Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/kwOvDfPPlo_flqHYch8ud2fDrhM.roa
File: kwOvDfPPlo_flqHYch8ud2fDrhM.roa (raw, json)
Hash identifier: Pvl2lqG9djx7Le61X/ChrjjhzGyoBm2HVbg7kYEQZYE=
Subject key identifier: 93:03:AF:0D:F3:CF:96:8F:DF:96:A1:D8:72:1F:2E:77:67:C3:AE:13
Certificate issuer: /CN=45d1a7716025171133a3202c9462a0eabd660682
Certificate serial: 018D853B5851DB5FF375B60F6443D489B365
Authority key identifier: 45:D1:A7:71:60:25:17:11:33:A3:20:2C:94:62:A0:EA:BD:66:06:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/kwOvDfPPlo_flqHYch8ud2fDrhM.roa
Signing time: Wed 07 Feb 2024 20:21:15 +0000
ROA not before: Wed 07 Feb 2024 20:21:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50767
IP address blocks: 91.230.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:85:3b:58:51:db:5f:f3:75:b6:0f:64:43:d4:89:b3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d1a7716025171133a3202c9462a0eabd660682
Validity
Not Before: Feb 7 20:21:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9303af0df3cf968fdf96a1d8721f2e7767c3ae13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:e4:1a:f8:da:77:d9:7f:3a:d5:05:41:cb:
44:88:2e:02:8b:00:74:7a:d1:43:a3:d4:72:6c:65:
99:aa:fd:07:7d:e4:47:d3:b9:71:82:da:4e:e3:c4:
56:5a:ad:4c:ab:91:5e:a2:81:9a:f9:8c:39:d4:63:
5b:c2:1b:e5:51:fc:fe:93:31:ba:86:2d:70:0e:d7:
c4:58:94:5e:ed:00:80:f2:bd:c9:01:0a:31:6b:bf:
90:55:26:b0:cc:6b:60:69:1f:e2:02:27:33:a2:cd:
d5:3e:2c:ad:a8:45:f4:af:89:5f:0d:d9:6c:f6:9f:
13:36:3e:d8:90:8c:b3:98:cd:7d:0f:4a:72:0f:15:
9a:da:e8:df:a6:05:f9:fc:ad:76:67:9e:66:c8:e6:
bd:0a:ee:68:0e:0f:60:5f:1e:56:cc:58:be:b5:b0:
7b:07:1e:37:fa:2c:3a:ad:5c:85:31:5d:37:ef:4c:
68:6f:ad:b4:ea:6d:c7:ef:00:70:f1:67:74:1c:b4:
15:93:88:8f:bc:a7:b7:9b:d8:dc:34:30:40:ab:04:
c2:e6:00:61:23:e2:9c:97:52:9c:a8:d2:9e:4d:10:
1a:c5:b0:30:73:e5:86:d7:e9:7b:36:d7:62:04:cf:
1d:a0:a7:2d:ba:a4:66:55:45:25:80:b1:0f:0b:19:
85:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:03:AF:0D:F3:CF:96:8F:DF:96:A1:D8:72:1F:2E:77:67:C3:AE:13
X509v3 Authority Key Identifier:
keyid:45:D1:A7:71:60:25:17:11:33:A3:20:2C:94:62:A0:EA:BD:66:06:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/kwOvDfPPlo_flqHYch8ud2fDrhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.98.0/23
Signature Algorithm: sha256WithRSAEncryption
65:ab:a9:c9:b3:4c:39:0d:dd:9d:8a:00:4d:e6:c6:32:83:db:
37:3b:7c:b0:f3:0d:c1:2d:a9:af:5d:99:b2:21:38:37:2a:43:
90:6d:ba:2e:46:02:9f:ce:9a:3a:eb:16:bc:5d:e0:2b:45:9a:
e5:d3:02:d5:86:28:6d:b4:07:61:e5:a7:12:9d:45:6d:b4:f7:
10:8f:26:3d:5d:93:11:96:9a:59:0b:6f:f7:5d:4d:2b:fe:bc:
3a:8b:50:9f:27:9e:b6:d6:5d:8d:a7:1e:bb:60:6a:f4:2a:06:
26:69:7a:d5:00:3c:8c:2c:d4:cf:ec:06:31:ba:66:6c:0d:c1:
97:41:6b:b3:4c:a4:f8:ff:fc:fd:6f:9b:05:a0:68:65:1f:c8:
e5:72:5b:c7:ad:db:c2:55:3a:dc:6a:a3:85:d9:53:49:50:e7:
7c:52:db:e8:e2:cb:87:7f:42:84:df:97:7a:5a:ba:3e:66:30:
02:a0:24:53:3a:0f:d6:67:e4:d9:5b:b7:00:43:aa:45:dd:a0:
02:81:bb:c6:24:e8:7a:01:29:08:df:89:b7:58:52:d5:90:40:
53:19:d1:6a:89:b3:6b:1c:23:b3:cc:8e:02:5f:fa:d6:ee:0a:
da:f0:15:5f:4b:2c:43:a6:30:59:b9:06:67:8f:f2:8e:b6:89:
9f:46:da:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:16:46 2024 by rpki-client on console-ams.rpki-client.org