Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/l4yR9EhVfUl3qdhy44u3yZbj68c.roa
File: l4yR9EhVfUl3qdhy44u3yZbj68c.roa (raw, json)
Hash identifier: k7WJopjdLC01t+BWKXyo2v6QT3D/9jFt0PnBU1nhUq4=
Subject key identifier: 97:8C:91:F4:48:55:7D:49:77:A9:D8:72:E3:8B:B7:C9:96:E3:EB:C7
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 018CCA2A1D81F813572A369F6E51E3A06C26
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/l4yR9EhVfUl3qdhy44u3yZbj68c.roa
Signing time: Tue 02 Jan 2024 12:33:26 +0000
ROA not before: Tue 02 Jan 2024 12:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197071
IP address blocks: 45.157.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:1d:81:f8:13:57:2a:36:9f:6e:51:e3:a0:6c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: Jan 2 12:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=978c91f448557d4977a9d872e38bb7c996e3ebc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:ab:32:a3:03:ae:80:b1:aa:62:0a:43:60:
e2:23:26:c5:fb:82:bd:63:7f:48:b4:d1:04:63:1f:
db:2e:9a:46:06:e9:a9:49:15:16:a2:54:67:65:d4:
3d:b1:f3:92:ba:21:78:09:f4:b1:f3:3f:93:55:62:
6a:75:45:3f:eb:91:8b:50:55:fe:5b:02:38:2f:7a:
35:16:be:bb:ea:c9:11:2b:17:de:a5:b2:c7:76:66:
c9:14:a6:30:b9:6d:e0:b9:65:94:de:f1:be:24:18:
95:23:b3:4b:86:20:a0:d9:97:43:a3:8f:41:b5:28:
e2:6e:cf:93:07:c0:44:19:e2:e6:63:8c:58:4a:14:
3d:93:8b:ab:49:c3:96:7f:7b:81:86:d4:07:37:e1:
a1:00:dc:68:bc:69:e7:c3:36:06:19:05:8b:c6:80:
4d:2a:34:b2:74:a6:09:52:0d:67:c1:58:a5:f3:70:
f0:6d:79:52:1f:3b:f0:fe:06:ae:16:fe:84:67:71:
7c:75:05:9c:09:73:cb:52:92:0e:05:2b:00:7c:ac:
81:4b:3a:cd:98:00:82:54:d0:52:8d:86:40:ea:98:
94:54:f1:79:34:85:17:cc:42:a2:30:53:e7:44:93:
07:41:a9:af:0c:80:99:8a:a1:47:69:f0:4f:c7:74:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8C:91:F4:48:55:7D:49:77:A9:D8:72:E3:8B:B7:C9:96:E3:EB:C7
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/l4yR9EhVfUl3qdhy44u3yZbj68c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.11.0/24
Signature Algorithm: sha256WithRSAEncryption
97:4d:58:81:69:e7:9c:59:90:02:ba:fb:f9:d1:7b:4a:0a:65:
43:f1:ac:df:61:43:8b:8d:3c:aa:d3:5d:1b:ae:a2:0d:eb:be:
28:a0:86:2c:ce:72:0b:43:8c:db:fd:a1:11:f3:ac:ab:f7:5a:
0e:86:c5:ce:b9:e6:61:32:40:61:39:f1:57:44:f3:34:6c:91:
4c:7a:58:86:2a:cb:88:b4:0c:3a:71:06:39:8b:1a:1c:61:67:
9b:30:9d:c4:32:c0:80:03:ed:a9:03:8b:a5:3e:39:66:de:31:
44:d3:5f:10:3c:93:fc:36:af:3d:13:a4:23:74:82:62:59:39:
be:a1:a7:1e:64:17:e3:f5:0d:dc:d0:f9:d7:b2:8e:06:ce:fc:
c2:65:b3:95:d6:fb:f7:9f:cb:4f:4a:51:c8:ef:79:5b:d3:b3:
7d:1d:b9:8c:39:1d:81:67:db:8a:f4:03:55:8f:73:18:e4:56:
cc:82:5a:4a:c9:f6:b4:cf:00:3c:c9:c3:0d:e8:31:eb:e2:2f:
d1:b4:f5:6f:dc:90:61:fb:d2:bd:4c:13:7d:f5:38:d7:0f:1c:
d1:da:a7:2c:91:37:29:66:62:c6:25:f1:eb:d8:f7:a3:bf:2e:
60:a4:d9:df:ea:0f:6b:49:6b:34:b5:7d:72:2a:ac:04:5a:46:
27:1e:f6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:42:49 2024 by rpki-client on console-fra.rpki-client.org