:b5:60:ce:c1:0e:77:c7:19:b1:b5:
13:e5:f4:a4:de:57:1f:f4:bb:f9:59:ab:8d:9b:c3:48:3b:24:
3a:fd:7a:6c:94:7d:9b:d6:81:e8:11:20:9b:d1:92:53:65:db:
93:8d:8e:ff:04:59:b9:d9:8f:66:93:73:73:00:a9:46:de:0b:
a7:e1:2b:dd:e2:05:6f:71:93:9b:0c:bd:a5:30:ea:fa:df:56:
16:0b:12:98:8b:a7:16:25:b2:f8:12:8e:cf:4a:35:66:db:6b:
c5:66:a6:b0:7b:e4:bf:11:1a:1c:54:9e:88:d0:ab:72:51:3e:
ee:12:8f:33:09:b1:59:47:2b:7d:4d:e8:28:35:3d:ba:15:c1:
89:43:17:21:7f:a3:b1:7d:39:ad:aa:a9:21:30:65:fd:f5:da:
e0:05:66:9f:d0:42:42:07:73:a9:18:a0:29:8f:40:43:73:71:
20:33:64:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:26:39 2024 by rpki-client on console-fra.rpki-client.org