Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/R5OlN6sHOBiKPHTFYNER9UkfAzA.roa
File: R5OlN6sHOBiKPHTFYNER9UkfAzA.roa (raw, json)
Hash identifier: jUQPWCC4F2BU02s4ADBrj30iZ3zEh8NRrIsDTEWu4eM=
Subject key identifier: 47:93:A5:37:AB:07:38:18:8A:3C:74:C5:60:D1:11:F5:49:1F:03:30
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018CC501514D8EF62AE5DB2BB22236B365C2
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/R5OlN6sHOBiKPHTFYNER9UkfAzA.roa
Signing time: Mon 01 Jan 2024 12:30:47 +0000
ROA not before: Mon 01 Jan 2024 12:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52000
IP address blocks: 45.150.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:51:4d:8e:f6:2a:e5:db:2b:b2:22:36:b3:65:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 12:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4793a537ab0738188a3c74c560d111f5491f0330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:34:c0:82:9d:f2:44:6c:a8:6c:0f:cb:ec:
6b:29:ce:d9:98:6e:57:83:cf:d0:6b:64:97:cd:44:
02:d8:12:41:1e:45:c9:83:97:7b:15:45:ea:b5:c0:
2f:90:53:5f:d5:b0:5e:34:6d:40:44:75:39:38:4a:
66:21:05:9a:ef:22:ea:f0:20:e3:13:42:10:7b:e0:
c6:49:2e:36:60:fc:cf:34:49:b0:ff:50:c9:6f:b6:
3c:4b:91:02:f8:55:69:15:f1:0e:84:97:94:62:88:
15:44:da:a5:02:d1:dc:0d:d7:00:dd:c0:5a:0f:04:
d2:42:b1:a9:16:46:df:6b:d8:dc:80:84:30:95:cd:
07:5e:34:86:48:0c:5c:77:18:82:ba:9a:43:84:53:
d8:fe:6c:85:f6:54:65:1d:01:12:2e:2f:4c:e4:6d:
9a:0a:df:43:a7:3b:eb:5f:f2:8a:ac:4f:66:f4:3d:
7a:8b:68:de:0b:01:3f:3f:b4:7a:ff:80:34:88:a6:
97:a3:c8:dd:98:91:d5:73:15:55:23:8b:6c:9c:10:
db:e7:08:6f:1b:d3:27:de:69:08:0b:bf:83:7a:d5:
94:0e:e7:7c:14:ed:a6:2c:88:c6:8c:59:84:7b:5a:
95:44:7c:3d:38:07:79:f5:62:6f:7b:86:ef:9b:cb:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:93:A5:37:AB:07:38:18:8A:3C:74:C5:60:D1:11:F5:49:1F:03:30
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/R5OlN6sHOBiKPHTFYNER9UkfAzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.65.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:09:54:ed:a3:10:04:76:dc:9f:d7:4f:24:6b:61:a8:51:95:
43:70:9b:1f:f2:a2:61:43:43:a0:c2:08:4d:69:e1:74:ea:87:
60:5a:da:69:55:c0:23:91:67:10:c4:02:81:0b:ec:c9:ef:5e:
5a:59:50:25:79:60:0c:5c:97:74:ed:c8:7b:31:97:0b:79:6c:
02:e4:7e:78:b2:a7:e6:5b:3b:98:93:b2:6f:44:05:49:bb:e1:
1b:a8:b9:f2:83:6c:36:62:2b:42:75:8e:4c:58:c5:bd:a5:18:
f9:11:3c:6e:c7:3c:9e:6b:19:8c:d3:7d:12:05:88:65:2a:e7:
c8:98:a1:75:ed:7c:1f:25:f2:c6:c6:87:03:0a:9e:eb:f3:20:
08:2b:b5:f0:b7:4a:c9:5a:b8:b8:0b:7b:b0:b4:1f:25:69:bc:
89:3f:eb:b2:a7:7a:6b:d7:37:4e:b2:d9:0a:fc:1c:e5:4e:5c:
8c:5a:17:c0:77:a3:ee:32:2d:3a:62:2b:b8:e9:9a:ec:1e:c3:
1a:1b:b6:55:a8:38:7f:b7:95:13:46:8b:c3:d0:32:51:20:0e:
b6:eb:4e:fb:4f:9b:e4:b4:35:1b:4b:36:4d:9b:3b:32:78:b1:
37:97:e5:49:37:c7:4e:6f:45:f4:ac:fd:9b:00:e0:e5:9e:06:
ff:27:95:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:16:31 2024 by rpki-client on console-fra.rpki-client.org