Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/I4vFHOOVWWbnxx-PdB1ON-AZwRo.roa
File: I4vFHOOVWWbnxx-PdB1ON-AZwRo.roa (raw, json)
Hash identifier: M8D0iOf8stqHGtQLjs4Gl9WwQMv5+0ApD9K1BLcyiCA=
Subject key identifier: 23:8B:C5:1C:E3:95:59:66:E7:C7:1F:8F:74:1D:4E:37:E0:19:C1:1A
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018CC2DB38CC9D1A0BF3419F85883D83DD6D
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/I4vFHOOVWWbnxx-PdB1ON-AZwRo.roa
Signing time: Mon 01 Jan 2024 02:29:55 +0000
ROA not before: Mon 01 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210122
IP address blocks: 45.11.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:38:cc:9d:1a:0b:f3:41:9f:85:88:3d:83:dd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=238bc51ce3955966e7c71f8f741d4e37e019c11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:86:50:b5:7c:0a:a1:3b:d5:25:1d:fa:de:54:
e6:77:42:3b:0a:96:30:37:ba:c2:33:37:9a:55:6c:
bb:75:a4:05:4c:bf:ce:d8:04:ef:4c:cc:de:2c:9b:
8d:89:bc:67:28:91:83:e8:de:f9:ea:96:90:29:cb:
fc:54:50:47:52:14:a5:45:ef:39:a1:af:8b:b6:7b:
85:47:f0:cf:d4:c3:e4:34:f2:4b:7a:1b:7d:7c:44:
cd:45:49:ca:5c:d3:e8:87:48:fa:ab:d3:9b:95:d6:
21:5d:5c:f7:ad:88:69:4e:e0:2b:ea:34:86:e3:03:
84:89:e2:66:6a:4d:bb:4c:24:5a:40:28:98:ad:d6:
66:14:96:aa:97:65:a6:ba:9d:67:9a:5e:dc:2b:67:
31:ea:23:a7:ce:f7:e3:65:d5:4e:08:08:d3:30:4c:
9e:db:9e:86:62:0d:a3:78:28:17:80:b0:37:db:9c:
5a:ab:9c:0e:0a:68:3a:65:7a:de:04:09:77:24:08:
62:73:30:c9:5f:53:04:c4:5e:33:c1:a5:7b:a3:03:
d1:4e:ce:65:8e:03:1c:d4:95:7c:d6:ad:d3:29:0c:
54:e6:1c:ec:6f:42:45:a7:ec:84:6d:72:12:da:d9:
ea:ea:62:08:35:b0:ed:6b:69:03:b3:f3:c8:70:30:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8B:C5:1C:E3:95:59:66:E7:C7:1F:8F:74:1D:4E:37:E0:19:C1:1A
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/I4vFHOOVWWbnxx-PdB1ON-AZwRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.191.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:35:99:22:d9:6b:ba:18:4b:47:ca:9a:10:fb:22:72:ef:75:
38:f0:03:e1:74:46:03:e4:62:e2:6e:cd:ea:57:74:ee:04:08:
57:4f:dc:6b:ec:49:de:83:78:57:26:27:f3:61:2d:2c:87:95:
ec:53:c5:23:ed:af:34:9e:d4:f9:26:cd:57:80:8c:cc:03:a3:
66:e9:eb:c7:01:42:ab:8f:5e:6f:f2:dc:73:40:e2:93:35:db:
e5:3a:24:8c:2d:1c:d0:72:01:3a:7c:ec:61:f1:c3:ce:04:80:
45:87:06:fb:91:d9:ff:82:d4:fa:29:8d:cc:94:8a:0c:09:a2:
41:7e:50:52:41:40:3a:f1:fa:4b:53:d0:9d:7a:88:8b:79:80:
7c:ad:bd:db:97:01:c6:3c:eb:39:20:12:10:af:7b:8c:ee:e2:
1a:50:32:50:14:63:95:03:34:0c:d7:42:66:dd:fc:8d:eb:9a:
8d:71:0a:d4:cd:50:d5:da:ee:4e:e2:de:cf:a4:5b:23:54:9f:
11:54:2a:a4:65:a5:71:ea:32:ec:a0:72:df:a7:f7:96:1e:16:
4d:74:42:df:df:51:e1:c7:5a:2f:6e:d3:44:04:5f:10:ed:18:
6d:e0:c8:94:6d:f0:9f:d3:70:04:2b:24:2b:05:d7:76:89:55:
39:3c:29:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:55:49 2024 by rpki-client on console-fra.rpki-client.org