Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Ex6GjhMplZIABoE5KcS3dK2XxD4.roa
File: Ex6GjhMplZIABoE5KcS3dK2XxD4.roa (raw, json)
Hash identifier: yMkZQ1BwSBl+HDMGW/VyzFPB7TEbLZLbuCcFIdmcGqQ=
Subject key identifier: 13:1E:86:8E:13:29:95:92:00:06:81:39:29:C4:B7:74:AD:97:C4:3E
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D392C514358F4BA5C86765EE7C41B
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Ex6GjhMplZIABoE5KcS3dK2XxD4.roa
Signing time: Mon 01 Jan 2024 00:29:47 +0000
ROA not before: Mon 01 Jan 2024 00:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209417
IP address blocks: 45.9.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:39:2c:51:43:58:f4:ba:5c:86:76:5e:e7:c4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=131e868e132995920006813929c4b774ad97c43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:31:80:fc:f9:d8:e2:8a:16:0a:4f:0d:7b:
00:dc:10:94:11:da:41:74:b7:62:ad:84:7e:25:15:
30:7c:78:94:c9:6f:0a:a4:a5:e3:aa:84:80:4d:79:
2e:f4:b6:64:7c:a0:ec:8e:f7:2d:00:40:e6:61:76:
d8:21:ea:fd:11:80:37:88:18:f2:b5:a1:34:e0:87:
10:8d:3c:6d:ad:c8:c3:c7:68:04:79:bd:49:b7:89:
5d:39:a8:43:be:d6:e5:dd:0a:74:b4:fd:8f:ce:c5:
25:ce:f6:9e:cc:19:ba:3d:73:96:ba:4f:fd:eb:3f:
3a:db:4c:8b:d8:89:78:d3:3b:f9:7a:1a:16:82:ff:
fb:0e:b0:8e:62:07:b0:14:6b:e4:88:93:52:d5:fe:
c8:cf:d7:9c:2d:5e:3e:7b:fd:7e:8e:a3:e4:b3:6d:
e0:21:97:96:86:6b:82:ba:a4:f4:e2:e1:4a:18:96:
b1:07:10:8a:b1:b3:4c:1a:e3:f0:25:e2:2b:13:b6:
89:fd:d7:dd:09:31:36:c3:e0:8c:1a:ff:cd:f8:98:
f2:7d:04:e5:dc:7d:ea:4f:35:10:c5:8d:7c:5f:8c:
38:3a:9f:dc:06:d5:c1:58:9e:89:e6:c9:bb:08:d5:
44:70:8c:99:b6:d7:08:14:0d:48:d2:1f:1c:e3:fd:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1E:86:8E:13:29:95:92:00:06:81:39:29:C4:B7:74:AD:97:C4:3E
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Ex6GjhMplZIABoE5KcS3dK2XxD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.11.0/24
Signature Algorithm: sha256WithRSAEncryption
55:30:9e:c6:95:39:6a:fa:a5:96:ef:27:ab:5a:94:a9:18:6c:
36:d3:47:ca:a7:7e:b9:2b:20:75:ee:97:0d:43:f7:94:aa:c2:
70:e8:9e:a9:66:4e:8f:9b:ca:7f:b0:a9:6f:99:61:0e:0e:7d:
06:85:6b:39:09:6d:4c:b1:42:cb:f8:99:97:31:de:70:76:b3:
1d:92:f3:87:cd:7c:a5:d4:21:0d:7f:4b:05:79:a0:20:59:80:
7c:d3:29:63:f3:38:dc:cf:69:eb:2d:a3:a6:88:53:01:8d:d9:
a1:aa:e3:f1:b4:0a:66:78:32:6f:25:16:d3:e4:7e:60:06:a4:
a0:36:39:99:e3:a4:30:82:bb:cc:4d:d3:66:a8:30:70:c4:9a:
c4:96:b7:d8:51:e0:58:24:58:f2:d7:bd:be:d2:cf:0f:d7:11:
7f:ae:d9:a9:8e:9e:a2:ab:c9:77:19:01:58:ec:26:50:86:28:
b8:33:e2:fe:19:8c:08:28:8d:d9:93:0b:45:62:b3:17:fa:12:
59:f0:2e:0b:3d:7b:cc:f0:23:62:eb:4e:f5:0e:99:b3:73:85:
30:d8:40:aa:33:0e:5c:4c:45:e0:5f:51:4c:c8:4d:f5:ac:24:
b0:ea:17:56:49:21:99:ca:22:66:ab:11:47:0f:8a:ed:c3:c2:
77:5e:13:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:54:57 2024 by rpki-client on console-fra.rpki-client.org