Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cj5CcUB1zaT2uFIcc0ZJCM9TTJc.roa
File: cj5CcUB1zaT2uFIcc0ZJCM9TTJc.roa (raw, json)
Hash identifier: OdDP0d+iMbppTpuAl1fWoYpw1lAGnbRVUFKQSWblnT4=
Subject key identifier: 72:3E:42:71:40:75:CD:A4:F6:B8:52:1C:73:46:49:08:CF:53:4C:97
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019270247C457FA6BC51992EFB41E6C7375A
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cj5CcUB1zaT2uFIcc0ZJCM9TTJc.roa
Signing time: Wed 09 Oct 2024 07:18:12 +0000
ROA not before: Wed 09 Oct 2024 07:18:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214093
IP address blocks: 45.151.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:24:7c:45:7f:a6:bc:51:99:2e:fb:41:e6:c7:37:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Oct 9 07:18:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=723e42714075cda4f6b8521c73464908cf534c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:55:ef:b5:87:38:8e:4c:aa:60:93:32:7a:
73:dd:fd:79:b6:f4:91:01:a9:0d:4f:1b:9b:41:2d:
c7:1e:b7:99:ad:c6:86:49:fa:e7:49:b4:c2:c7:80:
a6:5b:11:03:a0:99:af:f8:0c:f9:94:f7:77:b4:35:
c9:53:6c:6e:cf:57:c7:43:44:80:31:41:88:00:6e:
f9:5a:8b:dc:2b:36:38:da:c7:28:c5:c2:cc:a2:f8:
35:e5:fd:89:ed:7a:38:63:e1:00:27:65:a4:1b:65:
88:3e:6a:97:30:c1:b6:58:a5:3f:d5:ab:3e:d6:57:
9d:13:9a:00:73:8b:21:44:11:a1:be:30:e6:eb:25:
e1:6b:22:06:5b:05:ad:2f:e0:17:15:e9:82:e9:2b:
e1:bd:4c:f0:f2:05:e2:e2:60:d7:f9:5b:51:45:0a:
e1:1d:78:47:b4:30:58:f7:a9:2d:88:7d:00:5e:00:
94:2b:ea:42:eb:d9:8b:d2:0e:87:bb:5e:f9:95:46:
d6:cc:35:b3:fa:68:7f:e3:52:cd:c2:17:c4:e9:08:
b3:74:c9:d4:88:d6:74:97:d8:a2:03:b0:3c:e8:3f:
5c:9c:dd:d5:b7:41:4c:4b:bd:f3:b2:3b:f2:56:c0:
52:81:28:8b:38:5f:12:f1:bd:67:49:5c:3a:1b:56:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3E:42:71:40:75:CD:A4:F6:B8:52:1C:73:46:49:08:CF:53:4C:97
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cj5CcUB1zaT2uFIcc0ZJCM9TTJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.57.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:eb:0f:a9:fb:5a:bf:6e:a8:e7:ad:56:8f:eb:2c:b5:48:3b:
3b:43:81:3d:e4:8e:09:e0:2f:77:b9:c4:06:11:2d:4a:13:95:
46:62:75:3a:2f:f4:9b:2e:02:62:6b:6b:11:7d:22:f3:51:e1:
00:71:0d:43:f5:76:1d:65:f3:6a:19:27:0a:e1:c5:74:cd:68:
37:8a:52:b7:0c:5f:be:ad:b8:c9:9c:3d:ff:37:61:2a:78:cf:
ef:17:a4:05:3b:41:28:08:de:48:56:ad:0b:ae:eb:e5:b5:40:
f1:9c:28:25:f0:dc:5a:2b:f2:5f:b7:51:26:f9:39:63:12:1c:
b6:56:4b:a9:e3:2e:5a:7d:c7:70:54:e6:44:f5:91:34:6f:fc:
44:f5:69:8c:0c:54:67:21:a6:25:bf:07:30:68:a5:82:a2:7a:
95:61:03:fc:25:14:c7:b1:45:1f:00:54:48:34:5b:e1:3b:0c:
e2:b4:00:23:cb:ad:e7:67:36:69:b8:c3:14:00:65:d2:29:8c:
c3:a4:b9:b8:44:0e:5c:69:56:a2:be:0d:43:1f:b7:4b:d9:ec:
84:71:49:6a:3c:42:31:db:0c:dc:ff:64:1e:b4:9a:58:f3:49:
c1:78:ed:2d:23:4f:f0:13:62:73:12:0c:15:4b:cb:4f:77:d8:
ce:85:18:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:19:21 2024 by rpki-client on console-fra.rpki-client.org