Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/rfUWy7n6kkKWkmeKyLO_OGUOSJM.roa
File: rfUWy7n6kkKWkmeKyLO_OGUOSJM.roa (raw, json)
Hash identifier: EykVmkaSTvi6kfX1ZVeOAoNnesOJWsZrfDgrJMzNx0c=
Subject key identifier: AD:F5:16:CB:B9:FA:92:42:96:92:67:8A:C8:B3:BF:38:65:0E:48:93
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01922E09857B8B7D945E1B1C39CFFD2D7363
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/rfUWy7n6kkKWkmeKyLO_OGUOSJM.roa
Signing time: Thu 26 Sep 2024 11:13:48 +0000
ROA not before: Thu 26 Sep 2024 11:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 967
IP address blocks: 45.10.68.0/24 maxlen: 24
91.216.169.0/24 maxlen: 24
91.216.190.0/24 maxlen: 24
91.217.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:09:85:7b:8b:7d:94:5e:1b:1c:39:cf:fd:2d:73:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Sep 26 11:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adf516cbb9fa92429692678ac8b3bf38650e4893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5d:63:44:82:2c:10:c5:a0:01:9a:75:62:44:
c0:40:c4:f4:7e:fc:09:b3:ec:09:2e:60:63:6d:4c:
95:2e:c1:a4:e1:00:eb:c3:18:4a:6e:10:d2:9f:de:
11:41:d7:3c:82:0f:66:8f:7e:13:98:5f:c4:2a:c0:
56:c6:f5:41:f0:bb:3a:21:87:5c:35:ed:59:db:ab:
09:37:53:68:23:f7:5f:8c:eb:35:5b:a4:15:98:18:
cf:14:3e:91:db:09:71:4e:98:e2:35:2a:34:4b:5d:
3b:9a:df:0c:7a:3f:20:37:8e:2d:58:b4:d3:69:96:
f2:f2:7e:7e:fb:61:a9:e2:1b:57:c4:05:02:99:c7:
e6:3d:08:3f:d6:30:b9:01:98:91:6f:dd:d6:ba:49:
d4:23:f2:c9:c4:67:20:f5:f2:96:3c:de:88:29:08:
23:2c:1a:2f:a2:70:1a:4c:37:35:97:3d:93:b5:8d:
0f:43:2d:20:86:f7:d0:f1:bd:57:27:01:d3:a1:bf:
26:62:ed:95:19:6c:8c:71:78:a6:f2:f8:a0:54:92:
9f:ea:fb:f1:2f:54:83:93:cc:24:47:25:31:a2:66:
90:8e:79:a3:87:3d:9a:1e:bb:02:bc:e4:6f:c1:18:
51:91:19:49:ae:da:69:c1:b6:6d:8a:dd:6b:c6:f5:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F5:16:CB:B9:FA:92:42:96:92:67:8A:C8:B3:BF:38:65:0E:48:93
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/rfUWy7n6kkKWkmeKyLO_OGUOSJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.68.0/24
91.216.169.0/24
91.216.190.0/24
91.217.135.0/24
Signature Algorithm: sha256WithRSAEncryption
28:58:6a:44:d4:1c:08:a4:f0:7c:4b:8c:e0:40:ce:e5:78:7e:
25:f3:7b:2a:30:29:5d:d7:70:b3:4e:5d:85:4d:2b:86:57:51:
11:0c:6c:b4:3e:80:67:c7:7a:c4:24:72:a0:0b:3e:4a:de:a6:
7a:14:60:58:89:e8:f4:87:13:4a:73:cd:93:ef:97:1a:c8:2d:
bd:2f:8d:b1:54:94:e8:5b:1e:b9:35:fc:15:a2:6a:ad:f2:38:
4f:a8:b0:30:84:e9:7c:55:a4:70:8e:26:5f:74:9a:13:19:09:
12:34:0a:03:7b:e7:b6:ce:1b:7c:82:6e:ac:c8:47:6d:c9:a8:
74:53:92:3d:e2:a4:0f:a6:38:02:dd:2b:86:83:16:4b:c8:55:
f7:e0:66:ac:6c:5d:8d:55:9d:49:ec:71:51:30:03:80:b7:08:
33:a7:2b:81:84:9a:82:25:02:14:76:90:c9:7e:8f:a4:89:af:
81:df:f9:b7:92:6f:b0:01:ac:da:92:e5:28:6e:c6:6d:ca:3c:
56:a3:a5:d2:95:9b:90:9a:97:39:90:d3:33:f2:a3:db:f1:c6:
46:4b:03:89:be:1b:86:7b:2b:8c:77:2e:d3:ae:a0:5a:14:1d:
24:68:69:8b:16:f4:b7:82:bb:f2:06:65:b2:7c:a4:7f:07:69:
4a:c5:6b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:33:51 2024 by rpki-client on console-ams.rpki-client.org