Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/C_qSVLAdYkaTr9kXGmX-fAlxK_4.roa
File: C_qSVLAdYkaTr9kXGmX-fAlxK_4.roa (raw, json)
Hash identifier: eIzYKGauYmrEQqxga1KehT2oRyMa6u7QXzxA8qufbhY=
Subject key identifier: 0B:FA:92:54:B0:1D:62:46:93:AF:D9:17:1A:65:FE:7C:09:71:2B:FE
Certificate issuer: /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial: 018CC34929055015F975DC74B0F4411B7F37
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/C_qSVLAdYkaTr9kXGmX-fAlxK_4.roa
Signing time: Mon 01 Jan 2024 04:30:00 +0000
ROA not before: Mon 01 Jan 2024 04:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15945
IP address blocks: 45.148.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:29:05:50:15:f9:75:dc:74:b0:f4:41:1b:7f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
Validity
Not Before: Jan 1 04:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bfa9254b01d624693afd9171a65fe7c09712bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b5:26:7b:12:0b:eb:3c:c9:cb:2a:b8:1e:a1:
20:58:17:1b:60:3d:bc:2e:f8:d1:c8:15:71:d0:60:
3d:eb:05:3c:68:f3:2d:b7:3f:cf:5c:fa:68:77:aa:
47:a3:c6:9e:8c:8b:e6:b8:ce:02:e9:6f:8d:d9:ae:
03:6d:ca:18:cc:06:09:3b:e0:f9:21:25:79:e1:a1:
38:d0:e3:2e:bc:aa:55:b8:d6:15:ad:5a:89:c6:9f:
de:56:81:b5:6a:fd:61:8f:45:ab:09:c5:89:8d:29:
3c:0f:37:7a:ac:6f:5e:ad:3d:b1:6e:db:28:7c:bf:
83:af:81:4a:d6:c4:ea:92:1a:4a:74:2a:db:35:5b:
cc:dd:ce:a9:11:b8:4f:ca:43:9c:81:8f:a0:45:ad:
03:f9:b2:db:fb:88:2a:c7:fc:7e:07:a8:55:d3:39:
b8:fe:da:81:35:2b:6b:87:de:3a:ae:00:60:e7:a4:
9a:6d:a3:37:45:cc:b1:19:c3:a5:aa:5a:70:d2:57:
d8:51:b4:8d:cd:e4:f7:e4:da:3e:8b:31:bb:9f:d1:
9e:72:f2:b7:ea:2e:b6:c9:f2:17:fa:75:4a:75:dd:
c6:e7:a2:ed:5d:83:11:aa:ac:dd:0e:4a:db:55:1b:
ca:95:d9:ae:f7:66:7a:82:92:72:ea:15:8d:ea:db:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FA:92:54:B0:1D:62:46:93:AF:D9:17:1A:65:FE:7C:09:71:2B:FE
X509v3 Authority Key Identifier:
keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/C_qSVLAdYkaTr9kXGmX-fAlxK_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.216.0/23
Signature Algorithm: sha256WithRSAEncryption
72:eb:3d:b2:65:7a:99:c4:53:56:b1:ae:bd:7a:f6:78:23:49:
5b:1d:f9:eb:0d:d1:86:80:03:fe:05:7e:ca:ac:87:63:f5:20:
eb:d4:bd:6d:13:14:30:4b:4b:fd:dc:85:1c:e6:1b:d4:e0:b8:
5e:56:f5:3c:ee:d1:26:27:48:7b:e7:e5:69:2b:3d:4a:ba:f2:
a2:65:eb:ae:7c:1c:d8:6d:f2:f0:f8:d3:0f:25:1c:08:9e:de:
5a:36:a4:b6:ff:03:0d:cd:46:24:b7:57:f1:45:fa:e2:0f:f4:
68:51:bd:23:76:96:7a:88:18:e8:23:a4:03:94:ca:fe:e0:4e:
b8:d4:62:31:04:3b:af:56:a4:4f:62:66:54:60:29:d4:cb:5f:
35:53:0e:04:d8:6f:74:f2:34:e8:12:31:78:3d:44:b4:bc:0e:
29:ec:3e:ae:d0:c0:79:bf:32:b7:d1:17:36:01:3a:e0:f9:91:
c4:8e:7d:67:2e:a7:24:f7:bc:9e:43:0b:f6:d4:23:d2:5a:34:
a3:4d:d3:09:f6:21:86:54:5b:24:36:d2:d6:2f:6b:dc:65:58:
1f:9c:b0:5c:f9:5e:0a:0f:59:04:7c:13:d8:ed:db:d3:c0:5e:
e6:14:52:b9:3b:b0:2e:db:83:e7:fa:7a:74:39:7e:59:ee:1e:
a3:c1:09:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 23:53:04 2024 by rpki-client on console-fra.rpki-client.org