Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/9yuzL8WtqRhTqOlFDqVVzhgP9aU.roa
File: 9yuzL8WtqRhTqOlFDqVVzhgP9aU.roa (raw, json)
Hash identifier: BvKZ7ju3SQq/z3YuYRmz7rVpmzG6ny2Ae4Bz8MDaBrk=
Subject key identifier: F7:2B:B3:2F:C5:AD:A9:18:53:A8:E9:45:0E:A5:55:CE:18:0F:F5:A5
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 018CCA2AFE4AFE5E3DF45BEBA43028BEA050
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/9yuzL8WtqRhTqOlFDqVVzhgP9aU.roa
Signing time: Tue 02 Jan 2024 12:34:24 +0000
ROA not before: Tue 02 Jan 2024 12:34:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212832
IP address blocks: 45.152.69.0/24 maxlen: 24
45.152.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:fe:4a:fe:5e:3d:f4:5b:eb:a4:30:28:be:a0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Jan 2 12:34:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f72bb32fc5ada91853a8e9450ea555ce180ff5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ab:20:10:16:98:57:d0:7e:f5:65:6f:75:98:
69:a8:13:62:04:a0:9e:2f:d7:8c:fc:75:34:34:40:
45:4a:2d:5f:18:9c:e8:89:80:0b:d1:6f:46:d4:49:
8e:f2:2a:6f:06:ed:62:f8:c7:5b:1d:36:a9:ab:a7:
ff:b5:12:7e:a8:fc:42:5f:7d:46:5e:b7:1e:a3:e8:
91:c7:89:e1:29:30:83:10:04:be:08:c9:a3:b2:ce:
12:75:3e:01:1c:ca:96:9b:15:a2:1c:da:41:2f:c8:
0b:ae:0b:eb:78:12:41:3e:ec:6d:48:02:11:ee:f1:
7d:e3:e6:a9:a1:c7:f6:37:8c:7a:bf:d6:dd:e7:65:
9a:da:a7:07:0d:ab:84:b5:eb:b6:6a:6e:ea:c7:f3:
21:06:a4:6c:4c:25:29:63:8d:92:db:41:0a:f1:0f:
1d:24:bc:59:a9:eb:45:20:de:a9:64:5d:0e:58:21:
cd:8e:a1:4b:61:45:62:2d:4b:52:28:73:93:de:35:
ec:43:3d:b7:45:98:df:4e:2b:0b:e2:5a:a9:da:99:
18:70:58:5d:a7:b9:77:ee:e1:7f:b8:35:51:3c:46:
89:c6:a7:9a:e4:f6:f4:b5:4f:46:c5:c8:da:0a:b0:
70:0a:a7:f5:72:6e:11:43:fa:6c:6c:8e:c5:10:8c:
a8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2B:B3:2F:C5:AD:A9:18:53:A8:E9:45:0E:A5:55:CE:18:0F:F5:A5
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/9yuzL8WtqRhTqOlFDqVVzhgP9aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.69.0/24
45.152.71.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:85:ed:03:ab:d3:e2:f5:da:fe:27:c9:b2:26:3b:57:a0:63:
29:51:4d:89:82:36:26:32:ba:e8:17:8c:9b:4e:b5:28:09:cf:
47:02:1c:1e:e2:2e:72:eb:71:ff:6e:ea:90:b4:e4:0d:d0:43:
a2:7f:2c:45:ec:cb:2e:1b:46:0b:eb:66:03:b5:cc:62:2d:ec:
0f:7f:52:7c:65:df:c7:19:89:0d:17:d1:89:aa:d7:77:e4:82:
df:48:86:b4:f5:35:70:16:20:83:17:a5:32:a0:79:c5:94:e0:
14:ec:9c:dd:31:d6:f1:7a:6e:ca:d7:dc:76:52:2b:4a:79:05:
13:18:03:f0:d7:40:e7:f6:1f:81:cd:43:a2:9f:d3:62:f2:3a:
ab:f0:73:c7:ac:3c:00:b6:96:49:7d:26:1a:5b:66:37:8b:82:
96:50:f0:20:7c:39:64:f0:55:34:25:65:33:48:95:5f:7c:ed:
8f:83:34:d7:87:62:b6:07:9c:ee:58:35:da:2e:aa:ad:55:b8:
0a:d0:9a:56:f6:de:fd:4a:05:1a:0c:88:fd:2e:33:e7:5f:67:
e6:45:62:50:f3:55:c6:8f:c3:6b:61:ff:25:4a:ba:bb:d4:20:
19:81:01:5f:0d:6c:3e:0e:e2:0b:ec:02:ed:7e:33:ca:69:85:
6a:50:25:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:54:36 2024 by rpki-client on console-fra.rpki-client.org