Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/93cRTY6WVrUSsBdERCb5zo5RJtc.roa
File: 93cRTY6WVrUSsBdERCb5zo5RJtc.roa (raw, json)
Hash identifier: P+2Jp+ky5kDqBQazunjq53UQ/zScZyY8UPv3H8XUhF0=
Subject key identifier: F7:77:11:4D:8E:96:56:B5:12:B0:17:44:44:26:F9:CE:8E:51:26:D7
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 018CCA2AFD3C8398DC72E69BB22A8E9AE230
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/93cRTY6WVrUSsBdERCb5zo5RJtc.roa
Signing time: Tue 02 Jan 2024 12:34:24 +0000
ROA not before: Tue 02 Jan 2024 12:34:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50046
IP address blocks: 45.152.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:fd:3c:83:98:dc:72:e6:9b:b2:2a:8e:9a:e2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Jan 2 12:34:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f777114d8e9656b512b017444426f9ce8e5126d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3e:98:2f:dc:59:dc:2b:c8:7d:30:0a:c4:4d:
80:76:4d:bc:f2:d4:c1:fe:8f:a3:27:56:a3:b4:01:
7b:9e:64:05:6f:a5:2d:20:f2:a5:fd:d1:14:98:26:
a1:9e:f5:ca:8a:8b:dc:50:5f:d1:b2:2f:8a:2d:0f:
be:23:d5:0f:a9:f6:17:7d:3a:b2:8e:29:c7:6b:19:
76:93:45:b8:14:71:18:46:6d:d2:1b:a2:3d:a7:94:
2e:85:12:09:9f:34:2e:a3:27:97:a4:b2:4c:7d:b4:
38:69:72:b0:b0:ad:9e:d5:f4:b7:98:66:3d:dd:a6:
e2:cf:bd:79:04:be:d7:a6:7f:eb:a6:bb:16:d7:4c:
85:cd:11:56:d9:4e:ad:4a:fd:66:05:37:ab:82:9a:
1e:91:47:ce:2e:60:68:d7:5e:15:32:f5:a6:f9:82:
ee:ca:1d:4d:59:1f:8b:26:5f:91:8e:81:94:56:b6:
3b:70:73:f2:83:88:5b:33:23:e9:b7:6e:dd:76:01:
39:86:b6:fd:51:3e:74:e8:80:91:aa:1a:61:7d:6c:
58:d1:d4:0b:65:b6:a5:53:af:6a:5e:64:aa:97:93:
1a:0c:33:93:66:84:58:3a:da:7b:4f:90:ac:9f:c9:
6c:2e:6c:e1:3d:ab:9d:31:bc:65:a6:a0:59:95:86:
8f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:77:11:4D:8E:96:56:B5:12:B0:17:44:44:26:F9:CE:8E:51:26:D7
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/93cRTY6WVrUSsBdERCb5zo5RJtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.70.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ca:82:ad:36:94:97:f9:ac:ce:8d:0e:87:67:90:27:33:0d:
88:ec:ca:04:f7:31:6e:56:3b:9a:1c:82:41:0d:7e:d9:f4:e4:
25:fc:6d:2d:32:eb:01:3b:03:33:74:92:17:2d:c6:33:ac:71:
70:53:1c:b0:82:e9:4a:1a:59:cc:23:23:d0:26:8b:62:86:33:
78:73:34:75:f8:01:85:c8:4c:b2:6a:b4:68:e9:42:28:e0:25:
c4:04:8b:5b:a0:53:9e:05:f0:4e:2e:74:82:f3:31:df:89:d0:
b9:f6:ee:57:68:7b:66:42:ee:73:75:69:ff:95:fd:9f:27:8e:
00:36:2f:c3:b4:db:02:31:a2:f8:43:d5:02:bc:d1:dd:68:83:
e5:da:c1:81:31:7d:14:dd:1f:bc:94:9a:50:8c:45:8e:d0:75:
73:79:8f:88:56:6d:8b:be:80:89:85:f8:40:fc:20:af:a9:2f:
b4:1b:a2:cc:40:bb:ff:78:a2:8d:22:8a:de:0b:35:55:1e:23:
b6:50:57:e6:12:8b:96:13:da:36:38:e9:6f:dc:32:07:9e:5e:
17:70:93:67:ac:c1:2f:19:0b:12:0a:b1:f9:94:ba:89:1b:f4:
c0:d2:e8:81:9e:32:00:f1:f0:21:62:ab:79:52:82:a4:13:17:
54:da:62:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:11 2024 by rpki-client on console-fra.rpki-client.org