Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/W6yOl6slDOB1FMq9IzS5UOO5Tr8.roa
File: W6yOl6slDOB1FMq9IzS5UOO5Tr8.roa (raw, json)
Hash identifier: zYsqCBhpeX2biH8hIs/uDdIZ2YYRsLJj3yAwBTrTj+w=
Subject key identifier: 5B:AC:8E:97:AB:25:0C:E0:75:14:CA:BD:23:34:B9:50:E3:B9:4E:BF
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018CC26D54D09573B9897D81E442095ED6DA
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/W6yOl6slDOB1FMq9IzS5UOO5Tr8.roa
Signing time: Mon 01 Jan 2024 00:29:54 +0000
ROA not before: Mon 01 Jan 2024 00:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200590
IP address blocks: 45.151.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:54:d0:95:73:b9:89:7d:81:e4:42:09:5e:d6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 00:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bac8e97ab250ce07514cabd2334b950e3b94ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:96:98:93:b3:6d:3e:49:c8:c6:b7:42:d0:60:
f6:7f:23:7f:8c:7d:fa:54:62:9b:bb:19:90:90:ca:
0d:13:f6:46:81:60:bd:7b:98:01:86:ec:bc:d1:69:
68:5a:ae:59:c5:36:14:29:a7:a7:65:b6:31:e3:8b:
06:63:aa:66:8b:69:e9:cd:dc:15:fb:ca:cd:92:29:
2b:4f:fd:28:8f:2c:de:29:ad:ae:3f:d3:49:6a:2b:
4e:ba:d4:0d:cb:a8:b3:bf:7d:9c:9d:43:e3:21:52:
f2:7e:6c:90:7b:a5:e8:30:1a:29:fc:eb:0c:83:9f:
b7:bc:f5:3e:1c:02:59:70:d0:49:5f:df:21:56:ba:
64:97:ac:db:ef:ed:b6:36:16:e8:38:bd:cf:03:7e:
76:17:03:66:82:a7:3e:27:24:68:93:3f:1c:52:2d:
a4:53:69:2e:31:85:fb:29:3f:92:a1:d1:05:d0:71:
ed:86:15:c9:c4:13:44:c1:96:a3:11:08:cb:8f:d0:
87:2a:2a:9d:60:92:50:8b:77:9e:26:e4:7f:e7:93:
ec:da:8d:29:50:a8:f7:e9:19:41:26:f0:20:c5:49:
09:c7:1a:25:f2:a8:70:21:60:a6:8d:7b:45:40:66:
65:64:20:8f:1e:3d:52:da:43:4a:0e:0e:87:8a:61:
04:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AC:8E:97:AB:25:0C:E0:75:14:CA:BD:23:34:B9:50:E3:B9:4E:BF
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/W6yOl6slDOB1FMq9IzS5UOO5Tr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.139.0/24
Signature Algorithm: sha256WithRSAEncryption
43:17:75:ce:f4:69:07:c3:08:26:6c:86:60:38:8e:e6:c2:0d:
ed:f2:08:79:d5:44:27:4c:6d:48:f6:33:a5:31:37:30:7b:0f:
62:c6:b5:6a:ba:85:9b:ae:19:bd:c8:3e:65:dd:3f:27:36:c9:
b8:d1:d4:fe:9d:de:f7:47:1c:03:32:05:c9:a6:f8:3b:01:ba:
2d:44:43:64:5f:d9:b3:a7:64:87:68:5a:fa:6b:82:a8:cc:be:
2c:7e:66:fd:4a:de:c4:aa:b7:c3:4e:7e:46:e0:ac:94:9a:8b:
3a:68:d2:56:54:0a:d2:0b:5f:1f:73:a4:91:8d:ec:b3:a4:0d:
42:9f:a1:fa:fe:77:ad:b9:ee:f8:6c:3e:19:36:fc:2d:c5:88:
66:a1:58:60:79:8b:dd:2a:10:e6:3f:dc:21:dc:30:81:68:a1:
a4:cb:12:8e:a4:f6:5b:0c:dd:0a:a2:5b:ab:6a:f4:20:09:aa:
22:31:0f:09:3c:5f:3c:b5:05:1d:9e:e9:69:a2:5d:23:2a:97:
27:aa:ee:e8:e1:64:81:f1:b0:39:3a:38:2f:80:79:f8:2c:c5:
95:f0:d8:41:c4:d1:1a:a4:97:9a:d7:9b:ff:bb:19:de:36:55:
10:e8:17:59:e8:1a:16:5c:d8:5b:bf:66:56:f6:cd:9a:4a:a4:
9e:c1:ff:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:36:46 2024 by rpki-client on console-ams.rpki-client.org