Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/45PWW8-c1giGMLsT4ml0RgAf59c.roa
File: 45PWW8-c1giGMLsT4ml0RgAf59c.roa (raw, json)
Hash identifier: 5Dfitb9bd7jAKyT/MoWX7WWb7rTXgoDlTiJ8FUA//3I=
Subject key identifier: E3:93:D6:5B:CF:9C:D6:08:86:30:BB:13:E2:69:74:46:00:1F:E7:D7
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D372F3F2479A7C559EE92551FD34D
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/45PWW8-c1giGMLsT4ml0RgAf59c.roa
Signing time: Mon 01 Jan 2024 00:29:46 +0000
ROA not before: Mon 01 Jan 2024 00:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209215
IP address blocks: 2a0e:aa06:460::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:37:2f:3f:24:79:a7:c5:59:ee:92:55:1f:d3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e393d65bcf9cd6088630bb13e2697446001fe7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:9a:ac:1f:3e:7a:0c:d7:e7:07:6d:5a:51:
a8:0c:19:67:fa:cb:ad:b3:0a:b5:ba:d0:b9:8f:9a:
09:63:e7:10:db:4e:0a:d2:61:1a:63:e6:8f:b9:22:
6a:7e:d8:d8:04:64:1b:a4:43:29:f5:21:8c:f6:d9:
a4:f7:97:72:36:0b:8b:b8:38:cb:3b:6b:8f:9c:9b:
57:c5:40:ad:74:e3:6b:da:99:41:8e:17:e5:b7:ac:
59:97:c1:33:29:ee:bd:0c:48:6b:9a:3a:1d:3d:89:
7c:a1:4a:56:88:b5:47:28:ce:36:e2:cc:c5:45:38:
a5:b1:30:8f:aa:57:1a:0c:9d:24:a4:53:9e:93:94:
10:09:37:d9:1c:71:5c:26:1b:2c:80:78:40:d3:b6:
d2:af:98:9b:74:bf:f5:17:ca:f6:89:cf:c4:f3:76:
eb:02:4c:da:78:2b:c8:9b:c7:34:17:da:82:6e:23:
fd:4e:38:f8:a6:66:fb:95:65:20:57:2d:d6:70:eb:
96:48:fd:16:69:67:41:8b:f7:ca:91:bd:9f:9e:ce:
5f:e5:82:79:7f:5e:55:8a:81:45:69:0e:a5:64:7f:
6f:80:34:6e:c0:48:47:0b:41:2f:0d:30:da:ae:5b:
2c:a2:0f:58:24:88:d5:d3:57:a5:5a:01:5d:39:60:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:93:D6:5B:CF:9C:D6:08:86:30:BB:13:E2:69:74:46:00:1F:E7:D7
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/45PWW8-c1giGMLsT4ml0RgAf59c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa06:460::/44
Signature Algorithm: sha256WithRSAEncryption
32:0c:f7:c1:ee:a0:b6:e0:11:85:08:18:68:4b:ff:a4:3e:5e:
bb:09:ea:f7:05:2f:fd:cb:ad:2a:58:d6:80:99:ec:0c:a6:55:
a8:bc:cf:8b:d5:8a:84:0f:73:6a:e2:e3:84:ee:e4:e5:19:14:
80:b4:7e:c9:27:74:6f:80:45:07:69:e6:2c:48:af:2b:67:41:
27:cd:1f:9e:ae:e2:06:66:f9:01:da:6a:aa:c1:bb:14:3b:39:
d1:59:b2:4d:6e:74:f4:e4:64:18:43:39:df:97:a8:a9:9b:84:
85:58:99:79:7c:d8:e6:1d:4b:29:58:c7:1b:38:15:9a:72:a0:
cd:9f:c8:25:3c:71:59:d6:c2:87:63:29:33:c9:0a:4f:c1:08:
cb:09:bc:34:95:a1:0f:ea:b6:04:25:e5:f2:4c:90:38:65:ab:
24:d6:5a:3d:46:74:ae:3d:c3:02:6e:ff:f0:54:74:71:16:3c:
9a:11:34:44:f3:0c:fa:b3:00:b0:6b:3f:22:6d:44:7d:ea:77:
39:0e:9c:26:84:ae:0c:28:6f:52:58:1a:a6:db:b8:b6:82:1b:
60:60:4e:ed:53:85:81:45:f1:bc:b3:a3:48:ac:ec:48:c6:ca:
16:81:db:c5:18:f4:2c:91:f7:2b:43:9c:fa:bb:26:cd:d7:83:
27:3e:df:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:57:52 2024 by rpki-client on console-fra.rpki-client.org