Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/bF5_MTGNdJ_m6_ewsUGd4IWcLuc.roa
File: bF5_MTGNdJ_m6_ewsUGd4IWcLuc.roa (raw, json)
Hash identifier: YHOwpfPyWqdXawaDo1kGaKy7z61QAPmQtsKHw2iHkPM=
Subject key identifier: 6C:5E:7F:31:31:8D:74:9F:E6:EB:F7:B0:B1:41:9D:E0:85:9C:2E:E7
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01929E3578B8C876BAB0190E2B7F8CB82490
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/bF5_MTGNdJ_m6_ewsUGd4IWcLuc.roa
Signing time: Fri 18 Oct 2024 05:59:17 +0000
ROA not before: Fri 18 Oct 2024 05:59:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36352
IP address blocks: 45.95.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9e:35:78:b8:c8:76:ba:b0:19:0e:2b:7f:8c:b8:24:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Oct 18 05:59:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c5e7f31318d749fe6ebf7b0b1419de0859c2ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:7f:a1:a3:95:7d:16:12:9b:8b:14:a6:3b:
d3:10:1d:4c:fb:3b:b1:d0:d7:7a:d2:3d:74:f3:8d:
b0:cd:79:25:ee:97:b3:44:75:69:d4:71:b6:ad:ac:
ec:3f:05:ed:60:90:e4:f4:b2:22:4e:64:24:61:b9:
90:e9:72:a3:af:a6:6a:31:b1:1d:c0:2d:1a:c5:ca:
10:8c:ba:0e:3c:ca:01:5c:25:2a:2c:e1:9d:7f:c9:
16:f8:17:13:e2:fc:32:46:3a:a7:98:a8:9e:25:25:
b8:cd:4e:47:9d:83:7c:ed:d9:2c:cc:38:06:6a:c9:
ba:aa:4f:3f:3f:40:4f:2d:aa:78:67:5a:ea:6d:00:
4f:34:df:c5:3b:b4:72:1b:78:bf:6a:d2:28:55:70:
cf:d0:f0:76:2c:30:90:fb:44:fa:b9:2e:44:cd:9a:
3a:bd:8d:87:82:db:46:05:8e:46:8b:b6:e9:51:82:
23:7f:5d:ad:34:2d:1d:e0:89:45:63:a6:14:3f:2b:
5a:c4:6a:9a:f1:04:64:66:d7:d7:5e:b6:3f:2f:40:
47:04:07:63:d4:18:bc:98:f8:a8:dd:50:e5:7c:1f:
60:42:84:31:97:87:c6:ef:d4:b1:60:45:5b:b3:0e:
54:b5:94:15:ed:9e:9d:be:91:59:7f:d2:6c:17:04:
ac:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5E:7F:31:31:8D:74:9F:E6:EB:F7:B0:B1:41:9D:E0:85:9C:2E:E7
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/bF5_MTGNdJ_m6_ewsUGd4IWcLuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.186.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e0:ef:40:87:61:2d:b0:b8:ce:86:0a:7e:40:99:bb:a9:f7:
d0:5f:81:13:80:6b:70:1f:84:de:2a:86:9c:fc:09:87:96:c3:
59:96:c3:ee:d4:0b:94:95:98:ce:eb:63:be:b1:7e:c4:30:77:
c5:b8:f9:a8:44:60:0e:ba:b3:e8:85:3d:dd:cd:78:dc:93:74:
05:7e:c5:6e:e5:8a:a8:0f:2c:ae:af:1f:60:68:bd:c7:2d:b0:
e6:07:3e:7e:43:3f:6d:9e:38:b5:9a:69:a5:5f:59:25:40:09:
07:ab:87:83:3a:2b:33:c4:d0:36:3a:15:3c:5d:f0:6a:3e:af:
fe:78:c6:ad:ce:c1:74:09:b5:6f:fb:be:69:6c:a7:9c:45:8e:
83:a1:bb:bc:ce:c4:9f:5b:d2:b3:dd:63:8b:08:bb:a7:63:4c:
87:5d:d3:5b:73:0e:c7:68:31:66:9a:3e:4c:41:8a:95:2b:b2:
8c:85:5f:76:57:1c:c9:a9:37:7a:0b:07:f3:6b:99:56:77:6d:
99:b6:8f:31:38:a4:f6:b3:3b:21:9a:11:e9:0d:fe:b0:bc:ea:
2d:42:b8:b3:0b:2f:22:12:05:1e:e5:b5:53:6d:33:f8:ad:f1:
ca:1c:66:95:59:a9:f4:c2:c4:5c:f6:7a:6b:d6:65:ed:34:6e:
47:79:66:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:38:39 2024 by rpki-client on console-fra.rpki-client.org