Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/obCacYNDkoYBSIpqiOxg2skasu8.roa
File: obCacYNDkoYBSIpqiOxg2skasu8.roa (raw, json)
Hash identifier: 2w5bc6B9o16GgAuseKGt/+amiYEvmWW5EW+ReZ1s4tQ=
Subject key identifier: A1:B0:9A:71:83:43:92:86:01:48:8A:6A:88:EC:60:DA:C9:1A:B2:EF
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 01916062A437E9B7C3F4F2B4F2B636B59828
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/obCacYNDkoYBSIpqiOxg2skasu8.roa
Signing time: Sat 17 Aug 2024 12:49:22 +0000
ROA not before: Sat 17 Aug 2024 12:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205122
IP address blocks: 45.92.52.0/22 maxlen: 24
45.92.52.0/24 maxlen: 24
45.92.53.0/24 maxlen: 24
45.92.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:60:62:a4:37:e9:b7:c3:f4:f2:b4:f2:b6:36:b5:98:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Aug 17 12:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1b09a718343928601488a6a88ec60dac91ab2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:5f:36:3d:46:3c:44:af:bc:a2:c5:ba:f1:
5f:eb:8b:79:26:72:72:ac:fb:ca:68:75:53:30:1d:
44:4a:a9:3e:53:6e:c8:52:5e:33:74:0e:56:09:17:
3d:b5:40:2e:18:d5:4d:b0:7e:9f:f5:dd:d1:31:b6:
7f:cc:e3:57:b8:91:6b:ce:76:fe:67:6c:8a:ea:c5:
61:a7:eb:e0:f5:1c:df:cf:8d:6e:33:6b:80:b4:9a:
c4:68:f9:00:c4:31:98:b0:a4:13:e2:67:38:4b:f5:
5e:3d:02:6f:9c:cc:ae:82:9e:19:a3:41:17:58:8b:
00:2b:42:11:61:d8:eb:04:a6:a2:bd:d4:59:f4:24:
9c:e1:4e:22:5c:c7:35:36:08:21:18:8d:6f:aa:b6:
51:37:fa:f4:98:25:86:d1:f0:01:6a:c1:48:1b:85:
72:69:89:f3:21:d3:b2:a4:8a:d2:09:6e:ed:f4:b4:
0e:a1:0e:04:49:52:1a:3f:2c:5d:1b:8e:f3:fa:dd:
ef:95:47:14:50:58:6b:ef:ff:c7:be:5c:13:dc:58:
e9:26:53:96:d6:cb:1d:89:1c:a0:5e:e8:0c:f4:8b:
d2:5b:17:59:66:da:db:7f:40:87:10:9d:7f:4e:4b:
2c:69:ee:f4:fb:32:80:ab:84:3d:91:af:b6:75:22:
a6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B0:9A:71:83:43:92:86:01:48:8A:6A:88:EC:60:DA:C9:1A:B2:EF
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/obCacYNDkoYBSIpqiOxg2skasu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.52.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:7c:08:43:61:1a:d9:c5:88:cf:b0:22:0d:ea:a8:a2:51:1e:
b2:90:9a:ea:65:c2:c7:b6:a6:87:93:17:c1:60:47:49:47:9d:
0b:3f:72:99:f2:01:8e:23:89:31:65:ce:20:08:11:01:f4:5d:
79:24:e6:d0:51:89:bf:f1:98:73:d9:26:1b:78:ba:f4:d6:20:
3c:db:79:cb:3a:30:04:8f:a0:a6:e7:cb:0d:3e:88:36:54:04:
2f:c8:2e:f1:d1:c9:60:52:c9:0e:38:19:a8:9c:83:00:19:e4:
e2:4a:d5:51:3c:1e:55:88:28:e4:87:30:4c:b9:53:2e:a0:b3:
1c:97:4d:5e:24:a7:11:3c:1e:aa:8e:c1:3e:39:e3:68:02:cb:
ae:03:e4:3e:c6:45:e2:aa:3b:36:7b:45:ad:14:7d:35:a7:e2:
88:17:cd:af:a2:dd:10:85:fc:0d:cb:de:fb:a5:a0:c0:18:f9:
96:55:d3:70:b4:87:eb:c4:31:96:78:d3:29:82:74:d2:da:be:
4a:7a:8c:35:a5:97:4b:6c:d0:6c:76:b5:1c:93:f6:1c:a4:99:
c4:70:70:3d:5c:79:21:b1:12:8c:61:a8:4c:5f:05:f1:7c:06:
06:ef:39:b0:6a:2f:b4:3e:19:4f:08:73:35:bb:a1:8e:94:4f:
fc:5b:fa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:22 2024 by rpki-client on console-fra.rpki-client.org