Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/V4Q0-mAeCdmZhyPckM6zbd3x9t4.roa
File: V4Q0-mAeCdmZhyPckM6zbd3x9t4.roa (raw, json)
Hash identifier: d+ef4/4hg3+XvTKo/w01aRI9CVNZgnslJ0gMMjV9g/M=
Subject key identifier: 57:84:34:FA:60:1E:09:D9:99:87:23:DC:90:CE:B3:6D:DD:F1:F6:DE
Certificate issuer: /CN=e0afb160a97338ab21114840addc6180a5ba42b1
Certificate serial: 018CC4922D17966B3A34C68FB0513C1B71DF
Authority key identifier: E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/V4Q0-mAeCdmZhyPckM6zbd3x9t4.roa
Signing time: Mon 01 Jan 2024 10:29:23 +0000
ROA not before: Mon 01 Jan 2024 10:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24586
IP address blocks: 45.153.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:2d:17:96:6b:3a:34:c6:8f:b0:51:3c:1b:71:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0afb160a97338ab21114840addc6180a5ba42b1
Validity
Not Before: Jan 1 10:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=578434fa601e09d9998723dc90ceb36dddf1f6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:1e:1a:61:0c:cf:01:b8:c6:bf:a6:c5:9e:
c7:14:62:e9:9f:c5:cb:31:7a:3a:b0:e7:3c:5b:0c:
5e:25:fe:0c:c4:6a:47:2d:41:c7:d3:73:3b:25:38:
62:b6:61:94:e8:36:fe:b6:fd:c1:fb:50:9a:28:5e:
cb:1e:ee:4e:52:d7:ca:71:1d:58:19:3b:61:b2:cf:
51:0d:6f:e9:35:fe:27:dc:ec:d9:4f:fc:c9:10:50:
74:3c:af:db:64:df:48:ea:ba:49:f8:39:a6:cd:ba:
39:7e:1a:95:0a:28:1e:d9:e4:3a:80:64:e9:a7:a6:
0e:70:27:d9:2f:20:d5:3a:bd:03:5d:b8:4f:d8:f0:
f7:ca:f6:0b:0f:9b:c1:ff:80:9a:68:f3:db:d0:97:
29:d4:b6:9e:1b:0f:ae:62:e9:94:35:24:12:4d:13:
b6:62:bb:da:61:16:b9:82:20:0f:b1:41:d1:2a:ff:
76:58:87:2e:64:1f:3a:9b:32:a8:bd:e9:e0:85:ad:
86:48:53:ab:91:aa:ec:d7:dc:b5:36:cf:6f:7e:1a:
71:5b:e1:0c:25:31:b1:01:7b:ad:2e:75:2b:2a:49:
cd:2d:87:ef:2b:7d:e6:57:c1:e9:16:28:03:ac:4d:
ce:66:f6:99:fc:b9:a8:99:84:88:84:5e:ca:91:8c:
a9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:84:34:FA:60:1E:09:D9:99:87:23:DC:90:CE:B3:6D:DD:F1:F6:DE
X509v3 Authority Key Identifier:
keyid:E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/V4Q0-mAeCdmZhyPckM6zbd3x9t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.84.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:2e:71:70:fb:38:2e:96:83:19:d1:82:3d:b2:22:9b:40:02:
fb:56:6f:a7:5b:4f:8f:62:83:f8:d9:3f:fd:12:ce:2e:1e:30:
e4:e3:12:38:8d:50:1f:ea:8e:97:12:45:03:22:1f:22:19:90:
57:6f:f9:20:4a:35:98:22:02:b4:81:34:e0:40:45:f7:99:26:
5a:54:ff:95:f8:32:f6:61:e1:67:f8:02:63:11:48:ca:26:9c:
42:2b:f9:34:3b:35:6b:f5:93:90:92:70:fe:9d:2a:92:38:63:
ab:cb:7f:cf:5f:e1:05:47:c2:b6:5a:1f:e6:ab:d7:f3:da:ef:
0e:ed:81:68:51:df:8e:77:82:4f:37:49:87:51:a3:1c:01:91:
0e:56:7b:0a:a4:40:86:19:b2:66:85:5c:7f:54:f1:34:5c:a5:
91:2f:5f:06:4c:b4:b5:5f:fc:d4:49:48:be:12:2d:38:b4:4b:
6a:fa:59:06:bd:fe:ce:4b:3d:36:b4:a8:78:79:9c:8c:23:6d:
4a:f6:79:22:bc:3b:c5:f1:98:c7:97:01:75:56:f6:2c:c7:9e:
27:c8:0d:87:5b:31:c2:d3:33:ea:62:9b:37:63:21:70:51:bc:
7a:43:bf:90:55:51:aa:fd:fd:38:30:92:9c:c6:65:29:08:03:
77:9a:e8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:05:49 2024 by rpki-client on console-ams.rpki-client.org