Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/gNC9KkuGO-WukymlPMGmLy0jwWU.roa
File: gNC9KkuGO-WukymlPMGmLy0jwWU.roa (raw, json)
Hash identifier: KhmM2k5HyYUW5YQyOOjsmOBRjPtTZoOVdeBNLECpcmM=
Subject key identifier: 80:D0:BD:2A:4B:86:3B:E5:AE:93:29:A5:3C:C1:A6:2F:2D:23:C1:65
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 018CC6B821AF1B110C5AF14BCEF7AC8AF764
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/gNC9KkuGO-WukymlPMGmLy0jwWU.roa
Signing time: Mon 01 Jan 2024 20:30:05 +0000
ROA not before: Mon 01 Jan 2024 20:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207959
IP address blocks: 45.142.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:21:af:1b:11:0c:5a:f1:4b:ce:f7:ac:8a:f7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: Jan 1 20:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80d0bd2a4b863be5ae9329a53cc1a62f2d23c165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:94:5a:77:70:42:ab:d8:38:3c:7e:5f:86:
f3:6a:18:39:bb:d4:ab:76:cd:87:27:89:6a:05:6d:
f4:f1:62:24:ce:a2:13:a1:4a:7d:8e:b4:1d:bc:f4:
ce:8d:a4:27:be:b4:7d:c5:b2:90:f5:70:87:46:70:
c3:32:91:aa:f3:45:ed:ce:d6:3f:b2:bb:2f:09:18:
f6:c1:3e:07:cc:f8:6c:29:24:d2:82:e5:3e:3c:82:
32:85:93:97:f4:ac:d3:59:9a:c4:d0:5a:52:d8:e0:
0f:26:67:e2:56:10:4f:13:9f:ee:a2:02:6f:3a:5d:
6d:e5:12:ca:7d:71:cd:57:a9:d6:64:b4:89:cb:5e:
d7:b0:78:09:ba:12:06:d8:32:6a:7e:9f:22:bb:29:
60:03:52:13:08:19:94:25:42:23:b1:0a:28:29:84:
66:ee:d4:0b:0c:a4:19:67:ef:27:1b:d3:06:7e:e8:
ca:a1:ca:91:3e:1f:11:0d:20:6e:c5:f0:8d:4b:3b:
97:fd:70:6b:26:06:bb:0c:db:95:74:a6:4b:b5:ca:
15:f1:bc:a6:99:e4:07:36:b1:22:ec:4f:27:01:8f:
ce:79:32:58:6d:1d:17:3e:d6:19:bb:36:67:59:c2:
98:e9:4b:8e:64:5d:fe:03:37:0a:ca:4b:ed:30:15:
d5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D0:BD:2A:4B:86:3B:E5:AE:93:29:A5:3C:C1:A6:2F:2D:23:C1:65
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/gNC9KkuGO-WukymlPMGmLy0jwWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.183.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:53:cf:2b:3e:6b:7e:38:6a:d4:ff:54:aa:f9:2d:ad:0f:96:
70:5d:7e:65:99:77:89:7c:d3:f4:7b:4a:d6:36:d3:73:c0:9c:
28:24:98:d0:ab:0e:67:e5:be:05:d8:8f:07:61:f6:25:a9:64:
fc:fb:2c:d0:86:7d:d9:51:0c:b7:8e:0b:ce:e7:50:92:55:86:
da:9d:21:ba:97:87:73:c9:23:f4:38:56:8d:cf:2e:fd:0b:ee:
4e:0c:a7:63:03:2a:24:2f:8d:cf:b9:83:1a:94:84:89:13:6c:
f8:67:fa:b5:39:ea:22:79:94:89:e2:aa:23:f5:da:e6:c3:97:
a0:ac:80:e7:38:ff:e2:69:6b:8d:47:c8:fb:26:29:36:26:bd:
45:83:3f:16:e2:24:f4:d9:2d:0d:8c:a3:7e:10:9d:89:5a:23:
7e:09:59:58:6d:f5:ea:15:69:e4:4e:3a:39:7f:59:83:6f:f0:
67:e5:bd:36:88:a0:ce:58:f6:fa:1e:65:d2:c1:f9:1e:3f:ba:
32:f5:d9:fd:97:a7:2a:c9:28:56:f9:0f:ab:24:2b:5c:54:2a:
b2:52:96:de:bf:4d:b9:0d:5f:74:f9:c3:22:98:fc:df:22:33:
9e:93:1a:04:b6:e9:0a:25:98:8b:d4:10:d6:46:4c:cf:a3:64:
d4:24:b6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:44:56 2024 by rpki-client on console-fra.rpki-client.org