Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/uSiYceBkj_cxL9QbxEJb_oDUCy8.roa
File: uSiYceBkj_cxL9QbxEJb_oDUCy8.roa (raw, json)
Hash identifier: PkPvnFp7DS5ZPzg4ORdsFSG3uvE1LzUEaPNwjURZ7zY=
Subject key identifier: B9:28:98:71:E0:64:8F:F7:31:2F:D4:1B:C4:42:5B:FE:80:D4:0B:2F
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018EC2F728D001B7EF6C623D530CBAD20DE3
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/uSiYceBkj_cxL9QbxEJb_oDUCy8.roa
Signing time: Tue 09 Apr 2024 13:06:01 +0000
ROA not before: Tue 09 Apr 2024 13:06:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 45.150.112.0/24 maxlen: 24
185.128.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:f7:28:d0:01:b7:ef:6c:62:3d:53:0c:ba:d2:0d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Apr 9 13:06:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9289871e0648ff7312fd41bc4425bfe80d40b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:96:a4:88:51:15:38:9c:db:3c:cb:33:d2:
50:6a:e7:4e:3e:b8:b7:f6:47:76:7e:f4:67:f7:b9:
a6:1b:45:c0:b7:c5:71:6c:5e:f7:11:0e:dd:39:7f:
91:b9:7c:77:46:0c:ea:5a:32:b7:61:b4:5b:96:e8:
b1:b9:69:81:ef:88:88:10:79:70:6c:e7:fa:a5:d3:
98:ac:89:9a:67:49:4a:5e:59:be:7a:71:3c:4d:ce:
1c:1c:99:08:b5:2f:08:69:5e:c4:4c:14:51:fb:a1:
20:b9:b6:b9:99:ca:fb:b8:e3:79:1e:3d:b2:77:30:
bb:6f:4f:2f:0e:cd:0b:16:b6:5b:fd:0a:61:d3:d7:
6a:e7:76:d9:a6:7a:69:ec:92:ee:04:d8:a7:e7:c7:
24:21:e3:08:d6:d0:ab:58:fb:0f:1d:7d:f4:70:3c:
93:7c:71:10:1c:78:da:70:f9:e9:14:de:fa:97:f9:
fc:fc:70:da:ce:56:02:f0:7f:cf:c2:bb:81:da:8d:
5f:aa:ec:7c:b0:40:e3:16:0c:0b:6e:c9:74:2f:75:
a6:ae:11:65:f6:e2:96:01:d1:36:99:32:31:cc:af:
e2:ac:6d:ab:3f:14:a5:21:57:c8:b8:5f:20:0a:32:
37:59:78:55:33:cf:2e:8c:46:94:b3:0a:84:c1:e6:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:28:98:71:E0:64:8F:F7:31:2F:D4:1B:C4:42:5B:FE:80:D4:0B:2F
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/uSiYceBkj_cxL9QbxEJb_oDUCy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.112.0/24
185.128.41.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a4:14:39:b0:f4:da:bc:65:9d:3e:d1:68:41:fb:33:19:47:
ab:a5:db:67:c8:2e:3e:4e:b5:92:4e:a3:b3:46:6e:fa:29:2f:
05:a0:41:f5:8e:48:0d:95:53:f1:5c:56:8e:4f:80:b3:20:f1:
04:65:f5:2b:de:e5:ed:bb:85:3e:5d:7e:c3:c2:83:c9:db:bd:
b5:bc:77:c0:7e:15:56:80:04:55:97:36:fa:b5:44:da:0d:fe:
ae:46:d9:2a:b7:fc:d4:3c:ff:bc:1d:3f:60:ae:62:ed:dc:34:
82:bc:0a:b1:36:7b:02:01:4a:86:a7:63:34:09:15:87:f0:7c:
26:61:42:bb:42:f9:ea:38:21:2f:25:7d:95:68:76:3d:c0:d6:
53:8e:ba:e4:6e:a9:b0:42:3f:4c:25:c0:63:42:14:7d:1e:32:
5e:87:f5:e5:fd:25:4c:09:03:3c:a8:fb:48:e1:73:25:4f:80:
06:87:ee:83:0e:ce:d2:38:97:eb:5f:65:87:04:ad:55:d5:f4:
b6:94:43:ee:f6:3a:9e:31:d8:46:9a:e9:97:8a:a3:0d:20:79:
80:90:f0:6d:c1:52:27:d3:71:08:f2:9e:ac:34:2f:4b:d5:ab:
6c:d9:0a:9b:b9:2b:1c:20:5e:b4:c9:72:88:83:29:9a:a2:c9:
13:a5:94:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 07:03:19 2024 by rpki-client on console-fra.rpki-client.org