Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/FVoKa0hbyicRxj9T5QoKnrF-IQk.roa
File: FVoKa0hbyicRxj9T5QoKnrF-IQk.roa (raw, json)
Hash identifier: PJKMkHGyKfQ7AHpH2DcIDSD5neBvRyes+CMY82lEecA=
Subject key identifier: 15:5A:0A:6B:48:5B:CA:27:11:C6:3F:53:E5:0A:0A:9E:B1:7E:21:09
Certificate issuer: /CN=30195c3bb050586b5f4e5004118007c48b34eae5
Certificate serial: 019426D924BEDAF142E11F057A21970827C9
Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/FVoKa0hbyicRxj9T5QoKnrF-IQk.roa
Signing time: Thu 02 Jan 2025 11:49:12 +0000
ROA not before: Thu 02 Jan 2025 11:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20546
IP address blocks: 45.91.156.0/24 maxlen: 24
45.91.157.0/24 maxlen: 24
45.91.158.0/24 maxlen: 24
45.91.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:24:be:da:f1:42:e1:1f:05:7a:21:97:08:27:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5
Validity
Not Before: Jan 2 11:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=155a0a6b485bca2711c63f53e50a0a9eb17e2109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:25:ab:2d:7a:5c:81:91:65:12:88:70:8b:
d2:43:39:a7:43:56:04:33:de:78:eb:46:c4:84:0e:
04:33:47:0a:70:2d:c4:1e:eb:65:86:21:5a:2e:1e:
86:ee:ef:ad:14:53:74:7c:ac:28:ef:a1:63:f3:88:
16:98:3f:e7:66:e8:e0:b3:6e:18:b8:5d:7a:1f:e7:
56:d9:7a:c3:c0:be:d2:9c:39:da:9d:ae:5d:a4:ec:
bf:03:0b:4f:32:48:ae:c7:29:9f:aa:78:a3:36:a1:
aa:6b:e1:2b:bd:79:d9:f3:53:a7:94:75:91:e5:97:
85:57:9f:53:72:0f:62:61:01:fd:91:76:56:af:6a:
04:5f:c8:38:74:c3:77:97:e8:53:04:ad:ce:ab:0b:
d6:5a:88:f4:45:8b:c2:c9:4f:ee:d5:f5:19:80:dd:
81:52:09:b4:4c:70:41:c0:40:0f:e0:d2:83:3d:f4:
17:a3:9c:b3:01:d0:73:ca:0f:2a:92:d4:b9:b6:fb:
72:af:e7:5f:eb:3d:77:49:e9:df:e5:11:c3:d3:d0:
06:25:3c:b5:0c:8b:fa:40:6c:ce:68:bf:7b:00:b3:
7a:9e:e2:4d:a0:24:d1:a3:08:2c:04:56:1e:34:da:
65:1e:79:86:52:5c:6a:0b:bf:9b:6f:35:92:f4:d2:
b2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5A:0A:6B:48:5B:CA:27:11:C6:3F:53:E5:0A:0A:9E:B1:7E:21:09
X509v3 Authority Key Identifier:
keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/FVoKa0hbyicRxj9T5QoKnrF-IQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.156.0/22
Signature Algorithm: sha256WithRSAEncryption
90:c3:e4:b3:e3:06:98:e3:98:1b:52:7d:52:a6:0c:e3:82:8e:
a2:f8:d4:49:04:e3:22:48:2f:c0:49:50:88:2d:7b:dc:ad:fe:
1c:2e:e1:9e:ef:29:26:e5:b4:03:26:d9:3f:51:07:95:8a:8e:
6a:6a:f8:a0:df:36:a7:a8:63:3b:76:af:b8:2c:24:e2:23:8f:
81:33:a1:7d:07:d6:fd:87:fd:e0:c2:9c:9f:09:1c:38:81:3c:
d7:06:b1:74:d3:73:a0:79:f3:a6:da:54:28:c7:70:4f:96:a3:
54:97:7c:1f:1c:2d:e1:19:d6:55:21:50:47:f0:f1:24:54:94:
8b:81:ff:48:0e:7c:43:9a:75:b9:be:5e:63:6d:48:a1:6c:07:
f3:81:cf:62:0d:44:c0:ee:34:7d:7b:8f:3e:af:59:5e:d4:c8:
45:f8:75:79:ce:30:56:97:ea:6f:12:8b:7f:30:f3:3a:ad:a8:
bb:be:03:04:da:67:c8:8c:fe:d4:e8:8b:f0:a3:89:de:11:6f:
36:f0:2a:fb:03:73:4b:c6:ca:74:dc:a2:09:c9:38:4b:be:d4:
6c:9c:3f:16:d9:62:ca:3a:dc:12:d5:44:9a:8d:bb:fb:b7:9e:
ea:39:54:fa:ec:62:e1:37:4c:7a:01:77:9e:83:16:a9:d8:10:
2b:2d:0d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:02 2025 by rpki-client