Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/e5RArwmEKA___iSwx0e4wAaqDK4.roa
File: e5RArwmEKA___iSwx0e4wAaqDK4.roa (raw, json)
Hash identifier: JNHfe3qUl/RWRUKYCqVi9dTRWD0ESjPT9QrGjqY94HA=
Subject key identifier: 7B:94:40:AF:09:84:28:0F:FF:FE:24:B0:C7:47:B8:C0:06:AA:0C:AE
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 018CC493957654CA44AB2BFE3B316B033AC6
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/e5RArwmEKA___iSwx0e4wAaqDK4.roa
Signing time: Mon 01 Jan 2024 10:30:55 +0000
ROA not before: Mon 01 Jan 2024 10:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.155.99.0/24 maxlen: 24
2a10:ba00:bee4::/48 maxlen: 48
2a10:ba00:bee2::/48 maxlen: 48
2a10:ba00:bee5::/48 maxlen: 48
2a10:ba00:bee0::/48 maxlen: 48
2a10:ba00:bee3::/48 maxlen: 48
2a10:ba00:bee1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 13:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:95:76:54:ca:44:ab:2b:fe:3b:31:6b:03:3a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Jan 1 10:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b9440af0984280ffffe24b0c747b8c006aa0cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:d7:d4:b5:8e:27:04:a9:6c:b5:0d:12:4c:
51:cc:1f:41:7b:14:31:6a:3c:de:0a:9e:8e:87:31:
47:e1:4e:8a:6c:0d:60:29:25:3a:db:bb:9c:3f:8f:
23:e8:d5:77:fd:86:01:ea:e3:4d:1c:b7:d2:af:47:
58:aa:89:38:f1:16:91:a6:db:7e:87:ff:d3:ca:0d:
7b:4e:20:a3:d8:4e:f3:d8:0e:14:7e:cc:64:03:de:
c8:b0:3f:07:82:e8:e5:0a:e2:d3:93:06:f2:f8:9f:
54:99:e1:8d:12:1d:3b:0a:66:16:b0:17:14:5c:47:
b0:82:86:b3:d9:c9:e3:14:b7:2a:a1:6e:dd:25:be:
ec:c1:94:e2:df:a4:f7:2e:34:fa:99:c1:67:56:06:
4d:54:e0:94:88:79:ab:e8:d8:c5:8c:9e:a7:7c:e7:
18:fb:d2:ec:a3:33:ac:d6:85:5b:95:29:60:45:b5:
9b:b6:9e:2e:e7:d9:11:17:19:69:fe:24:7e:b6:7e:
dc:cb:25:5c:11:3c:97:d5:2a:d9:58:16:ed:2c:5b:
03:29:c1:34:01:b1:de:50:0b:21:28:dc:19:d4:9b:
4f:50:f5:5d:82:c7:17:1c:42:9f:b4:db:34:36:31:
cb:9e:f3:f7:44:02:46:fc:72:79:b7:48:fc:62:30:
41:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:94:40:AF:09:84:28:0F:FF:FE:24:B0:C7:47:B8:C0:06:AA:0C:AE
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/e5RArwmEKA___iSwx0e4wAaqDK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.99.0/24
IPv6:
2a10:ba00:bee0::-2a10:ba00:bee5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
51:36:a8:59:54:2b:2f:b0:12:a1:a2:ce:2b:86:2e:a2:54:0f:
92:77:d0:6f:aa:ee:ac:b4:30:e9:35:03:a9:41:7b:87:a4:1b:
87:80:a6:5e:e0:fe:7b:90:6f:8e:ae:d7:da:d6:03:a3:c4:95:
91:6f:56:10:b6:d0:70:58:b6:9c:44:92:85:1a:f9:94:9f:95:
ee:ba:82:a5:bc:b0:bc:a6:e2:7c:e1:de:63:4b:f3:5c:9a:59:
69:a4:0e:eb:68:b1:7a:0a:3c:62:7a:46:27:8e:e1:4d:98:8d:
6a:4b:8c:da:f0:83:9b:8c:a9:17:e9:c2:fd:7a:e1:eb:35:c8:
ad:37:07:98:9e:66:b6:ae:72:55:08:8c:ec:be:5d:4c:ea:84:
9c:8d:ca:0f:9c:17:b0:e6:96:d6:c2:a3:47:d9:c6:c2:e7:ae:
59:80:c7:56:b9:b4:0d:82:f1:fa:f5:f9:e3:b4:d6:33:e7:5a:
0d:89:79:b0:aa:2f:b2:9c:ff:cb:81:3a:94:b8:85:fe:1c:7d:
ec:03:e1:f8:51:10:c3:03:3a:cc:50:2f:9e:ee:63:d5:a4:d8:
fa:8b:8e:f0:5e:53:94:a9:37:cd:10:10:c0:8f:db:96:4f:00:
38:8a:a4:ef:60:db:a6:fd:bb:ec:f6:a7:93:78:ab:ac:f6:3a:
2f:a9:56:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:58:19 2024 by rpki-client on console-fra.rpki-client.org