Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/S4icWGLgEVNDhIpZ0y-SILNKSFg.roa
File: S4icWGLgEVNDhIpZ0y-SILNKSFg.roa (raw, json)
Hash identifier: u47Ey5uuv7ryxSKPNJpXffpiycZIYLSeNJpRqJIrWY4=
Subject key identifier: 4B:88:9C:58:62:E0:11:53:43:84:8A:59:D3:2F:92:20:B3:4A:48:58
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018EDC64A4DEBB8F4832F091D5CDB19B7DCE
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/S4icWGLgEVNDhIpZ0y-SILNKSFg.roa
Signing time: Sun 14 Apr 2024 11:36:07 +0000
ROA not before: Sun 14 Apr 2024 11:36:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 67844
IP address blocks: 45.150.9.0/24 maxlen: 24
45.150.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:dc:64:a4:de:bb:8f:48:32:f0:91:d5:cd:b1:9b:7d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Apr 14 11:36:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b889c5862e0115343848a59d32f9220b34a4858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bc:74:d0:26:14:39:68:d8:7d:12:02:b2:b7:
eb:94:5b:53:55:6d:78:e4:91:49:84:45:66:7a:22:
a8:c2:e1:0a:26:61:fb:dc:00:35:b2:87:31:91:ca:
7b:6e:f2:5c:3c:81:3a:5a:30:e3:6b:ad:0b:15:c7:
82:c6:35:e6:de:0e:25:7b:a0:22:dd:3a:4b:31:d5:
fe:6f:ae:67:54:46:02:e1:86:3a:be:13:03:13:6c:
25:d9:3c:d9:e6:39:f0:bc:97:64:45:16:70:a9:66:
ce:d8:f3:f8:ca:86:fd:c8:52:1f:ee:fa:cc:0c:d0:
99:9c:15:60:b6:49:6b:2a:f3:da:c5:af:28:2a:b7:
c8:1d:fb:d4:09:80:c4:17:19:06:15:1e:48:69:73:
61:f1:84:30:00:ab:ee:f1:09:98:04:a7:4d:d8:5c:
7e:ab:56:15:87:44:26:e3:e6:e8:7d:25:7e:5c:3a:
59:ba:ca:2d:a1:c1:25:28:ed:2b:7f:e7:36:30:84:
fa:a7:00:0a:6a:63:55:81:ef:ab:41:10:82:f6:45:
a7:ad:47:5e:47:aa:b2:a5:20:58:86:11:aa:8f:cf:
76:da:ad:ff:a5:7d:7c:05:66:18:98:68:39:fa:4a:
38:1d:d5:fd:99:11:84:cc:f2:dd:9a:7f:64:7b:63:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:88:9C:58:62:E0:11:53:43:84:8A:59:D3:2F:92:20:B3:4A:48:58
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/S4icWGLgEVNDhIpZ0y-SILNKSFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.9.0-45.150.10.255
Signature Algorithm: sha256WithRSAEncryption
5a:ba:a9:6d:e8:95:bc:52:53:b4:8f:b6:34:15:66:3b:33:b3:
f2:fc:df:26:9e:17:c8:0d:40:09:ad:24:d3:62:82:35:a5:01:
0b:75:22:40:68:b1:a6:46:cd:94:9c:71:ff:93:7e:3f:f9:88:
3e:d8:94:dd:a7:a4:4f:e2:e7:2a:fc:1c:5b:f9:99:bf:ea:5f:
c0:f6:89:dd:5e:97:27:5b:39:05:f9:e9:a4:94:23:5e:b8:83:
02:18:0f:a3:19:d4:40:e4:fc:52:f5:da:89:8c:17:c1:f9:d0:
67:b6:f8:1a:66:5c:a8:ba:e9:2b:3e:70:70:d0:3b:93:24:21:
fc:63:33:c8:9a:73:22:f2:6f:25:d9:99:6c:f4:db:c6:d6:d8:
20:4a:8b:17:d0:f2:58:1d:02:c0:e1:e0:44:6e:ae:25:9d:ea:
af:72:77:15:f5:63:32:bb:17:50:b9:7b:0f:83:b5:de:83:24:
1f:2f:d8:32:1b:60:fa:dd:75:08:1c:ae:d1:83:21:86:fe:c5:
99:08:87:80:f4:ca:47:32:ed:01:8b:60:08:df:4e:51:11:71:
e5:f2:e8:8f:e2:a0:b9:07:5c:c3:c5:e9:3e:29:2b:1f:79:e8:
11:a5:85:2e:fb:bd:a4:c6:d4:85:1c:9e:44:cf:33:44:40:5e:
45:21:27:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:01:57 2024 by rpki-client on console-fra.rpki-client.org