Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Wi4mRkUlbT6kxPP8XzHvwG8ld0Q.roa
File: Wi4mRkUlbT6kxPP8XzHvwG8ld0Q.roa (raw, json)
Hash identifier: qY8YJ/q2UOnL5PGH/taW//2mSexYg0Vhod0s5ZQ3SEs=
Subject key identifier: 5A:2E:26:46:45:25:6D:3E:A4:C4:F3:FC:5F:31:EF:C0:6F:25:77:44
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D26F667E7CB3BA2CF31591D3FFE0E
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Wi4mRkUlbT6kxPP8XzHvwG8ld0Q.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138997
IP address blocks: 45.9.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:26:f6:67:e7:cb:3b:a2:cf:31:59:1d:3f:fe:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a2e264645256d3ea4c4f3fc5f31efc06f257744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:25:58:11:7f:20:47:c8:43:c4:3d:ef:58:48:
ca:55:76:4b:c8:eb:99:9d:4f:b2:ba:f4:37:01:ce:
ab:b6:21:e9:b4:fd:47:98:eb:60:d9:cf:07:4a:ec:
8d:8f:12:c8:65:d5:48:f7:5b:10:2e:48:41:6b:e3:
81:92:f4:fa:de:0c:b9:e2:11:db:6e:b9:e9:ef:1e:
57:35:aa:1c:cb:78:1d:88:19:43:0e:4a:aa:22:9d:
23:07:8a:1b:76:b5:1b:d4:dc:36:89:ef:84:50:b0:
4e:b1:3f:42:df:e1:7c:01:5f:99:ed:06:ba:37:be:
88:3d:e5:ac:52:1c:ef:50:bb:87:09:3e:2f:22:9c:
b9:e2:ab:22:cc:9b:de:71:89:96:af:13:df:df:41:
4a:6f:7b:13:0d:bc:99:e1:7f:24:0b:89:ce:f3:ed:
10:e7:2a:32:69:6b:a0:a3:d4:32:d9:48:66:c2:7d:
08:52:61:c4:bf:94:ad:de:e6:f8:10:c4:00:93:ce:
5c:b6:2d:c0:9f:2a:f5:79:38:8a:7d:7e:88:98:f1:
07:6b:cc:a8:a7:a0:31:a2:d9:d2:93:a5:d9:51:50:
1e:06:99:5f:16:53:2e:ae:c0:45:f9:9b:24:ed:83:
8a:bc:19:22:24:71:26:dd:e2:d4:9e:8b:61:46:04:
9d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2E:26:46:45:25:6D:3E:A4:C4:F3:FC:5F:31:EF:C0:6F:25:77:44
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Wi4mRkUlbT6kxPP8XzHvwG8ld0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.8.0/24
Signature Algorithm: sha256WithRSAEncryption
17:36:54:b2:ed:8a:3c:cb:8b:26:69:45:d6:95:5d:c7:4f:a4:
b6:95:fc:b0:ba:bf:c9:85:c8:65:29:2e:86:4f:e3:bb:d6:cc:
7b:2d:59:f9:13:d3:cf:19:4e:00:71:3b:64:5d:80:0e:66:bb:
a1:d1:80:c0:63:5a:27:07:4d:93:39:ce:59:86:31:f8:fd:5e:
50:a0:95:f7:7f:5f:af:e3:c9:2a:7f:6d:23:8e:c1:a8:a9:29:
11:28:56:0a:8b:45:86:a3:e3:82:2b:9f:f2:0a:61:ff:ef:ee:
4c:bb:be:b7:1c:53:5d:68:4f:66:99:de:bc:68:39:25:07:65:
ea:01:54:c4:01:fe:1e:41:44:4b:87:56:70:60:f6:18:21:58:
eb:f3:93:26:2a:54:c8:c3:91:55:58:a7:8b:09:35:f1:dc:6b:
37:a7:f4:af:73:64:42:9c:77:e2:05:db:24:0d:b4:34:a9:bf:
c6:42:3c:40:26:a8:41:34:0f:c7:00:96:a9:3b:cb:b8:19:2c:
11:d1:ad:8e:68:75:e7:b1:af:57:30:fa:bd:b0:ed:ee:cb:88:
b7:d3:7a:c3:bd:ef:c8:cb:31:da:57:29:1a:16:4d:de:b6:87:
25:82:ce:fa:a4:57:da:68:6e:73:52:84:d6:88:9b:7e:31:d2:
55:fe:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 18:27:01 2024 by rpki-client on console-ams.rpki-client.org