Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/lin2pVpZrfaR5pQ9vUrwQBQTLXY.roa
File: lin2pVpZrfaR5pQ9vUrwQBQTLXY.roa (raw, json)
Hash identifier: NTdjTNBbwGkujk9llj8o2NMEQ4HSh6fxuYivl7gltGg=
Subject key identifier: 96:29:F6:A5:5A:59:AD:F6:91:E6:94:3D:BD:4A:F0:40:14:13:2D:76
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018CC80189FCE341D7E4FE9EF793868D892B
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/lin2pVpZrfaR5pQ9vUrwQBQTLXY.roa
Signing time: Tue 02 Jan 2024 02:29:53 +0000
ROA not before: Tue 02 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14445
IP address blocks: 45.151.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:89:fc:e3:41:d7:e4:fe:9e:f7:93:86:8d:89:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 2 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9629f6a55a59adf691e6943dbd4af04014132d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:00:56:93:d1:6f:97:55:b9:83:9d:79:78:
c0:0b:1d:c7:1c:67:b3:cc:15:85:99:99:36:7f:fb:
4e:93:78:78:57:fd:f3:bb:08:e0:31:91:a3:29:3f:
ea:3d:4f:16:cc:b8:ac:02:86:e5:30:3f:bc:67:be:
37:85:29:95:dc:56:ef:93:6d:45:a9:92:4e:1b:da:
bb:0f:04:cb:29:e3:92:17:e7:4f:5d:93:8e:1c:a6:
26:12:08:44:e4:23:00:53:48:f6:6c:f9:05:3c:84:
76:cc:3d:85:72:18:07:43:7c:84:dc:e8:d7:2a:80:
c9:35:f8:a4:63:78:05:67:8b:c6:46:0a:39:f8:af:
98:d4:60:1a:b6:26:9d:ff:f7:ab:e7:8f:bc:62:d1:
a8:77:db:71:1d:44:d6:07:48:71:63:2d:2d:87:c7:
cf:d4:36:34:3c:c3:23:0b:07:19:6d:cc:c1:54:40:
4f:87:4b:32:f6:a5:9c:bc:cf:1f:a8:e2:6c:68:ba:
4f:1e:73:b3:01:67:58:55:4c:df:22:47:bb:d1:97:
f6:ff:ef:a7:c6:fb:07:3f:2a:84:76:f0:45:80:b4:
83:7b:bc:c2:4d:92:d3:bb:ec:8f:84:8d:d1:56:cd:
67:f9:5d:e5:9f:1f:7e:39:0d:cd:ed:25:c5:e2:5c:
16:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:29:F6:A5:5A:59:AD:F6:91:E6:94:3D:BD:4A:F0:40:14:13:2D:76
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/lin2pVpZrfaR5pQ9vUrwQBQTLXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.70.0/24
Signature Algorithm: sha256WithRSAEncryption
25:04:d9:b3:d4:b3:9f:c2:d7:6d:4a:b0:2b:b3:ce:8e:f3:ca:
86:1e:af:99:4d:04:66:65:e4:5d:39:b7:84:08:22:79:f7:1b:
c6:17:84:7c:af:3e:2a:e2:8a:b0:91:fe:98:37:2a:96:2f:57:
98:f0:94:27:85:8c:fd:b5:48:90:7b:22:24:5f:8a:d1:5b:6e:
ca:0f:4a:58:17:ba:84:e7:4c:a4:2f:b2:51:77:c4:82:df:20:
e0:1f:c9:d7:36:b2:1a:fd:04:1b:a8:62:77:11:5a:af:17:59:
ca:6c:0b:7b:a9:de:af:11:20:94:4e:94:15:0a:69:b5:ba:44:
dd:ec:d5:46:fe:c3:92:64:e9:ce:04:d5:1e:5e:1f:2f:fa:a8:
83:3b:c3:59:1c:bc:61:50:ea:9c:a1:7d:85:4a:a2:f7:63:ae:
7d:49:3d:72:42:99:eb:a7:15:85:0c:fa:db:2e:63:f7:96:78:
bb:ed:08:b1:3e:e9:62:41:58:6f:d0:00:3e:fe:41:2f:1d:81:
49:41:f0:a9:50:07:7c:d9:f5:2d:3d:8f:2a:ec:89:5f:40:f0:
e4:4e:b8:50:ea:78:5e:df:b5:a2:85:d6:87:93:41:e5:9d:9b:
4c:34:a4:72:1e:c1:e5:07:8b:30:64:9a:96:c8:cc:bc:01:9b:
a0:90:80:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:41:05 2024 by rpki-client on console-ams.rpki-client.org