Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/axci9z4WfgoklpRfFK70kooEFZ4.roa
File: axci9z4WfgoklpRfFK70kooEFZ4.roa (raw, json)
Hash identifier: mVS3xBOHaCLQmZkLEO68Q6JLuCyPIvVosMN9Zl2Tw4k=
Subject key identifier: 6B:17:22:F7:3E:16:7E:0A:24:96:94:5F:14:AE:F4:92:8A:04:15:9E
Certificate issuer: /CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Certificate serial: 018CC6B790B05B21C1A19BA4D8DCEC31E014
Authority key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/axci9z4WfgoklpRfFK70kooEFZ4.roa
Signing time: Mon 01 Jan 2024 20:29:28 +0000
ROA not before: Mon 01 Jan 2024 20:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207942
IP address blocks: 45.152.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:90:b0:5b:21:c1:a1:9b:a4:d8:dc:ec:31:e0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Validity
Not Before: Jan 1 20:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b1722f73e167e0a2496945f14aef4928a04159e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:3f:f1:47:0c:45:df:ea:5e:11:79:c6:bb:
1e:dd:06:fa:ef:5b:33:81:fd:e4:d2:a0:5b:64:16:
23:97:16:3c:6f:01:bd:7f:21:0f:71:e1:ac:46:1f:
9a:d3:56:9f:f3:2b:90:4f:57:0d:01:be:1a:82:70:
7e:02:13:5e:76:ce:f5:58:bc:22:90:00:41:af:ce:
04:b5:4b:36:79:0c:57:62:47:f8:a7:03:98:2d:30:
a8:64:e0:08:41:98:4d:91:12:c6:86:2c:51:c4:66:
ec:f8:a3:d1:51:be:76:7b:09:85:88:9a:de:8a:bd:
7c:c8:18:aa:32:ca:98:8c:c4:03:a3:6e:73:70:2d:
24:7a:d7:05:60:73:70:1b:99:45:bb:42:17:19:9f:
de:d3:ec:60:f3:3e:91:17:32:77:38:04:3b:f2:d3:
7b:68:d9:16:a6:2c:46:08:2f:49:3e:fd:76:13:2b:
ec:f9:82:fb:d8:98:98:33:fc:25:04:b9:c2:12:5f:
2e:33:fa:00:b9:79:f1:50:91:d7:63:fe:ee:20:29:
38:4d:a1:cf:ba:6a:87:01:d4:2a:59:4c:b2:5f:77:
86:b6:84:75:91:dc:d1:63:b7:8a:64:b6:01:06:8c:
0e:4e:23:a7:06:71:b5:ff:8a:49:0b:8b:6c:64:2a:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:17:22:F7:3E:16:7E:0A:24:96:94:5F:14:AE:F4:92:8A:04:15:9E
X509v3 Authority Key Identifier:
keyid:52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/axci9z4WfgoklpRfFK70kooEFZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.248.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c1:39:de:c5:e0:90:da:01:f3:fa:9c:a1:8a:46:a3:6e:49:
77:54:c5:00:ef:8b:92:a5:6d:f5:6a:ee:89:e0:ef:dd:ed:5f:
68:ce:35:a6:b7:36:27:25:c6:79:aa:8b:4f:e7:2f:ff:b8:ef:
96:76:93:f6:07:e2:e8:9d:9b:0d:7c:64:0f:02:7d:a1:e7:51:
e3:2e:ee:f3:fc:e6:29:fe:86:5b:90:fa:58:42:0f:c9:df:ac:
60:cc:2f:1f:d4:65:66:3b:a8:40:6d:49:f7:92:15:08:7b:0a:
47:b9:7e:8a:04:1a:88:ee:00:d2:c9:3b:ce:7f:a5:61:f0:3f:
26:78:f3:76:5f:0e:b6:d6:21:d5:7d:ad:8a:aa:84:4e:44:bb:
7c:8f:49:5b:6d:d8:69:b3:8a:4e:3e:3a:14:b1:15:79:4a:19:
4b:a1:9a:ae:ca:cf:66:82:29:82:cb:3c:fe:62:57:5f:75:f8:
56:5d:5d:01:3e:13:04:d2:32:44:81:7b:e6:da:8e:cc:18:6a:
5f:7d:86:f2:de:af:ed:c2:9c:7f:da:5a:db:ed:7d:74:3b:f8:
cd:14:85:01:7b:01:8a:03:8b:d1:18:63:c9:bc:60:61:d7:fe:
e5:cd:11:ab:56:6f:0d:d3:61:a5:84:da:18:ce:4f:da:1a:42:
2f:93:01:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:26:28 2024 by rpki-client on console-ams.rpki-client.org