Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/iRkSyfkW0-3w_PkGaNEVE9fTW8Y.roa
File: iRkSyfkW0-3w_PkGaNEVE9fTW8Y.roa (raw, json)
Hash identifier: 4gdzjyfLkGG0aD3iPAyTzNOtp+nlfVqMHvincqx+YxY=
Subject key identifier: 89:19:12:C9:F9:16:D3:ED:F0:FC:F9:06:68:D1:15:13:D7:D3:5B:C6
Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial: 018CC425416944503EFA41552A08931B95B7
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/iRkSyfkW0-3w_PkGaNEVE9fTW8Y.roa
Signing time: Mon 01 Jan 2024 08:30:25 +0000
ROA not before: Mon 01 Jan 2024 08:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59909
IP address blocks: 45.9.223.0/24 maxlen: 24
45.9.222.0/24 maxlen: 24
45.9.221.0/24 maxlen: 24
45.9.220.0/22 maxlen: 24
45.9.220.0/24 maxlen: 24
2a0e:1500::/29 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:41:69:44:50:3e:fa:41:55:2a:08:93:1b:95:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Validity
Not Before: Jan 1 08:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=891912c9f916d3edf0fcf90668d11513d7d35bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:04:8f:d1:6d:9f:4f:5e:c8:84:ee:e0:b7:
a6:ec:b6:16:2a:94:3a:a2:69:25:a7:80:df:e9:72:
23:b5:11:3f:28:3a:f0:6c:e7:df:31:16:f3:49:37:
82:c2:92:e4:d5:b1:8d:09:21:f8:fa:54:b4:92:c3:
26:46:99:52:64:3d:71:8a:15:24:5f:e2:38:46:56:
42:5f:9e:53:e1:df:8a:1a:4e:cf:1d:c8:47:52:3b:
0f:5a:9c:11:4e:77:2b:9a:fb:9e:8a:9f:ab:62:95:
d6:59:82:bb:d6:59:5b:af:58:bf:69:31:2e:d1:ce:
90:d6:bf:26:8a:6d:15:7d:f0:ac:0f:60:ea:ce:b8:
bb:36:c5:9a:b1:62:4c:89:25:1b:ab:1b:e5:d0:01:
cb:9f:52:cd:0d:58:92:01:90:e9:63:00:97:f3:ab:
5d:c8:4a:c6:82:eb:c5:66:ec:20:07:33:3e:5b:dd:
25:72:5b:f0:b9:28:de:3d:17:d8:0e:f3:cd:98:8e:
cb:72:42:e6:36:51:52:a4:8d:27:f4:a5:41:0b:e4:
d2:7c:5a:ef:91:13:b3:3b:3a:0a:b9:44:0c:d3:49:
d3:09:95:21:d5:8e:96:64:d3:df:e6:b6:db:01:7d:
41:44:83:40:3a:5a:e1:de:ee:5f:04:85:8d:07:f6:
29:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:19:12:C9:F9:16:D3:ED:F0:FC:F9:06:68:D1:15:13:D7:D3:5B:C6
X509v3 Authority Key Identifier:
keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/iRkSyfkW0-3w_PkGaNEVE9fTW8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.220.0/22
IPv6:
2a0e:1500::/29
Signature Algorithm: sha256WithRSAEncryption
5f:c6:5a:5f:8f:8b:9d:96:42:9b:e9:c4:cc:27:4c:b5:b2:93:
b5:56:5a:24:28:e7:46:e6:0d:be:01:cf:55:04:ba:16:eb:54:
e0:2a:8b:f6:55:4f:48:63:63:e0:f7:59:13:11:e2:63:eb:38:
f9:e1:ae:07:17:56:35:94:40:55:4c:00:3a:02:ff:31:54:75:
d2:a2:20:98:92:88:1d:bf:bc:82:e3:6f:21:b1:ca:d9:bc:59:
3f:3e:57:1a:af:17:f9:30:c7:d1:75:40:34:b3:3c:ab:fe:49:
5b:e0:b4:8f:d3:a9:ac:75:7a:da:00:2f:a2:5c:6e:df:6d:fd:
0a:0e:18:cf:cc:b0:9f:71:df:b2:48:a6:d2:66:b7:49:e2:56:
59:ce:f4:2c:51:49:e8:13:7d:19:53:a3:85:7a:f2:55:e1:33:
3f:9a:1e:7b:49:af:40:8c:09:03:8a:d9:e2:23:61:b8:10:cb:
17:70:a0:bd:10:ce:0d:17:30:68:4d:e9:73:06:db:d6:30:04:
4d:d8:03:97:5f:7b:cf:d7:ad:bb:76:fc:4b:58:39:f6:51:22:
74:6b:a3:59:93:81:64:d2:85:bb:57:f2:80:06:d1:3c:e0:8b:
c5:e4:9a:b2:2d:3e:1c:d6:35:34:77:20:ca:d8:60:c9:97:6c:
19:1b:29:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:33:24 2024 by rpki-client on console-ams.rpki-client.org