Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/y8FJ7bQObxegxtBaDoBJriAbylE.roa
File: y8FJ7bQObxegxtBaDoBJriAbylE.roa (raw, json)
Hash identifier: YF8CuPHMJs/zFXMUmWYSEbE9R4CrAjrhmpq887FBu/I=
Subject key identifier: CB:C1:49:ED:B4:0E:6F:17:A0:C6:D0:5A:0E:80:49:AE:20:1B:CA:51
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0190E9F10452F5D32398D343F285A80824B9
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/y8FJ7bQObxegxtBaDoBJriAbylE.roa
Signing time: Thu 25 Jul 2024 12:50:04 +0000
ROA not before: Thu 25 Jul 2024 12:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57523
IP address blocks: 45.95.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e9:f1:04:52:f5:d3:23:98:d3:43:f2:85:a8:08:24:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 25 12:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbc149edb40e6f17a0c6d05a0e8049ae201bca51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:43:c3:9b:c9:2d:27:ed:3a:b2:e7:e7:b9:
ef:b2:46:af:e3:89:f5:74:47:ba:46:3f:7b:23:4d:
16:8f:fb:88:51:c7:d3:c1:b6:59:d9:b4:e9:d1:a2:
77:c0:94:fc:e7:4a:45:ea:09:59:68:22:79:81:0b:
9c:ca:f4:35:ad:9a:ce:d0:33:45:c7:69:1c:6e:8d:
c8:26:96:fc:88:9e:c6:d6:ac:19:e4:1c:eb:ee:e4:
a1:43:7b:2d:10:46:5e:1c:09:7a:3f:87:1b:1e:d0:
49:18:c7:9d:ae:71:2b:bc:69:de:26:eb:10:63:1c:
41:52:a6:35:16:0b:45:c8:7c:43:e5:3e:fa:bf:69:
98:c3:32:e0:27:72:56:bd:af:69:68:1c:58:c8:ae:
c8:39:7a:a8:a9:d2:ff:38:28:e7:3d:0e:d5:b5:ff:
ae:8e:d7:55:6a:95:a8:2d:bd:34:ab:dc:98:29:2e:
d6:29:20:65:57:9f:1e:6b:c1:e4:ca:61:9c:d5:22:
b0:d1:79:c7:40:f3:39:d8:00:55:ac:f7:b4:e8:af:
29:60:ea:13:d1:f0:c8:f6:6c:84:bc:90:92:c1:68:
a4:2a:aa:11:42:2c:e8:28:18:a4:13:98:b3:1e:cf:
86:36:13:e1:2c:92:96:be:cc:ac:cc:2c:58:fb:5f:
41:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C1:49:ED:B4:0E:6F:17:A0:C6:D0:5A:0E:80:49:AE:20:1B:CA:51
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/y8FJ7bQObxegxtBaDoBJriAbylE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.30.0/24
Signature Algorithm: sha256WithRSAEncryption
31:df:bf:29:5c:a6:1c:17:44:6d:c9:12:7a:93:98:4b:87:4b:
0c:8a:83:f8:3d:70:15:72:dc:95:f0:79:17:cd:2a:4f:c9:89:
76:23:2e:84:6a:fe:8c:ec:b3:20:96:6c:d7:7c:28:5f:44:12:
92:e8:25:72:3a:9a:3e:e1:0d:fa:1c:36:21:8b:c0:fd:5a:95:
9b:7b:95:35:b5:4f:e0:de:05:86:53:26:0c:53:2c:ea:0c:f6:
4f:ac:13:35:81:bd:08:38:72:d1:7b:5d:b5:1d:e6:66:62:c5:
9b:d4:05:a6:f7:32:25:ca:06:44:62:90:a4:77:bc:b2:2e:c0:
a3:01:b3:9d:97:bc:9f:67:28:0c:90:9b:12:c2:4a:95:70:cd:
20:2a:d1:f8:3d:f6:3b:55:f1:d7:8b:e7:55:c5:45:09:da:b9:
2d:95:04:04:33:3c:60:49:cc:09:c0:90:9c:fd:83:7e:88:3e:
ce:50:ee:b9:e8:1d:57:9c:e7:fe:55:cf:a3:c5:a8:0b:f4:fd:
03:8b:12:3e:ca:90:14:3a:e6:70:08:04:c3:db:07:b4:a9:2c:
6d:7d:b5:b0:75:36:87:7e:c3:b7:a0:74:ff:4f:5d:eb:77:6f:
d5:ca:6f:fa:a6:11:9a:89:f4:5f:5b:bb:6c:80:a7:cb:c4:bd:
a6:ed:f7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:26:03 2024 by rpki-client on console-ams.rpki-client.org