Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/di5i3BrozJC5aLYxDKI2nRGGdjg.roa
File: di5i3BrozJC5aLYxDKI2nRGGdjg.roa (raw, json)
Hash identifier: QaSIEHnTqWFedr+e5cLITNOUnPFb9xQjP06/fxNLptw=
Subject key identifier: 76:2E:62:DC:1A:E8:CC:90:B9:68:B6:31:0C:A2:36:9D:11:86:76:38
Certificate issuer: /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial: 01913343273EB9526C0E1F54652F17E75BAC
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/di5i3BrozJC5aLYxDKI2nRGGdjg.roa
Signing time: Thu 08 Aug 2024 18:32:04 +0000
ROA not before: Thu 08 Aug 2024 18:32:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202945
IP address blocks: 45.154.60.0/24 maxlen: 24
2a0f:b100::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:33:43:27:3e:b9:52:6c:0e:1f:54:65:2f:17:e7:5b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Validity
Not Before: Aug 8 18:32:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=762e62dc1ae8cc90b968b6310ca2369d11867638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:96:39:63:69:5a:12:4e:e3:e3:c5:69:ac:
14:27:e1:0c:39:1e:53:19:1f:7b:7e:22:99:37:ad:
19:54:5e:51:00:68:9a:4b:2c:25:74:2b:07:a0:a8:
d9:13:be:27:7c:61:dc:ac:6c:a7:38:24:b6:33:a4:
9f:cf:49:b8:a6:61:a0:5b:91:43:26:92:ac:10:85:
b3:d2:14:72:e4:9b:ae:23:8d:ef:98:f5:2a:8c:6e:
eb:ba:09:f8:f9:36:c9:b5:4c:9a:ed:42:16:85:07:
8e:17:02:5a:76:6b:d1:9d:77:21:bf:a6:ad:60:c0:
59:91:ea:ad:57:59:dc:1b:e6:05:a0:ed:53:47:73:
37:9d:8c:99:68:8f:2a:a2:11:e5:cf:61:99:46:76:
e5:76:60:fc:2c:8c:0b:83:ce:0b:64:ea:5a:8b:d0:
1a:90:52:e0:ae:3a:82:2a:cb:17:3e:b6:cc:77:1f:
5c:d4:81:dd:f2:a8:38:36:09:22:34:0a:15:c8:ec:
e4:22:aa:53:f1:07:9e:9e:b3:e7:f4:cd:25:c9:77:
8d:67:bd:3d:8f:6f:4f:e0:25:70:bd:a7:27:d3:a3:
c3:f9:3f:f2:3a:7a:cd:88:33:74:c1:fb:a8:06:cc:
c9:0a:87:01:a9:6d:02:9b:ba:86:12:89:5e:c5:97:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2E:62:DC:1A:E8:CC:90:B9:68:B6:31:0C:A2:36:9D:11:86:76:38
X509v3 Authority Key Identifier:
keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/di5i3BrozJC5aLYxDKI2nRGGdjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.60.0/24
IPv6:
2a0f:b100::/44
Signature Algorithm: sha256WithRSAEncryption
b5:0b:8d:45:65:6e:13:48:7a:d7:72:55:38:09:82:6b:1b:b0:
11:94:c0:e8:83:01:38:97:ae:2a:e4:53:80:02:9d:8f:2c:2e:
82:fb:55:49:88:75:cf:27:4b:98:a0:f5:0a:99:84:41:03:f5:
34:85:da:41:27:b4:c5:d8:dc:cb:d5:9d:64:5d:88:19:8b:d6:
03:2f:4e:7a:a7:f6:b9:20:48:a1:ea:c3:8e:f7:79:8f:8c:3e:
8c:c7:51:9f:0d:8c:e4:70:ee:2c:80:d7:f5:ae:14:66:c2:13:
62:ff:d8:8c:a4:c4:4f:9b:aa:3c:2f:06:a3:c9:15:41:96:28:
60:3d:40:9e:15:56:1c:86:4f:46:df:87:50:73:0b:52:66:e4:
db:92:59:5d:f7:50:3c:cc:8d:40:d2:08:ff:03:65:3c:4c:94:
86:17:ff:34:b3:28:06:07:10:ac:e4:80:e7:04:81:51:4d:39:
51:09:1f:a8:e6:fe:6d:3c:f3:ac:02:4a:fd:2f:3f:72:20:d3:
f0:37:b7:f5:ac:01:60:c6:44:0e:00:b8:7c:83:09:de:8d:37:
45:b5:6b:10:d6:b3:ea:dc:6c:77:85:c4:90:d3:f9:5e:27:b6:
cb:c1:18:14:45:6e:4b:0f:e0:e1:58:09:06:9e:a0:63:2d:64:
5e:fa:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:03:32 2024 by rpki-client on console-fra.rpki-client.org