Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/9aROM1ISIqCZGKwFjL2gGPKGyfg.roa
File: 9aROM1ISIqCZGKwFjL2gGPKGyfg.roa (raw, json)
Hash identifier: uds09tA6T27pDvzvpdNO2hhJDGlnlAA9nZ3FaxHDcZU=
Subject key identifier: F5:A4:4E:33:52:12:22:A0:99:18:AC:05:8C:BD:A0:18:F2:86:C9:F8
Certificate issuer: /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Certificate serial: 018CC64B6554DB0951CF4E6A8DAE8C40439A
Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/9aROM1ISIqCZGKwFjL2gGPKGyfg.roa
Signing time: Mon 01 Jan 2024 18:31:19 +0000
ROA not before: Mon 01 Jan 2024 18:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203714
IP address blocks: 45.134.62.0/23 maxlen: 23
45.134.62.0/24 maxlen: 24
45.134.60.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:65:54:db:09:51:cf:4e:6a:8d:ae:8c:40:43:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Validity
Not Before: Jan 1 18:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5a44e33521222a09918ac058cbda018f286c9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bb:e1:3c:06:3a:71:8e:25:e0:5e:50:f7:e1:
60:e6:7e:67:d8:76:e5:c1:3a:5e:a9:6c:91:39:40:
e6:78:20:50:01:74:ea:07:78:52:c4:6f:8c:86:69:
14:48:86:fa:ad:f2:00:07:71:e4:25:2c:68:8a:ae:
d3:70:e0:8c:2d:88:08:e8:bf:5e:e3:81:72:c2:de:
e5:22:be:d0:be:ed:23:32:44:6c:fb:8b:97:04:b4:
47:63:b8:fd:32:dc:6f:40:0f:87:dc:0a:30:24:fd:
d0:74:b6:3a:c7:cd:91:e9:db:e1:0c:25:1c:1b:75:
59:c3:75:cc:86:59:e7:6b:2d:33:2e:ad:a0:53:6c:
73:ba:97:a3:0b:44:87:16:87:ff:fb:ce:6f:b8:14:
b6:90:a1:03:40:14:6b:67:9c:82:9c:9c:a8:1e:74:
f4:b7:b6:0a:dd:0d:44:76:bd:a0:a8:35:6a:f4:e8:
93:e4:83:58:10:de:5a:66:65:81:80:ad:e7:be:c4:
3a:1f:3c:ef:ea:a1:73:63:05:17:95:fa:95:fb:f7:
5f:0d:14:16:23:9c:39:f5:06:72:f4:5c:83:bd:09:
fe:89:4f:0d:05:c9:6f:97:07:34:bb:76:ec:cf:aa:
a4:a4:c4:34:99:89:ed:cd:5a:c2:4e:78:08:89:3c:
71:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A4:4E:33:52:12:22:A0:99:18:AC:05:8C:BD:A0:18:F2:86:C9:F8
X509v3 Authority Key Identifier:
keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/9aROM1ISIqCZGKwFjL2gGPKGyfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.60.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:9c:6a:4e:c5:65:cb:c1:67:b7:12:37:6f:0e:32:bd:4e:09:
b2:00:40:9a:28:31:a8:9c:4b:4b:21:70:f4:9b:24:de:7b:96:
f4:ba:87:44:a9:c5:55:6b:a0:7c:15:25:7e:2e:58:e5:8a:0c:
89:a6:80:71:c9:91:00:18:ee:f4:a8:03:b6:77:19:0f:36:ef:
85:83:ee:8f:b9:26:35:12:2a:a1:b0:7b:7a:8b:aa:9d:e7:08:
80:2e:b8:ee:fb:e2:6f:d7:04:58:e3:8f:b0:de:67:e9:f1:2f:
c0:94:77:f6:34:c9:b7:96:04:e3:2f:21:8a:1a:0b:ec:7f:a2:
b6:52:dd:c5:53:6e:cb:52:75:d2:2a:b2:f0:50:63:ba:45:51:
89:21:87:44:e8:36:c1:d2:66:46:21:a1:4d:3a:07:c6:7b:c4:
57:54:5e:6f:73:1e:86:48:11:0f:2b:fd:c8:5b:41:50:e3:fe:
8c:5b:cd:72:d6:73:68:e2:55:09:3f:7f:dc:3c:3a:32:a3:88:
d7:fc:56:49:c0:b4:57:fc:fb:67:86:83:79:8f:d3:94:79:83:
26:7c:5a:69:d0:30:c7:a4:ad:b2:79:07:29:dc:96:2b:52:fd:
e5:62:df:a0:4c:f0:7d:fa:d6:3a:d7:55:0c:64:88:81:c8:1c:
2c:86:d4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:01:33 2024 by rpki-client on console-fra.rpki-client.org