Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/6Lrk0Bjsr9CqZD6LLxNZnrfjsco.roa
File: 6Lrk0Bjsr9CqZD6LLxNZnrfjsco.roa (raw, json)
Hash identifier: mGxZT2v26ug1B4opSr6sdBaUzs5giVySsYRwjMImmms=
Subject key identifier: E8:BA:E4:D0:18:EC:AF:D0:AA:64:3E:8B:2F:13:59:9E:B7:E3:B1:CA
Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial: 018CC5012F7EC7AF068CAAAD4B5F9883165E
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/6Lrk0Bjsr9CqZD6LLxNZnrfjsco.roa
Signing time: Mon 01 Jan 2024 12:30:38 +0000
ROA not before: Mon 01 Jan 2024 12:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209894
IP address blocks: 45.154.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2f:7e:c7:af:06:8c:aa:ad:4b:5f:98:83:16:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
Validity
Not Before: Jan 1 12:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8bae4d018ecafd0aa643e8b2f13599eb7e3b1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:5e:57:74:fd:6d:4c:55:c1:aa:c6:0a:04:
b0:ee:ed:0e:77:92:f2:31:6c:80:54:1a:44:ff:e4:
40:3b:98:b9:17:98:ef:08:b4:f3:a7:d9:0e:f2:85:
b7:df:05:71:71:0c:a3:a1:50:68:56:37:e9:a9:1e:
51:39:4e:36:9d:e8:ef:b1:71:b6:fa:3d:9e:be:16:
4a:4c:3a:46:bb:40:dc:10:71:1a:79:a9:d6:14:b7:
bf:d1:1f:cc:d8:6b:b5:c3:de:85:67:3e:05:ab:c8:
67:45:19:bf:ef:23:d6:4e:ca:29:0c:93:2e:f9:46:
64:bf:8e:b3:a6:17:b1:9f:72:85:cf:e2:bd:78:4e:
5b:7a:32:a4:02:3e:01:1f:36:9c:9e:6b:e4:d6:f5:
c1:a0:f1:0d:ae:4e:89:44:89:36:da:5f:79:b8:11:
16:a0:04:3a:89:e8:b1:2e:c5:50:60:04:4e:ae:33:
87:a3:d5:40:7f:7b:37:34:9f:02:b1:37:19:e0:d4:
94:cd:11:a1:c3:91:66:e7:52:e7:f0:8a:83:9b:36:
14:a4:b7:81:3e:09:a3:cb:c9:67:79:a4:c3:54:82:
df:61:20:25:fb:d8:68:0a:2a:eb:e9:a9:d2:53:90:
f7:37:ea:37:a6:ed:7f:fc:a1:24:93:83:9e:6a:fb:
2b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BA:E4:D0:18:EC:AF:D0:AA:64:3E:8B:2F:13:59:9E:B7:E3:B1:CA
X509v3 Authority Key Identifier:
keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/6Lrk0Bjsr9CqZD6LLxNZnrfjsco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.111.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f2:55:bb:a8:a0:7f:25:3e:e5:12:b5:65:73:fa:a2:bd:9f:
52:37:d4:80:99:c8:71:d1:13:36:7a:13:e1:80:80:c4:f6:c6:
77:d0:1a:43:32:a5:c7:f9:1e:0e:32:49:3b:9c:d8:40:e7:c9:
f3:4d:10:b0:a6:30:d7:28:ef:cd:b1:8c:d0:e2:f6:48:40:ae:
4b:e8:2d:f0:9d:b6:dd:6f:fb:be:65:83:e7:10:78:39:e8:e4:
55:01:92:20:24:cb:45:9e:14:76:87:db:52:f0:74:ce:a8:41:
52:23:00:0d:2e:9e:d6:a9:9d:35:33:d9:10:7c:04:03:e1:26:
1e:4b:24:15:f6:14:b6:89:b7:ee:0a:f2:a5:95:a1:2d:0f:81:
73:b1:67:b5:34:ad:a8:f9:23:f6:91:98:e0:ad:51:ac:12:6b:
81:58:7e:93:fd:b8:14:94:6a:6e:f3:ed:c8:72:50:f2:0d:e3:
f8:a7:e0:e9:5f:37:f4:a7:11:8b:be:b5:4c:f9:a4:20:d3:f8:
70:c3:b4:60:d4:5a:1b:75:a5:05:27:05:b0:cd:f2:a6:67:a7:
89:a5:21:4e:26:ff:cb:27:24:c8:84:f7:55:cf:d3:cf:c4:da:
53:a3:38:99:2f:07:fc:e7:62:92:35:0f:9b:a4:80:df:0f:fb:
9f:44:9a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:15:15 2024 by rpki-client on console-fra.rpki-client.org