Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/boYMDLX2wQ1bhDvDCF--n1I0bKE.roa
File: boYMDLX2wQ1bhDvDCF--n1I0bKE.roa (raw, json)
Hash identifier: td/2ln1z97zZBrK4bDb99ZFzQXjdkrBPtSGIOiLonk8=
Subject key identifier: 6E:86:0C:0C:B5:F6:C1:0D:5B:84:3B:C3:08:5F:BE:9F:52:34:6C:A1
Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial: 018CC794BAED0D2547ED04410A4D7C323770
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/boYMDLX2wQ1bhDvDCF--n1I0bKE.roa
Signing time: Tue 02 Jan 2024 00:31:02 +0000
ROA not before: Tue 02 Jan 2024 00:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208209
IP address blocks: 45.154.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:ba:ed:0d:25:47:ed:04:41:0a:4d:7c:32:37:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
Validity
Not Before: Jan 2 00:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e860c0cb5f6c10d5b843bc3085fbe9f52346ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:67:3c:59:4d:ba:68:64:57:8c:69:44:7f:
c4:a1:27:02:60:41:62:48:e3:29:a8:ae:41:24:bd:
b7:45:e7:30:a6:42:db:d1:ea:b7:41:33:1b:46:0e:
f4:04:6c:10:c7:2b:95:c4:99:73:ac:8d:c6:21:de:
22:ac:26:4b:c2:da:d4:99:39:4c:7b:98:c4:88:41:
95:70:15:bb:b1:ef:89:3f:d0:66:e8:65:b0:ff:43:
1f:16:ca:09:5f:28:8a:a2:d2:d8:e8:f6:2e:ba:a1:
5e:e2:29:b8:23:40:63:6a:e2:2c:c1:8e:66:44:86:
59:fa:93:d1:80:c5:6c:00:88:a0:a2:76:29:af:7e:
fc:6b:01:d8:db:8a:d2:6b:86:d2:69:fa:7e:95:a9:
e3:76:44:d3:14:82:63:90:29:3c:53:89:fe:f7:4a:
26:e7:2d:2f:7d:c1:60:62:86:82:c5:2c:a7:81:da:
93:f5:57:90:40:0e:2e:03:c4:d4:f7:0e:9e:69:e8:
5b:38:6e:7e:24:48:cf:c8:b1:f0:ad:b5:d5:d1:b2:
f9:17:98:e5:f3:6c:97:3d:3b:8c:b3:c1:1c:a2:2f:
24:4e:d4:f3:0c:8d:96:d9:61:ae:25:c0:4a:6b:21:
48:27:00:3d:ac:68:09:82:6d:ac:0e:39:47:13:20:
56:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:86:0C:0C:B5:F6:C1:0D:5B:84:3B:C3:08:5F:BE:9F:52:34:6C:A1
X509v3 Authority Key Identifier:
keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/boYMDLX2wQ1bhDvDCF--n1I0bKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.8.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:ff:38:57:0e:f4:e8:df:0c:34:4c:c9:ab:b1:b7:1c:e2:6e:
fc:a6:7a:dc:08:bb:68:0f:35:96:f3:fc:83:56:96:cf:ea:13:
62:37:07:cb:5d:c1:cc:67:d7:af:81:3e:51:3d:72:f0:a3:84:
98:ea:c1:53:72:8f:07:a4:ac:66:f5:ea:05:ec:14:be:65:33:
fd:21:6e:b5:31:61:60:92:2c:c8:17:86:ea:c7:f2:41:54:1e:
c5:41:c0:ab:d6:40:6b:b5:4e:d7:9f:18:79:42:99:7a:d0:f4:
c9:52:af:dc:53:0f:52:ed:23:fb:91:16:45:b4:99:9c:c7:df:
65:37:2a:46:7c:34:4e:6f:b2:ab:eb:7c:2c:63:8a:df:eb:0e:
8b:af:f9:45:9b:67:f9:5b:37:30:81:bc:a2:52:3c:1e:27:f9:
b9:73:00:e6:d1:c7:a7:01:aa:4a:f0:67:64:8f:eb:c8:2c:c8:
56:2c:2c:b6:36:08:f4:14:9c:71:36:9b:7a:ed:4f:32:4d:7c:
30:5b:52:7f:ca:82:ae:7b:78:41:61:60:93:4d:73:c0:65:0b:
df:81:d0:8f:1a:06:10:b4:3f:d8:c6:b3:5c:0e:67:9a:85:10:
bd:fc:f0:06:4d:82:0b:29:18:1e:c9:0f:04:16:69:11:8f:81:
68:e5:8b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:05:29 2024 by rpki-client on console-ams.rpki-client.org