Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/cLl9w_lxTp_O85TMgRlTUsoCOCw.roa
File: cLl9w_lxTp_O85TMgRlTUsoCOCw.roa (raw, json)
Hash identifier: 7YED4yg5fEZFZn6y6GBnf+ESulaZaSfwq0N9F7NoS2w=
Subject key identifier: 70:B9:7D:C3:F9:71:4E:9F:CE:F3:94:CC:81:19:53:52:CA:02:38:2C
Certificate issuer: /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial: 018CC49360A24E8D66D2A41F7A163DFEADC8
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/cLl9w_lxTp_O85TMgRlTUsoCOCw.roa
Signing time: Mon 01 Jan 2024 10:30:42 +0000
ROA not before: Mon 01 Jan 2024 10:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206195
IP address blocks: 45.15.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:60:a2:4e:8d:66:d2:a4:1f:7a:16:3d:fe:ad:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Validity
Not Before: Jan 1 10:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70b97dc3f9714e9fcef394cc81195352ca02382c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3b:eb:85:8a:9d:87:89:12:c7:71:30:b7:49:
c1:f2:1e:8c:7b:66:e0:f1:54:e2:07:29:5f:7e:cf:
e7:08:09:c2:c5:e9:77:e2:a2:cb:46:81:79:cf:a0:
05:4c:22:b0:c0:0f:59:3f:8d:06:0b:3d:b9:37:99:
88:46:31:9b:48:c9:1e:e6:e2:98:a9:6a:fa:d4:f0:
53:de:3f:38:f6:bd:81:6b:90:bf:e0:5f:6d:f9:c8:
d3:9e:d3:bb:23:f3:6a:0b:bb:b5:9d:1a:8f:33:be:
a0:64:28:0b:33:9b:c8:7f:68:26:fb:5f:38:f6:0d:
62:35:54:4e:97:72:a2:69:a4:a1:47:a5:7b:69:c5:
fe:f6:e0:92:7a:fd:c6:9f:f0:e5:5c:67:1d:f8:2e:
e0:a9:a9:01:08:e1:c4:d1:48:ee:f0:62:1c:36:b2:
d8:76:69:44:5f:74:c5:4c:7b:8f:ba:a2:a7:86:d5:
e1:38:f1:02:f0:94:7c:5c:76:93:a6:04:bd:a9:e0:
0f:70:2c:d5:31:0a:50:22:b1:46:c3:e0:45:fc:2d:
9b:ba:0c:7e:69:c9:d8:6a:1e:bb:1c:51:ec:e9:49:
42:15:f4:81:8e:fa:d3:f2:0d:54:f7:e3:f8:23:27:
96:0d:d6:c8:bf:19:70:e8:da:88:94:52:8c:7b:0f:
cf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B9:7D:C3:F9:71:4E:9F:CE:F3:94:CC:81:19:53:52:CA:02:38:2C
X509v3 Authority Key Identifier:
keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/cLl9w_lxTp_O85TMgRlTUsoCOCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.116.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:ac:09:b1:bf:15:17:e2:61:2c:64:39:49:57:c3:c1:fa:38:
08:2c:7c:b5:7b:9f:71:9e:31:bb:dd:dc:99:14:9e:08:f9:dd:
99:9a:f7:3a:7d:8d:49:f5:3e:83:3b:03:c5:0f:dd:0a:5d:14:
60:76:b0:9f:7a:71:c9:7a:d2:3e:b4:7c:15:ec:6e:20:ea:ab:
93:ae:cc:b2:29:4b:a2:1b:82:29:53:19:b7:01:87:23:cc:61:
a7:66:fa:c8:11:5a:86:97:79:dc:0a:96:9f:97:fe:4e:1f:40:
16:c2:d2:c8:37:5b:6d:c0:b0:58:02:82:31:cd:64:de:54:46:
13:2c:a5:b1:f3:5d:fd:d9:c4:24:b7:65:7e:71:7c:3a:22:c5:
7f:ed:3b:6e:4b:c8:c7:c4:90:0e:2c:31:85:51:bf:d3:f5:f3:
7b:f3:88:79:8e:bd:c9:8a:4b:46:12:3d:89:96:ad:43:fe:67:
7d:54:c2:8c:5c:d3:62:97:b5:1e:9b:37:db:2b:85:f3:6e:93:
fc:cb:60:a5:68:17:0e:46:ce:bd:42:16:6d:d9:18:8e:d3:cc:
74:38:b7:e9:94:d3:74:ee:a1:95:d6:f9:33:b8:25:8f:2e:9f:
46:49:cd:b3:a7:a0:fb:25:43:91:ff:ad:03:10:de:77:23:61:
ec:2b:7e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:55:07 2024 by rpki-client on console-ams.rpki-client.org