Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/uSxPWgyRrkdJKNbDSQn-toRqcx4.roa
File: uSxPWgyRrkdJKNbDSQn-toRqcx4.roa (raw, json)
Hash identifier: pcj5ehk72z5sbNYSg8NIoi0PHWMVp0sphaPTEwEEhxg=
Subject key identifier: B9:2C:4F:5A:0C:91:AE:47:49:28:D6:C3:49:09:FE:B6:84:6A:73:1E
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01913698E00869A2C9B7E633A965CBCA882A
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/uSxPWgyRrkdJKNbDSQn-toRqcx4.roa
Signing time: Fri 09 Aug 2024 10:04:34 +0000
ROA not before: Fri 09 Aug 2024 10:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201138
IP address blocks: 185.145.54.0/24 maxlen: 24
185.145.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:36:98:e0:08:69:a2:c9:b7:e6:33:a9:65:cb:ca:88:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 9 10:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b92c4f5a0c91ae474928d6c34909feb6846a731e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:43:e8:ad:f5:5a:2a:1b:d0:dc:dc:f9:63:5c:
dc:fe:8e:f4:4b:7a:a4:b7:a7:1f:a8:67:c0:cc:29:
d3:e4:98:0a:55:06:48:73:fa:03:64:aa:c0:e5:17:
21:63:47:c7:e5:35:f5:01:08:1e:cd:e8:a0:c4:80:
d8:6c:23:9a:65:35:07:a3:bf:f8:80:4a:a3:f8:29:
b2:53:ce:16:02:3d:d7:4e:20:27:76:fe:35:23:6a:
91:1c:fd:a3:36:1d:25:87:de:dd:4f:02:d8:85:af:
76:8e:ee:04:5f:0e:a4:63:42:64:0f:45:e2:68:95:
8e:17:e1:38:51:e0:45:d5:9b:a3:1c:78:6b:21:9c:
1b:38:59:22:25:f6:1f:a5:8c:3e:9f:d8:fc:7a:7e:
f3:74:ed:47:b7:1f:d5:d6:3d:c9:76:31:83:b2:6d:
de:d2:25:68:49:d6:5c:55:c6:8f:07:e6:57:50:bb:
40:fa:e3:9b:4b:bf:ac:54:99:53:db:71:f8:32:bc:
94:c5:78:df:95:a0:16:7e:83:d8:10:30:cd:95:b8:
45:2b:55:93:c7:08:30:00:e4:5d:3a:ab:34:da:2f:
be:1e:f2:d6:4e:fa:8b:da:c8:e4:09:f6:b6:cf:44:
ff:7c:9e:1b:1c:b8:57:c8:5a:bf:fd:fb:07:41:50:
ee:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2C:4F:5A:0C:91:AE:47:49:28:D6:C3:49:09:FE:B6:84:6A:73:1E
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/uSxPWgyRrkdJKNbDSQn-toRqcx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.54.0/23
Signature Algorithm: sha256WithRSAEncryption
23:26:57:60:cb:0c:a5:9d:8c:46:ea:9b:4f:4a:3b:8d:aa:4c:
69:45:54:88:f6:74:fb:f7:3d:3b:b4:ac:29:0a:23:e4:7f:6b:
d8:fc:d3:d8:6a:a0:2c:96:e6:a3:72:5a:86:ac:c3:2e:74:70:
06:37:f4:29:86:43:b4:ed:e0:9b:55:0a:a9:45:6f:ae:aa:38:
cf:4a:52:66:f7:01:4b:08:a7:f2:72:e3:0a:c0:d2:2b:a6:d5:
c2:91:ba:f7:33:b5:6d:bc:d3:82:cc:af:9a:29:3c:d6:1e:1f:
6a:f8:5b:57:64:34:87:a9:08:c3:45:9a:4b:e6:60:01:4a:41:
30:bf:6e:b3:f8:d7:87:43:b6:3f:ee:2d:99:ce:0c:50:c5:09:
49:d8:5b:99:b7:b4:54:3c:ff:69:ef:62:44:ae:5f:33:f5:1c:
5b:8a:99:78:ba:c9:97:03:84:fd:f0:84:75:ce:0d:2a:da:b9:
63:9b:a9:9a:53:a0:65:5e:fb:04:cb:18:3e:bd:2a:53:7d:28:
e1:fa:1a:70:71:cd:6f:39:52:d0:48:c7:83:86:a4:df:58:94:
14:ec:1c:7a:39:14:89:e0:14:ad:80:f8:c6:ca:7d:de:41:3d:
86:4e:de:e4:7e:5b:38:81:6a:96:d3:0f:af:3c:04:6e:66:8a:
16:4a:0f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:45:48 2024 by rpki-client on console-ams.rpki-client.org