Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/C9vKVm9fab3roTzfGAZ68K8T4pA.roa
File: C9vKVm9fab3roTzfGAZ68K8T4pA.roa (raw, json)
Hash identifier: WpO7lDr5GWFwAo4qtuCLLrsSOwpEzstFJR1xII12bSM=
Subject key identifier: 0B:DB:CA:56:6F:5F:69:BD:EB:A1:3C:DF:18:06:7A:F0:AF:13:E2:90
Certificate issuer: /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Certificate serial: 018CC8DE6B48EA72C9BB2D0BA33C9033905B
Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/C9vKVm9fab3roTzfGAZ68K8T4pA.roa
Signing time: Tue 02 Jan 2024 06:31:08 +0000
ROA not before: Tue 02 Jan 2024 06:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216312
IP address blocks: 45.90.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:6b:48:ea:72:c9:bb:2d:0b:a3:3c:90:33:90:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Validity
Not Before: Jan 2 06:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bdbca566f5f69bdeba13cdf18067af0af13e290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:10:1c:bd:69:c7:3b:bd:2b:11:13:aa:36:
33:a3:44:9b:47:ca:17:8c:c0:43:bb:1e:63:a9:c1:
c2:bd:13:e3:74:28:54:15:74:6d:cc:84:25:29:99:
d5:90:c2:80:96:59:1e:34:bf:98:44:c0:70:ae:10:
96:b4:d7:f4:dc:27:48:35:14:aa:4b:84:4f:7b:66:
93:ff:1a:f6:ba:5d:78:29:19:18:ae:8f:b5:38:bb:
e5:b3:b9:56:d2:76:56:f8:51:46:f2:d7:31:dc:af:
ca:9a:06:ca:e7:5c:e8:3d:cd:1d:7c:ef:87:30:6a:
42:bc:be:64:39:61:f7:6e:64:6f:64:a3:61:62:f2:
59:ee:e6:12:13:10:2c:f3:ef:27:e4:78:f9:cf:f3:
5b:e6:ef:74:b8:15:26:fd:f4:f5:24:bf:5c:a1:70:
fa:4d:5b:a6:49:33:00:e9:a6:b4:df:4c:bf:ca:c3:
79:85:58:7b:d2:40:2d:08:a8:dc:12:36:8c:10:95:
7f:37:d8:ed:82:09:a0:1f:a7:2c:01:ec:c4:6c:68:
ae:e1:da:5d:31:67:e2:c3:48:c9:7c:82:f4:85:a8:
2f:cb:44:82:5a:3b:bd:39:66:3e:d6:04:b1:c1:fa:
b5:1c:f5:8f:b4:f5:e4:f1:d9:fa:ff:f7:86:8d:44:
c3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DB:CA:56:6F:5F:69:BD:EB:A1:3C:DF:18:06:7A:F0:AF:13:E2:90
X509v3 Authority Key Identifier:
keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/C9vKVm9fab3roTzfGAZ68K8T4pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.81.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f6:23:d4:be:ab:19:53:3e:5c:ce:d0:00:1a:ea:c5:fa:ca:
d9:f9:b4:c8:aa:01:14:b6:73:7a:07:a8:24:6a:39:aa:c5:66:
76:a4:0e:a3:84:af:c2:a2:a7:5d:f3:7e:67:71:8a:9d:bc:01:
6f:a9:15:2a:95:94:60:dc:5d:77:99:70:9a:a7:1b:17:39:be:
92:fd:91:3f:95:e2:f9:d9:ba:75:f7:e0:7a:20:02:9e:20:15:
90:cb:4c:e0:73:48:76:f8:09:ef:8c:be:31:92:b8:02:32:64:
c3:81:11:23:a6:38:d0:6b:c2:86:9e:e1:34:dc:df:a5:0e:7d:
78:84:30:c8:b3:cb:ab:34:25:3b:87:e7:1b:12:7e:f0:bc:3b:
05:33:3b:51:d4:15:df:a8:27:38:c7:d8:fa:ba:cf:c9:3e:0c:
fd:e2:f6:1c:69:2d:4c:c3:0b:60:46:c7:88:21:a9:c4:89:4f:
d9:a7:dc:17:ea:24:cc:6a:cd:05:aa:76:8e:de:78:a1:1e:ad:
85:db:7a:cd:53:3c:33:dd:d5:9b:cc:c0:0c:57:5b:ce:7f:dc:
c7:a1:26:77:64:c9:03:c4:77:34:2a:03:67:91:8a:98:fd:85:
91:59:a6:0c:42:e2:b6:74:bf:43:1f:33:c2:0f:3f:85:51:61:
7e:1a:19:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:03:42 2024 by rpki-client on console-fra.rpki-client.org