Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/oHsb7pfde89fX0_SuXpGVmJihmU.roa
File: oHsb7pfde89fX0_SuXpGVmJihmU.roa (raw, json)
Hash identifier: KszYfcXUVDVsO2H9NvAXH6etPNmN1MjZHHtInFdCHYI=
Subject key identifier: A0:7B:1B:EE:97:DD:7B:CF:5F:5F:4F:D2:B9:7A:46:56:62:62:86:65
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 018CC42455251E9DFCD67C1E50C331D3204B
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/oHsb7pfde89fX0_SuXpGVmJihmU.roa
Signing time: Mon 01 Jan 2024 08:29:24 +0000
ROA not before: Mon 01 Jan 2024 08:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51269
IP address blocks: 45.157.60.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:55:25:1e:9d:fc:d6:7c:1e:50:c3:31:d3:20:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Jan 1 08:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a07b1bee97dd7bcf5f5f4fd2b97a465662628665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:28:20:db:34:7b:96:f9:6f:05:3a:4e:35:
d1:57:24:4f:53:eb:50:91:89:a0:4f:bc:58:fd:ac:
7a:d7:46:56:3e:1f:aa:28:bb:e8:02:4d:fe:65:48:
12:f8:f4:7f:4a:6b:90:b5:aa:38:25:75:58:54:48:
f8:8c:48:27:21:16:87:b0:81:c0:ef:f0:c5:d1:8f:
f9:43:ba:f8:35:b4:5a:56:64:78:d0:11:94:4a:92:
41:a2:2b:e7:59:af:1b:7f:60:aa:32:13:62:0d:58:
6d:f1:1e:2d:16:09:f7:7f:38:cf:98:af:b2:29:32:
b8:ae:ef:e0:2d:c1:7d:6d:3b:b5:24:b2:a1:09:e7:
a5:3f:59:ad:ce:ca:8f:51:54:6a:99:bf:e5:52:23:
b9:94:a5:5d:2b:a0:04:e6:bd:c6:88:4b:2e:d6:96:
32:74:3a:7d:47:c2:85:48:d2:90:12:8c:85:3e:94:
52:61:bb:63:0d:fd:c2:00:ed:32:69:c3:a8:81:a9:
d0:d5:ce:cd:dc:a7:e8:b6:99:60:04:47:61:b2:b1:
8f:4d:4f:85:95:fd:16:77:b3:de:e5:a3:4e:af:28:
d6:a2:13:c1:3f:d8:51:1b:99:ed:64:65:d0:f3:3f:
6d:07:7d:8f:b5:00:8a:12:66:5b:5d:86:00:d3:10:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7B:1B:EE:97:DD:7B:CF:5F:5F:4F:D2:B9:7A:46:56:62:62:86:65
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/oHsb7pfde89fX0_SuXpGVmJihmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.60.0/22
Signature Algorithm: sha256WithRSAEncryption
25:f8:7f:e8:6a:38:2e:80:e0:4e:12:a8:3d:2e:c9:a5:2b:ab:
70:94:08:33:65:bd:20:14:e5:a2:b8:82:60:45:2b:f6:40:31:
a2:de:2e:6e:85:91:cc:5c:c6:cc:ad:f5:21:4f:75:e3:72:5a:
f0:cc:82:34:17:f5:0f:e2:aa:70:d3:07:cf:e0:b9:6a:2b:99:
45:b6:c1:36:c2:7c:5c:14:41:58:ea:91:e7:f6:64:9a:24:de:
30:8c:f8:fc:3a:24:f1:6b:85:55:9a:95:a7:01:06:88:e0:86:
ee:ce:72:39:4b:2a:33:66:ee:57:7e:54:09:2f:c7:c7:76:5c:
e2:58:c2:b9:b0:08:76:fc:0f:7c:6d:5a:85:19:7f:52:d1:7d:
70:45:1b:4e:52:6a:fa:38:28:1a:d9:5a:c1:64:f6:00:33:ad:
56:09:c6:ed:f7:c2:72:79:0d:6e:9e:1d:e1:f7:47:c1:ba:c6:
02:0e:76:51:ac:cc:e7:12:6e:31:21:18:03:3f:24:01:94:11:
c3:9a:87:c8:78:d2:a5:16:d2:e7:34:f1:13:fa:9f:bd:19:e8:
cc:05:fc:c1:1c:37:52:2a:ac:c5:88:1c:67:ef:f9:d5:a3:10:
40:5a:bd:57:91:f6:e2:00:2f:62:9a:96:98:ca:84:b1:a4:e9:
bf:49:31:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:10:10 2024 by rpki-client on console-fra.rpki-client.org