Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/0A9MVlYb1tjsrNsORKk3PC9tiJE.roa
File: 0A9MVlYb1tjsrNsORKk3PC9tiJE.roa (raw, json)
Hash identifier: GczOky5lxmMlgd4wphbCnIUyt3FlaB7iH1T9vJmH8cI=
Subject key identifier: D0:0F:4C:56:56:1B:D6:D8:EC:AC:DB:0E:44:A9:37:3C:2F:6D:88:91
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 018CC5DC84B7C2790BE2CB4440825D685CA3
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/0A9MVlYb1tjsrNsORKk3PC9tiJE.roa
Signing time: Mon 01 Jan 2024 16:30:12 +0000
ROA not before: Mon 01 Jan 2024 16:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19844
IP address blocks: 45.14.114.0/24 maxlen: 24
5.183.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:84:b7:c2:79:0b:e2:cb:44:40:82:5d:68:5c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 16:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d00f4c56561bd6d8ecacdb0e44a9373c2f6d8891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:04:0c:7e:dd:0c:29:42:7e:c1:51:80:5e:d7:
ce:95:9d:fb:e0:b6:03:1f:1b:05:be:da:ea:b2:66:
6b:4a:6b:dc:92:b2:90:3a:1c:1b:4c:84:2a:57:0a:
d1:53:22:8e:5a:a4:53:c5:dc:b4:76:ed:b9:12:c6:
38:77:61:0d:30:0f:fa:fc:75:fb:ee:fb:3f:38:cc:
fc:35:11:fa:8e:18:0c:53:aa:b1:17:4a:0d:94:33:
1c:e0:85:34:00:e2:6e:b2:17:b2:d1:d2:07:bc:62:
4b:5d:15:7b:ef:e5:8b:a1:4f:72:bf:ee:88:82:db:
6f:69:72:f2:72:df:05:41:e9:51:99:d4:2d:2d:85:
f2:eb:e4:df:11:89:b9:38:bd:c8:fb:4f:66:40:89:
c4:1c:f5:1f:a1:54:1b:3d:b7:95:16:1a:28:44:86:
d4:59:b3:88:79:34:99:1e:22:e9:09:ef:1d:bd:0d:
e0:c4:8b:ce:fc:e5:14:c2:5f:c5:3a:ce:f2:2b:1d:
57:2a:72:b5:e9:70:19:df:ec:07:2a:43:7d:96:b8:
f2:44:e1:a8:10:d7:33:9a:4b:fa:5d:8b:30:d3:46:
02:37:40:15:96:b3:f6:0f:6b:67:8e:09:5c:f5:55:
a4:e8:01:fc:d3:34:3e:5c:a3:5b:93:60:a6:59:5d:
80:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0F:4C:56:56:1B:D6:D8:EC:AC:DB:0E:44:A9:37:3C:2F:6D:88:91
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/0A9MVlYb1tjsrNsORKk3PC9tiJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.78.0/24
45.14.114.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:4c:fe:0d:a9:a8:8a:7a:f3:44:73:1b:31:dc:a6:cd:36:ab:
21:f2:48:4a:7b:48:21:dc:5c:1d:72:60:c9:f6:60:b8:46:1f:
17:32:0d:9d:77:69:46:9e:dd:21:a3:4d:4e:10:f5:23:ad:4f:
79:77:a2:61:aa:98:08:f5:0e:12:20:43:26:fc:ce:6d:fc:77:
35:e8:07:3b:b8:ec:78:17:95:9e:72:dd:32:85:92:08:a9:24:
7d:43:07:e7:41:b2:d9:37:8c:62:ca:34:d9:77:1e:2d:40:3c:
8b:2e:fe:52:e6:ce:8f:7f:0d:ac:11:ea:bd:24:8f:7f:17:07:
22:56:76:20:7d:21:43:5b:60:d5:a5:bc:f0:32:12:58:42:a8:
2a:5a:dc:50:0a:58:38:e0:62:10:20:04:c9:fb:2c:f4:05:30:
47:bd:cc:2c:42:26:9a:f7:5b:c3:8c:b4:33:fa:cf:1f:74:32:
41:f0:fb:54:00:67:60:aa:bc:a6:36:86:b0:58:9e:b8:03:9f:
8b:8b:ba:1d:fc:40:0a:ee:1a:d4:bf:fd:37:cb:9e:bd:6a:2c:
97:99:bc:8b:cb:3c:80:b0:81:30:01:ff:bf:93:fd:24:63:98:
0c:b8:21:46:7a:d3:5f:6e:87:de:4c:6a:37:e2:76:04:c8:cb:
ce:99:38:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:36:05 2024 by rpki-client on console-fra.rpki-client.org