Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/0n9uM7MJxSV21ye_zJmnKYdCoC8.roa
File: 0n9uM7MJxSV21ye_zJmnKYdCoC8.roa (raw, json)
Hash identifier: U6tmxjvRLy7ELZOS/YuQfIbLqQ8r86Rp6VuosrsYtCc=
Subject key identifier: D2:7F:6E:33:B3:09:C5:25:76:D7:27:BF:CC:99:A7:29:87:42:A0:2F
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0192293B0EBE141A16E97E09B61AB6DF40CF
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/0n9uM7MJxSV21ye_zJmnKYdCoC8.roa
Signing time: Wed 25 Sep 2024 12:49:49 +0000
ROA not before: Wed 25 Sep 2024 12:49:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211407
IP address blocks: 45.151.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:29:3b:0e:be:14:1a:16:e9:7e:09:b6:1a:b6:df:40:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Sep 25 12:49:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d27f6e33b309c52576d727bfcc99a7298742a02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b6:ec:63:33:53:e7:9d:fd:13:d5:38:70:c7:
ce:51:d1:c8:fd:05:1b:e0:2b:e2:58:e1:e1:2e:3c:
0b:dd:a5:5c:b8:0e:55:51:59:f1:09:a0:b7:f4:c1:
f9:1a:2b:dd:01:77:3a:b9:91:d1:82:ca:0f:31:1e:
18:5d:d6:61:bf:fa:f6:42:71:ef:a4:08:5b:7c:24:
74:99:ac:53:3b:67:53:30:21:af:c7:d7:bb:5f:41:
e8:b1:2d:13:05:37:da:b7:77:75:2b:15:c5:82:3e:
4c:8a:08:d7:c0:42:0b:36:f1:bb:cc:fb:f6:51:32:
76:5a:9b:47:8d:8c:16:7f:65:cb:1e:f6:ee:14:ca:
60:15:e8:92:60:24:f2:25:63:2c:0e:b9:36:a9:97:
c6:38:03:35:f2:0b:7e:4d:73:d2:5e:0d:e6:8a:0f:
bc:dd:dc:88:90:c7:39:30:0a:be:ee:3d:28:5b:c1:
f5:bc:2d:7d:2a:25:89:e0:cc:c2:bc:25:3b:fc:c9:
87:8e:10:0b:b3:66:ee:13:28:cf:b1:56:8a:77:62:
95:5a:7b:6b:22:80:d4:5b:cb:9c:88:b8:18:7c:b9:
52:da:a4:20:72:f9:c6:7f:7a:02:b5:7a:4a:02:77:
af:05:2a:74:91:fd:24:25:6b:d8:6d:83:20:34:6b:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7F:6E:33:B3:09:C5:25:76:D7:27:BF:CC:99:A7:29:87:42:A0:2F
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/0n9uM7MJxSV21ye_zJmnKYdCoC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.70.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:90:64:98:08:12:d2:b3:73:13:06:6f:c9:6c:69:47:27:be:
c7:6a:e2:19:d8:5d:4a:9e:fb:bc:42:79:9d:a3:bf:be:7c:11:
23:2a:fc:f7:54:9a:1e:c9:81:aa:fa:2c:ba:7a:09:45:4d:ea:
2d:f8:79:17:a2:ea:57:04:df:0c:79:47:3c:17:a7:56:fb:8c:
aa:55:e1:a6:a5:e6:fe:9f:9a:c8:20:32:f3:c6:53:8c:af:46:
31:a8:4e:00:61:9e:af:62:58:e8:6c:d5:e4:e2:c7:ee:79:c7:
8c:c1:36:5a:71:09:00:40:f9:6b:d7:54:e7:9a:fe:5a:be:3d:
52:96:8a:4e:7c:e7:f9:17:26:43:19:79:e5:5c:37:1f:8f:a5:
04:be:58:c3:c3:9f:79:14:81:be:50:f4:53:c7:10:cc:49:fe:
e3:83:3a:a2:78:01:7a:ac:fa:ca:51:0f:2f:7a:85:8e:0b:45:
b0:ac:c6:cb:f2:a8:45:b9:1b:38:9f:7d:aa:53:29:5a:84:45:
33:83:a1:6f:a8:17:23:86:32:b1:a4:ca:f6:dc:c6:36:63:c1:
26:1f:45:bb:27:d5:5e:29:3b:84:b9:5b:58:32:fa:4b:77:6f:
bb:c3:df:a6:b7:6a:8c:39:b9:49:d3:ac:a6:de:d7:5b:d4:e7:
54:1b:23:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:50:35 2024 by rpki-client on console-ams.rpki-client.org