Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/x99KGMCQh9tYlaiernFLM3fnkVI.roa
File: x99KGMCQh9tYlaiernFLM3fnkVI.roa (raw, json)
Hash identifier: 9DkmB/DPtTXV/BvtTD/+oLPNqM6FmXbgLy/rt10yf/I=
Subject key identifier: C7:DF:4A:18:C0:90:87:DB:58:95:A8:9E:AE:71:4B:33:77:E7:91:52
Certificate issuer: /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial: 018CC4253B33DAB6A57C3342F97F0DF811CD
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/x99KGMCQh9tYlaiernFLM3fnkVI.roa
Signing time: Mon 01 Jan 2024 08:30:23 +0000
ROA not before: Mon 01 Jan 2024 08:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.154.18.0/24 maxlen: 24
45.154.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:3b:33:da:b6:a5:7c:33:42:f9:7f:0d:f8:11:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Validity
Not Before: Jan 1 08:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7df4a18c09087db5895a89eae714b3377e79152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:39:09:3e:06:7f:cb:66:4d:47:06:b6:9e:7f:
9f:30:28:07:07:bd:00:94:61:98:d7:8c:a2:2b:a7:
cb:7b:96:ec:7d:05:5a:65:ed:57:b8:3b:83:89:a8:
d7:41:66:b9:72:3e:f7:75:bf:ae:ca:54:51:e4:f7:
fe:5d:d0:b8:00:c1:a8:27:06:60:f7:e8:45:e7:f1:
55:18:a7:b2:2b:f2:16:ab:5b:36:1d:ca:88:c7:69:
78:71:50:3f:60:2c:f8:04:19:87:11:1e:08:e0:67:
08:cb:ed:9a:14:13:ae:20:b3:ab:85:26:70:ce:ed:
5a:90:b9:33:71:25:21:b4:50:13:95:3e:01:67:53:
5b:86:eb:3e:d4:e3:3e:cf:86:97:b4:7b:7c:e8:e0:
61:61:05:9d:a3:ba:ea:27:75:d0:c2:f1:76:b6:fd:
db:9b:15:05:6a:7f:b4:0f:ef:f7:46:09:41:6b:57:
1c:43:aa:cc:fa:61:be:5e:27:cb:25:31:6c:96:39:
32:6d:bd:c7:5e:ea:be:5f:34:6b:37:bc:0d:c4:a6:
94:7a:e9:e9:63:d6:6d:2d:c4:37:2d:0c:29:82:0d:
6f:40:d8:a8:d7:b3:a5:aa:5e:a6:c9:21:57:d2:57:
bf:e2:25:cf:75:80:cf:7a:ed:c5:e9:7f:b7:72:c9:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DF:4A:18:C0:90:87:DB:58:95:A8:9E:AE:71:4B:33:77:E7:91:52
X509v3 Authority Key Identifier:
keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/x99KGMCQh9tYlaiernFLM3fnkVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.18.0/23
Signature Algorithm: sha256WithRSAEncryption
62:fc:55:f3:42:ef:68:03:52:c0:fc:9e:a5:11:b7:5f:a1:f9:
df:3c:49:f1:91:b6:fb:24:81:b2:e1:df:07:8b:0a:be:3c:04:
d4:18:59:9e:9f:4d:9f:41:99:86:30:93:4d:74:b5:c5:d9:a6:
dd:9c:0b:35:a0:28:85:3e:ac:e2:d9:44:3f:f8:7d:2d:aa:c7:
3d:e8:44:d8:37:87:a2:a8:e7:51:a7:a9:db:5d:88:d7:3a:06:
ae:75:5d:86:17:d0:34:ac:b8:6b:15:af:29:ee:ba:bf:f7:e3:
d0:8f:16:3b:f5:ba:9a:43:93:15:e5:80:b4:44:3a:67:bc:f3:
84:5f:b9:e2:81:5f:47:91:65:95:ef:e8:86:8e:69:a1:5d:95:
b8:11:bd:ca:81:29:28:94:b0:25:f2:80:0e:07:ee:22:e6:0d:
ba:47:5b:9d:95:06:9e:33:f8:c5:64:11:d2:4d:a6:60:56:e4:
a2:d2:6c:a4:1a:73:32:6a:11:90:89:5c:df:8a:33:a1:54:30:
cb:8d:e6:0d:44:cf:29:da:92:80:e7:d3:99:b9:4d:e9:a0:4b:
b4:79:e3:2d:38:e5:6c:12:57:48:95:56:12:c6:32:4e:64:89:
1c:85:d0:a1:e2:97:8b:ef:2c:41:f4:8d:b5:48:0c:2a:e6:07:
9a:d9:6b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:45:36 2024 by rpki-client on console-ams.rpki-client.org