Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/54KK4aZZz4FI6mWSAjSjd1MRiPA.roa
File: 54KK4aZZz4FI6mWSAjSjd1MRiPA.roa (raw, json)
Hash identifier: N53RX9q3oKYPM6AEFYUQ7vsBY/k1sVwgiPFn1643sfg=
Subject key identifier: E7:82:8A:E1:A6:59:CF:81:48:EA:65:92:02:34:A3:77:53:11:88:F0
Certificate issuer: /CN=9f284111700492ab0be110e821a1bce73f80a565
Certificate serial: 018CCA2B91E01F9D0306D5049892EC0E985C
Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/54KK4aZZz4FI6mWSAjSjd1MRiPA.roa
Signing time: Tue 02 Jan 2024 12:35:02 +0000
ROA not before: Tue 02 Jan 2024 12:35:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212327
IP address blocks: 45.9.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:91:e0:1f:9d:03:06:d5:04:98:92:ec:0e:98:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565
Validity
Not Before: Jan 2 12:35:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7828ae1a659cf8148ea65920234a377531188f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:90:f8:17:96:46:76:06:af:91:50:8d:15:
08:f7:67:51:79:18:39:f3:35:49:a6:d3:88:fc:8e:
a0:99:15:e8:35:8a:88:47:f2:e0:97:e5:6e:4b:29:
27:b8:8f:62:4e:fb:8d:5f:79:c8:43:cd:71:e6:39:
f1:25:1c:60:5a:bc:b3:0e:97:1c:ba:a4:fd:e8:00:
15:01:86:d5:30:66:a5:21:88:aa:3b:de:82:ca:13:
fb:12:ab:ee:2a:d2:0c:cf:91:b1:c0:45:ee:e4:bb:
2a:9e:28:d9:43:9b:91:72:11:c9:18:8a:7f:c3:ac:
0d:df:6f:2e:e6:a0:f8:d3:e2:d9:d9:d9:07:b8:5a:
15:14:b9:8b:fe:e6:85:5f:52:50:ce:d5:fb:88:0a:
d8:e9:68:5d:1c:f4:3a:73:60:83:8f:96:71:7d:20:
1f:ba:e1:b2:19:9d:fb:5c:17:4c:6a:f6:89:75:04:
80:22:38:b8:49:97:53:cf:ac:89:7b:88:99:8b:03:
a5:cd:56:15:59:7d:c1:a4:8d:df:94:eb:f0:ac:e6:
55:6f:21:ed:43:57:92:db:90:50:1d:59:78:94:5d:
6d:15:93:38:49:8d:99:ef:cd:08:4c:02:39:8b:37:
a0:41:c9:bf:3a:7e:ce:cf:72:ab:46:2f:b6:ac:83:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:82:8A:E1:A6:59:CF:81:48:EA:65:92:02:34:A3:77:53:11:88:F0
X509v3 Authority Key Identifier:
keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/54KK4aZZz4FI6mWSAjSjd1MRiPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.136.0/22
Signature Algorithm: sha256WithRSAEncryption
29:53:50:bb:1c:79:d2:c9:83:bc:d0:5f:1c:67:1a:cc:95:59:
66:6a:cf:86:16:6a:d1:e1:2c:ad:f2:5c:9d:17:bf:77:57:9a:
62:07:b5:56:68:84:ad:03:05:af:73:05:a9:bb:ca:fc:6d:be:
48:33:25:f3:c8:2b:52:23:df:b0:05:56:19:86:9b:e3:60:8b:
38:86:5d:ab:78:5b:25:33:df:1f:d3:16:c3:6e:1e:64:04:17:
42:3b:10:e9:09:95:f6:f7:07:12:52:38:31:fe:ff:d8:16:d7:
63:07:8f:a1:cf:1d:df:06:86:52:90:60:8c:21:6e:62:d3:c1:
ce:60:8b:00:e9:0a:ce:52:9c:1c:6a:a8:59:9c:65:91:17:13:
68:26:45:ab:e4:29:0a:ea:74:ae:43:a3:25:28:9a:7c:75:fb:
c7:4b:44:32:fb:db:e6:eb:b8:36:a2:3f:af:4f:a9:3e:c3:cc:
aa:ef:c1:61:94:72:02:2e:21:27:1e:f2:96:51:bf:d9:98:67:
a4:db:9b:8c:7a:2c:e3:10:b4:1a:f8:91:40:c6:06:76:3d:e3:
6d:55:c7:1a:42:ab:ad:16:75:e1:7e:0e:21:81:d2:d4:3b:7a:
0f:ad:83:d2:7e:06:84:5b:ba:6e:41:69:a3:8a:79:a5:cd:e3:
ee:2c:1f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:40:04 2024 by rpki-client on console-ams.rpki-client.org