Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/Envcaaxf8ZNMwzSRpoY5rwwvHbA.roa
File: Envcaaxf8ZNMwzSRpoY5rwwvHbA.roa (raw, json)
Hash identifier: 6OYlONBjINVI4bG+Xt2TPvOdDuT3Wul31RbR0suQNhY=
Subject key identifier: 12:7B:DC:69:AC:5F:F1:93:4C:C3:34:91:A6:86:39:AF:0C:2F:1D:B0
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 019053C0FB339DDF7C1D5EF96D6BBB1FFD2D
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/Envcaaxf8ZNMwzSRpoY5rwwvHbA.roa
Signing time: Wed 26 Jun 2024 08:54:34 +0000
ROA not before: Wed 26 Jun 2024 08:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212335
IP address blocks: 45.11.154.0/24 maxlen: 24
45.147.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:c0:fb:33:9d:df:7c:1d:5e:f9:6d:6b:bb:1f:fd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jun 26 08:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=127bdc69ac5ff1934cc33491a68639af0c2f1db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e7:c3:61:e8:b3:6a:ec:76:1d:75:99:63:13:
30:d1:a7:98:31:d5:30:ba:97:a0:69:fa:58:ef:59:
68:d2:3b:f0:a1:55:4a:a8:83:d6:a7:20:9a:01:d2:
ce:50:48:fa:20:59:f9:a8:1b:36:60:7b:ee:d8:da:
b7:be:e1:66:dc:da:9a:0f:42:96:d0:0e:59:2e:a2:
df:96:1b:47:dc:a4:a7:c0:fb:ca:dc:d0:2e:e7:44:
f7:70:ab:72:00:31:de:45:0c:d5:57:34:c8:a5:c3:
2f:05:d1:2f:e3:47:c3:aa:ae:68:1f:b7:77:99:b1:
6e:4e:af:77:6b:52:ac:10:67:53:a5:9d:7a:b2:aa:
15:05:29:e4:0d:20:2b:1c:f7:87:14:b8:0a:6b:ce:
1b:08:5d:f7:d5:5a:c3:2e:b5:66:08:f4:73:6f:07:
42:cd:a4:85:c1:2e:6d:4e:9c:91:ed:79:90:49:8a:
e5:90:76:b6:75:1f:bf:ba:8f:22:d0:6d:75:75:95:
53:b3:e2:33:3e:be:32:d6:6f:fe:0a:0a:15:0e:b1:
b1:c2:0a:59:69:4d:eb:69:37:8b:8a:38:9d:12:e3:
b3:68:6b:fe:f7:d7:3c:f3:1f:16:ed:bd:eb:55:34:
fc:0e:11:a1:90:99:66:fc:50:88:0e:34:8e:d7:8f:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7B:DC:69:AC:5F:F1:93:4C:C3:34:91:A6:86:39:AF:0C:2F:1D:B0
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/Envcaaxf8ZNMwzSRpoY5rwwvHbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.154.0/24
45.147.152.0/24
Signature Algorithm: sha256WithRSAEncryption
77:33:58:b1:dc:b7:87:ee:01:01:03:26:cb:30:6a:86:1d:99:
3d:82:ef:c3:da:d4:73:0c:05:99:09:a1:86:80:e7:5f:71:2d:
5c:70:27:fc:a9:e0:e7:19:7c:3f:16:4f:97:c1:93:dc:a2:74:
f3:68:f3:ee:44:c5:72:1a:5f:8d:b3:03:49:a0:51:b8:82:e5:
9f:c0:5f:1f:08:49:d5:52:df:a6:53:9e:c3:0a:d1:0e:ca:5a:
29:91:93:56:31:a7:80:06:87:0c:a7:41:7e:86:bb:26:96:0b:
2f:15:53:d1:15:14:98:f3:8e:b7:19:13:bd:09:6c:80:6e:1c:
5f:91:7d:29:73:f9:a4:91:a3:30:5d:f6:49:b4:f5:ce:ab:16:
b5:11:db:27:52:48:be:bd:3b:4b:40:d2:d4:96:08:72:dd:e0:
9d:e3:ee:88:9f:7c:b6:2f:11:2d:cc:64:fa:54:40:fd:08:a0:
00:b7:03:89:54:af:b7:56:73:15:34:e9:14:ae:c5:2e:30:31:
38:a1:74:bc:8b:c8:a9:75:b4:85:7e:cc:88:66:6a:c5:ce:cf:
80:93:eb:4f:34:44:4b:eb:77:40:23:f6:93:8e:67:ee:5d:b7:
20:80:b9:e0:00:d8:88:96:16:8a:53:a0:62:60:6e:e9:ce:b5:
83:8b:59:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:56:04 2024 by rpki-client on console-ams.rpki-client.org