Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Dr9EMFpwo67jMW9fonbaDxzGB2w.roa
File: Dr9EMFpwo67jMW9fonbaDxzGB2w.roa (raw, json)
Hash identifier: e6Dj57Jo8X1lVIzpj+sp75tULSGHSaQBdV9aYXQwdYM=
Subject key identifier: 0E:BF:44:30:5A:70:A3:AE:E3:31:6F:5F:A2:76:DA:0F:1C:C6:07:6C
Certificate issuer: /CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Certificate serial: 018CC50021A01D05FD56D9FFC7FC84598461
Authority key identifier: 43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Dr9EMFpwo67jMW9fonbaDxzGB2w.roa
Signing time: Mon 01 Jan 2024 12:29:29 +0000
ROA not before: Mon 01 Jan 2024 12:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35424
IP address blocks: 45.67.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 20:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:21:a0:1d:05:fd:56:d9:ff:c7:fc:84:59:84:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Validity
Not Before: Jan 1 12:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ebf44305a70a3aee3316f5fa276da0f1cc6076c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:97:56:52:3f:3f:c8:04:b6:5a:16:1c:1b:62:
c8:74:6a:a5:97:c9:90:8c:c2:cd:ba:4b:53:bd:c1:
78:6c:44:f6:f2:9c:d1:da:68:71:8e:8c:42:63:ca:
62:3a:0c:61:b3:bd:4e:36:69:00:49:5d:ac:f4:67:
ca:27:e2:25:2f:2b:fa:32:11:17:25:7f:8e:ef:67:
95:86:f5:53:2b:35:6e:52:4d:65:c7:79:30:b6:d7:
7d:6f:cb:61:dd:aa:eb:15:61:f1:5a:39:14:92:28:
bb:b7:77:10:30:8b:48:3a:8b:10:83:66:24:dc:22:
7c:37:e8:7f:b5:84:0a:d3:7f:6c:40:f2:b8:61:5a:
29:80:ec:c0:62:f8:71:5b:d2:ce:03:1e:ae:0a:bd:
e4:a9:b5:31:51:7c:41:6c:4b:8e:45:c6:a0:1a:cd:
b5:c1:a9:55:77:8c:40:16:bb:05:91:2f:72:3c:53:
f2:83:79:07:c4:fe:03:f3:6e:ae:53:8a:ed:58:5f:
76:b9:b3:f0:92:b4:73:23:b9:af:81:03:06:50:b8:
10:19:3f:94:22:bd:e3:ae:6e:65:e4:23:8c:c2:29:
2e:0c:71:59:9e:aa:a1:77:93:9c:8c:20:6a:af:c3:
c4:71:0c:32:92:43:10:0c:7a:5d:e4:19:a8:61:ab:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BF:44:30:5A:70:A3:AE:E3:31:6F:5F:A2:76:DA:0F:1C:C6:07:6C
X509v3 Authority Key Identifier:
keyid:43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Dr9EMFpwo67jMW9fonbaDxzGB2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.164.0/22
Signature Algorithm: sha256WithRSAEncryption
66:6f:cc:13:7e:dd:03:5f:d0:11:59:a9:e9:5f:7a:3e:70:54:
c1:6a:22:5b:b4:80:ab:9b:f4:ff:9d:0e:b0:40:57:f1:71:3c:
7d:7e:87:18:67:c7:eb:56:33:6b:b3:e7:c8:9d:2e:89:e9:21:
19:f4:fc:c0:a9:1c:b1:dc:da:1d:7d:5b:11:86:b4:a7:89:97:
68:a6:6e:1e:0e:67:f1:f9:1f:cb:c5:52:ca:96:f0:ed:69:48:
04:5f:00:0d:01:df:43:ba:77:13:07:a8:c0:2a:8f:25:66:8c:
45:6d:72:7f:cd:6e:9f:ef:68:d4:88:ff:fa:57:1e:0b:62:b1:
26:61:6f:58:6c:f6:ed:a2:d9:b3:d3:06:40:20:08:0f:5f:b8:
45:6e:c6:2a:db:c4:b0:97:91:de:b3:8a:29:ac:a7:01:1a:44:
8f:26:cc:2d:36:14:54:f7:7c:b1:03:16:28:20:8a:cd:0d:6a:
2d:8c:80:fe:9e:56:5f:d5:64:2b:5f:f0:c9:71:44:47:0e:4c:
65:2f:6f:6d:fa:9a:6a:db:14:02:13:f0:46:7d:38:a8:d1:89:
d1:75:44:c4:91:8e:98:dd:42:e3:2d:b3:dd:73:bf:c3:9b:66:
88:d1:80:2e:48:0d:3f:04:83:26:d8:bd:c7:e2:bb:2f:74:7d:
67:84:58:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 03:51:13 2024 by rpki-client on console-ams.rpki-client.org