Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/fMsAmDXf-ElfxuB4cfO4vVxfYRg.roa
File: fMsAmDXf-ElfxuB4cfO4vVxfYRg.roa (raw, json)
Hash identifier: E9hwOXgW1VKQCrmhPVbPy70W+V58LLUxxBh2UydIydg=
Subject key identifier: 7C:CB:00:98:35:DF:F8:49:5F:C6:E0:78:71:F3:B8:BD:5C:5F:61:18
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 018CC64B3D896DF2D3F948180427D279556B
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/fMsAmDXf-ElfxuB4cfO4vVxfYRg.roa
Signing time: Mon 01 Jan 2024 18:31:08 +0000
ROA not before: Mon 01 Jan 2024 18:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208663
IP address blocks: 45.91.0.0/22 maxlen: 22
45.91.3.0/24 maxlen: 24
2a0e:840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:3d:89:6d:f2:d3:f9:48:18:04:27:d2:79:55:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Jan 1 18:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ccb009835dff8495fc6e07871f3b8bd5c5f6118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:6c:14:c4:77:75:00:cc:8c:e9:58:82:ab:
f1:5c:3f:40:49:85:c6:3d:6a:15:30:a9:72:fb:37:
4d:91:30:cf:3c:26:58:ec:48:27:01:6a:7f:3a:b3:
06:4d:6c:b4:cd:3d:04:b3:c7:c1:3e:b1:0f:37:ae:
ab:3e:4b:56:8f:01:3e:9d:e5:44:f9:bd:59:fb:64:
a1:6f:37:e3:f3:ad:80:ae:2e:80:49:3d:7a:e2:7f:
87:35:cc:ba:59:33:a8:98:1b:91:e7:b1:85:df:28:
ed:e6:37:8b:1f:cb:ba:a8:39:47:7b:44:7e:e0:bf:
aa:ff:c9:71:30:62:f9:aa:62:ae:ee:7a:b6:df:29:
8c:61:8e:00:f1:d5:1a:ba:cf:4c:e5:e7:6b:c2:37:
20:60:1a:e0:46:25:7e:cd:02:f3:ea:de:aa:ad:bb:
a2:49:bd:96:bb:83:dc:ee:80:91:fc:4d:8b:f3:b9:
45:33:38:20:88:73:05:c2:27:68:c4:1b:aa:e2:0d:
6b:35:2e:c9:9c:db:4d:b7:8c:69:ef:77:8e:ec:bb:
40:b6:af:c5:95:f9:07:0e:ec:e9:50:35:3a:0f:c4:
b8:d3:30:d2:f8:80:ea:32:3b:72:ba:99:b9:c3:75:
67:12:be:c9:15:19:7a:10:93:10:de:16:5f:44:47:
13:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CB:00:98:35:DF:F8:49:5F:C6:E0:78:71:F3:B8:BD:5C:5F:61:18
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/fMsAmDXf-ElfxuB4cfO4vVxfYRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.0.0/22
IPv6:
2a0e:840::/29
Signature Algorithm: sha256WithRSAEncryption
5d:3d:f7:ba:de:51:bb:3e:ec:ea:6f:38:9c:5c:a5:2c:be:5d:
a5:c2:bd:50:9e:d1:d2:0e:e8:63:65:90:65:94:0e:c0:f4:13:
2d:1b:d1:86:67:8d:0e:4a:f3:1e:94:74:0d:33:83:4c:7c:ee:
22:58:95:5b:cd:4a:b8:3e:87:c7:c2:7c:46:ee:6d:02:fc:61:
30:db:92:8b:62:3a:12:72:9a:db:30:3a:c3:4a:2f:6c:92:ff:
3c:9f:a0:c8:b6:6a:53:09:23:83:71:02:45:7b:c5:f3:f8:0c:
6b:78:87:45:35:a7:cf:2e:58:52:45:eb:e2:7c:e3:a7:88:91:
2e:31:6b:4d:cf:de:31:88:9f:ff:d4:6c:97:95:44:c5:bf:0e:
71:10:6a:70:88:a2:8f:50:d1:aa:0a:08:cf:1c:a6:7f:ee:27:
fb:cc:51:a6:b1:dc:20:11:df:71:a7:0f:a1:76:a1:19:16:78:
e9:05:c1:a3:73:46:3b:7d:62:c4:ec:93:56:0c:db:94:8b:e9:
09:ed:c4:c3:82:4c:e3:ac:2a:7c:cd:a3:18:3f:b7:46:25:35:
e9:1b:bf:a2:92:07:43:c3:3f:cb:6f:c9:f5:ea:6e:83:f8:50:
48:75:3a:85:00:53:bc:e2:57:f7:f6:5d:3e:e7:ab:bb:7f:48:
77:cb:f9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:54:43 2024 by rpki-client on console-fra.rpki-client.org