Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a11386-fbed-4e2a-a8a6-bbdb77250f7a/1/A9Ru9ZbRx1eOjM717P3TCbpr5OY.roa
File: A9Ru9ZbRx1eOjM717P3TCbpr5OY.roa (raw, json)
Hash identifier: 7KfVjI3JyTwYFdTRh6XnDTo2/sCZfuKj6oEXxdeW+PE=
Subject key identifier: 03:D4:6E:F5:96:D1:C7:57:8E:8C:CE:F5:EC:FD:D3:09:BA:6B:E4:E6
Certificate issuer: /CN=a9bfe748b5ea721bdb26c34b75cf53f10dda6ebe
Certificate serial: 018D876F4F41ECFA9E81E833C44D13164D6E
Authority key identifier: A9:BF:E7:48:B5:EA:72:1B:DB:26:C3:4B:75:CF:53:F1:0D:DA:6E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb_nSLXqchvbJsNLdc9T8Q3abr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a11386-fbed-4e2a-a8a6-bbdb77250f7a/1/A9Ru9ZbRx1eOjM717P3TCbpr5OY.roa
Signing time: Thu 08 Feb 2024 06:37:15 +0000
ROA not before: Thu 08 Feb 2024 06:37:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205285
IP address blocks: 45.11.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a11386-fbed-4e2a-a8a6-bbdb77250f7a/1/qb_nSLXqchvbJsNLdc9T8Q3abr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a11386-fbed-4e2a-a8a6-bbdb77250f7a/1/qb_nSLXqchvbJsNLdc9T8Q3abr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb_nSLXqchvbJsNLdc9T8Q3abr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:6f:4f:41:ec:fa:9e:81:e8:33:c4:4d:13:16:4d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9bfe748b5ea721bdb26c34b75cf53f10dda6ebe
Validity
Not Before: Feb 8 06:37:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03d46ef596d1c7578e8ccef5ecfdd309ba6be4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:c3:e1:ab:9e:4f:17:73:3e:28:41:e9:06:
3b:f8:12:7c:b9:7a:4f:2f:a5:84:cc:ee:6c:6d:44:
32:d6:9d:d9:5d:87:dd:d8:55:77:13:6e:21:37:06:
6e:38:61:ba:26:7b:d9:5d:74:8a:8e:14:f0:29:28:
1e:96:60:a1:ba:be:f6:53:d1:7c:ea:a2:ae:0b:6d:
b9:db:29:f0:05:fe:69:7e:67:f2:09:90:7a:3a:da:
0b:78:18:a8:50:2c:8a:97:47:20:93:c5:28:d4:f4:
7f:e2:15:bd:a5:13:ef:cb:5a:06:2a:c7:d1:9d:23:
bd:cc:17:96:ef:8a:e1:e5:64:26:59:88:76:c8:16:
cc:95:23:4d:bb:d4:5f:fd:83:d4:d3:d8:55:b2:b9:
f2:b6:24:98:83:6d:e5:d6:f2:49:40:34:e9:f0:c4:
37:62:fc:85:d5:27:75:d5:de:e6:e4:0a:42:29:54:
a0:bc:48:35:d4:0c:61:84:fc:49:52:1c:90:0a:b2:
16:b1:2b:2c:39:28:07:29:23:d5:bb:db:9b:ce:e3:
b5:e6:58:88:31:50:0d:d8:a8:5b:23:f9:61:dd:01:
99:60:f9:98:f6:9e:42:6a:2d:bd:77:7c:b3:a9:32:
ed:35:11:f8:0f:b5:0e:37:e8:a0:ca:3d:9e:12:c0:
0f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D4:6E:F5:96:D1:C7:57:8E:8C:CE:F5:EC:FD:D3:09:BA:6B:E4:E6
X509v3 Authority Key Identifier:
keyid:A9:BF:E7:48:B5:EA:72:1B:DB:26:C3:4B:75:CF:53:F1:0D:DA:6E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb_nSLXqchvbJsNLdc9T8Q3abr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a11386-fbed-4e2a-a8a6-bbdb77250f7a/1/A9Ru9ZbRx1eOjM717P3TCbpr5OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a11386-fbed-4e2a-a8a6-bbdb77250f7a/1/qb_nSLXqchvbJsNLdc9T8Q3abr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.224.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:a1:26:9b:8c:3c:1d:a8:db:55:e7:85:3f:cd:bb:2d:d8:ee:
66:14:ef:2d:f9:dc:79:81:7a:d8:7e:8e:cd:d3:1d:87:0a:20:
33:87:8a:b8:c5:5b:1b:1e:6d:7b:bc:5c:ca:88:d8:b6:05:57:
cb:69:6a:7e:e5:66:a2:f3:fb:31:ae:73:4f:39:75:89:68:55:
7a:f4:2b:7c:41:25:ae:4a:47:96:ac:7e:38:28:3b:47:65:a9:
65:ba:ce:e6:ce:1e:9c:ba:b9:26:4b:fb:e7:d4:74:85:90:dc:
87:0b:ab:64:cf:0c:a1:25:74:12:b4:c0:a2:d9:ef:5d:09:e3:
f1:10:3f:2e:f3:f9:1e:cc:50:d2:24:f1:4e:e5:5e:3f:fd:dd:
d5:da:70:a9:f7:e2:e6:24:0a:68:06:14:a6:d4:87:09:4f:a0:
c8:88:77:fe:c2:1a:6e:ea:ca:10:fb:10:9a:e2:6e:b7:ca:d7:
2b:ad:a9:9d:3a:4b:f1:65:fa:59:0c:7b:34:f5:eb:ba:48:43:
0e:2a:77:56:91:49:06:8b:0f:26:4d:e1:e7:ba:1d:e8:17:37:
23:43:04:e8:33:45:1c:61:2b:d7:9d:54:93:8f:e8:0d:bf:65:
06:29:94:d6:c0:ae:dc:f0:cc:37:a2:e1:9b:0f:2d:d6:a3:10:
16:be:f9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 12:32:57 2024 by rpki-client on console-ams.rpki-client.org