Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/CFeskGhQCWEZ1wTmhgIiHvZUVs8.roa
File: CFeskGhQCWEZ1wTmhgIiHvZUVs8.roa (raw, json)
Hash identifier: rZ+olhHSGl/KnhRsGGqUBYCQOJ4hOJO7ZUIncIIkMGg=
Subject key identifier: 08:57:AC:90:68:50:09:61:19:D7:04:E6:86:02:22:1E:F6:54:56:CF
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 018CC80166A9857AFB6410229F6B214C3270
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/CFeskGhQCWEZ1wTmhgIiHvZUVs8.roa
Signing time: Tue 02 Jan 2024 02:29:44 +0000
ROA not before: Tue 02 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205909
IP address blocks: 45.92.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:66:a9:85:7a:fb:64:10:22:9f:6b:21:4c:32:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 2 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0857ac906850096119d704e68602221ef65456cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f2:b9:08:97:60:e0:34:24:e6:e8:b6:ee:57:
80:7e:95:1f:7f:72:90:43:61:c9:aa:9e:66:55:44:
fc:c1:ad:aa:23:ab:c4:8c:5e:44:8b:ac:3b:16:f7:
c0:6b:bb:f4:a9:29:54:de:33:09:cc:02:da:24:fa:
7f:21:ae:45:b0:5d:3b:16:bc:65:4a:ee:4a:59:2a:
b9:6d:90:fb:a7:94:bc:51:97:9b:e7:c4:49:7c:8c:
60:f5:e3:e7:62:a9:b2:09:25:ac:e2:73:38:8f:83:
36:7b:b6:33:92:b0:b4:ad:8a:81:2f:94:0f:15:32:
40:02:a9:c8:a1:f6:ef:46:85:84:42:d3:39:11:9c:
1c:fc:78:ce:42:28:9e:53:20:08:53:83:35:5f:6d:
14:f2:af:78:39:a0:e2:fe:39:7f:99:e6:ff:5e:df:
cc:87:15:19:92:d1:18:73:9f:19:44:4a:2f:93:04:
06:28:95:03:a0:20:b0:13:e7:77:d4:7f:80:f5:70:
6d:10:4f:c8:6f:c5:68:3b:80:69:eb:e6:bf:59:a9:
e6:f9:35:e4:0e:ca:db:30:07:11:83:c5:8d:25:c9:
10:98:aa:bd:37:68:d3:ce:5d:74:1d:d5:aa:6b:17:
ad:d8:76:da:9c:54:28:66:29:21:5b:c1:fa:ad:e0:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:57:AC:90:68:50:09:61:19:D7:04:E6:86:02:22:1E:F6:54:56:CF
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/CFeskGhQCWEZ1wTmhgIiHvZUVs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.41.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:42:ab:83:0c:30:f1:1b:83:2d:ba:e7:43:13:f0:46:a1:8b:
4b:dc:59:b7:d6:e8:41:9b:f8:95:c5:cb:02:f8:d0:64:7d:b0:
49:56:57:3b:59:d8:fe:03:82:09:ab:57:f4:c6:18:94:ec:18:
e7:df:3c:b9:cb:da:15:a6:7a:20:ef:c4:aa:0d:5b:f4:44:11:
0f:50:a2:17:12:08:69:31:ec:3c:25:98:d8:5d:a5:d3:a1:20:
9d:23:aa:0a:18:1d:8f:93:e2:be:0b:f6:51:ed:a1:d1:0d:fd:
6d:2d:a7:ba:b9:a5:8c:4b:87:23:e0:13:af:a8:de:73:77:d1:
ad:e6:64:b3:8b:39:17:b8:16:7f:c8:97:ee:1a:95:41:51:a2:
21:52:5a:2d:39:0d:db:42:53:15:19:9d:c6:9d:57:4a:0e:8e:
03:76:59:c1:39:f9:17:77:15:26:58:c7:07:2c:63:91:3f:db:
b5:a2:c1:06:34:73:85:22:6a:ea:48:d4:83:88:6a:df:21:3f:
cc:cc:60:10:91:a1:57:d3:03:14:fe:66:3c:bf:71:c9:01:2a:
2a:3c:c8:d5:5d:41:07:c8:24:7d:79:6e:cc:41:c8:4b:e4:06:
ca:2c:b2:4f:c3:72:cd:d5:a6:03:e6:36:31:5a:5b:1b:5e:2c:
f6:5d:b0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 09:17:38 2024 by rpki-client on console-ams.rpki-client.org