Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/1-YzGQDUvxh7320fZfsAaAfcPPFs.roa
File: 1-YzGQDUvxh7320fZfsAaAfcPPFs.roa (raw, json)
Hash identifier: xJ3gK80IhO9C5l99Hz0opPfO7WR2SYxli/CL2umsAoU=
Subject key identifier: F9:8C:C6:40:35:2F:C6:1E:F7:DB:47:D9:7E:C0:1A:01:F7:0F:3C:5B
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 018CC7270EAF00CE08794CFC3FF5FA6899ED
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/1-YzGQDUvxh7320fZfsAaAfcPPFs.roa
Signing time: Mon 01 Jan 2024 22:31:14 +0000
ROA not before: Mon 01 Jan 2024 22:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9087
IP address blocks: 45.140.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 19:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:0e:af:00:ce:08:79:4c:fc:3f:f5:fa:68:99:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Jan 1 22:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f98cc640352fc61ef7db47d97ec01a01f70f3c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:41:ae:0b:06:f5:d8:70:9c:8d:97:42:27:
8e:82:d6:e6:8f:2e:a8:03:b0:60:bc:a5:95:bd:b2:
35:38:16:06:e5:81:d2:c7:36:d0:ca:df:19:85:cc:
25:44:76:de:f0:43:c6:4e:05:18:15:34:af:94:bf:
4a:f5:07:e6:4e:aa:17:51:1c:4e:3d:22:05:ee:b3:
60:26:d6:ee:5d:7e:a8:52:88:d9:9d:6a:f2:f2:c3:
b0:51:46:48:7c:0f:f2:df:2e:2c:b1:f3:2a:b2:38:
dd:8d:8b:a8:ed:54:c2:04:3d:11:17:28:b9:f3:95:
1f:69:80:70:12:db:a9:96:0d:4e:b1:b2:b0:4a:29:
3d:f0:82:58:f8:d2:51:c5:78:d2:81:c1:09:ae:60:
1f:15:48:4c:07:28:e4:8a:c6:c5:50:34:83:cb:71:
81:34:f5:1d:b2:1a:51:19:a4:fd:a3:db:af:30:08:
73:0f:be:38:0d:4f:a2:35:c3:65:3d:75:1a:d5:75:
10:5b:06:ee:2e:2c:6a:6a:57:39:59:6a:c0:84:f8:
38:d7:dc:1c:42:25:e0:ab:80:77:5c:0b:4d:dc:4b:
42:2d:83:5a:e7:31:e9:e5:b0:53:20:d1:60:36:ab:
7d:29:e3:ab:04:4b:7a:f5:58:01:79:1e:b5:75:31:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8C:C6:40:35:2F:C6:1E:F7:DB:47:D9:7E:C0:1A:01:F7:0F:3C:5B
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/1-YzGQDUvxh7320fZfsAaAfcPPFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.208.0/24
Signature Algorithm: sha256WithRSAEncryption
92:af:f0:ce:8c:59:ea:9b:35:57:29:68:c5:b6:3d:c4:72:57:
ba:8b:23:6a:bd:c2:7a:e6:4d:81:e4:3b:d8:72:cb:1c:4a:a0:
14:f9:3b:89:2c:76:5e:27:1b:62:a2:d2:ce:28:8c:a1:b1:75:
ac:cc:65:1a:c8:6d:73:22:96:37:3a:df:98:9c:da:bb:5a:a5:
80:76:69:87:de:9b:7a:bd:71:e4:1b:1d:e0:ad:8a:24:f3:94:
d4:9b:35:e0:92:4c:c2:7e:35:97:f0:e3:d9:81:2e:50:4c:e1:
d5:1a:3e:ff:cd:14:ea:37:c8:84:d3:52:53:9a:06:9e:49:a5:
f2:c1:4f:90:dc:a8:b9:72:29:14:27:1b:98:3f:88:85:0c:ea:
36:a6:0a:f4:52:76:e5:d2:0f:58:ab:e0:08:c4:1f:4a:de:c4:
a2:09:86:3b:55:d2:5a:49:02:85:8f:dd:45:d4:44:3a:d5:d4:
b9:3b:ae:18:00:52:5f:47:b7:7a:2f:82:e1:08:31:9d:53:77:
44:54:12:b8:8a:7e:14:70:af:bb:eb:c5:ab:01:e3:ed:57:29:
c7:bb:a0:4c:24:95:74:f6:80:ed:5d:a5:0f:d1:14:b4:35:fb:
cf:dc:c1:80:90:f9:1b:01:0c:74:54:77:26:53:da:1d:fe:41:
c2:1a:74:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 02:39:15 2024 by rpki-client on console-fra.rpki-client.org