Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/1-ogiMYdUwhA3NbLbzLbslTn5lvo.roa
File: 1-ogiMYdUwhA3NbLbzLbslTn5lvo.roa (raw, json)
Hash identifier: mmr83i53+H6V6akCFDy9o8e9MzuIooFMGwSh3G9uLs0=
Subject key identifier: FA:88:22:31:87:54:C2:10:37:35:B2:DB:CC:B6:EC:95:39:F9:96:FA
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 01934B82E6A51E9D097852E559558382799C
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/1-ogiMYdUwhA3NbLbzLbslTn5lvo.roa
Signing time: Wed 20 Nov 2024 21:38:10 +0000
ROA not before: Wed 20 Nov 2024 21:38:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209000
IP address blocks: 45.136.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4b:82:e6:a5:1e:9d:09:78:52:e5:59:55:83:82:79:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Nov 20 21:38:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa8822318754c2103735b2dbccb6ec9539f996fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:b7:36:c4:5f:a9:fb:a6:52:e6:fc:42:43:
23:f6:d3:62:8d:5f:10:15:85:7a:02:da:8b:7b:0e:
39:ba:29:26:be:18:09:79:78:92:ac:7b:87:fe:3b:
93:b8:ca:2f:0e:02:80:9c:4c:ad:bd:2d:89:eb:a0:
27:53:1a:f5:9f:15:96:29:a3:6b:83:f5:55:02:3f:
ba:44:7c:49:a7:9e:da:41:fe:d3:91:e7:9a:7e:f1:
1a:0d:a8:aa:3b:8d:87:05:3d:34:9f:1d:e4:34:d7:
e5:1f:97:0e:b8:c3:71:1f:fc:f9:26:c5:66:37:64:
91:ac:18:da:dc:36:ae:ac:5d:2f:0a:6e:2b:90:f4:
c4:b6:63:3d:ee:41:05:50:bd:ca:68:51:44:fb:9b:
f4:b3:d4:4e:63:55:4f:34:b0:5c:20:f5:8a:b4:af:
a3:97:8d:53:80:bc:2e:49:1c:17:b7:6b:c0:af:94:
45:33:5f:e0:24:9d:79:0d:e3:d0:e3:fa:26:d3:5e:
53:6e:52:99:72:5b:16:87:71:fe:de:7e:11:65:6e:
84:3d:d2:3b:7c:8e:81:a7:10:01:ee:c3:17:d5:bc:
fc:29:69:c1:5e:0c:48:df:79:a9:c5:93:7c:fa:83:
ee:23:14:c7:56:85:df:3e:cc:de:51:3c:8d:66:50:
a6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:88:22:31:87:54:C2:10:37:35:B2:DB:CC:B6:EC:95:39:F9:96:FA
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/1-ogiMYdUwhA3NbLbzLbslTn5lvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.55.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:37:5e:18:50:c7:9b:4a:19:d5:31:9f:3d:51:e2:ab:9c:e2:
d8:48:7b:98:34:1a:16:94:78:73:df:db:dc:0f:ff:a4:dc:40:
fa:4b:bd:73:7b:fd:bf:e1:fc:24:6c:f5:07:b0:54:d0:c9:ae:
6e:3d:f2:1b:5c:4d:cf:59:da:9d:66:c5:c6:a6:38:a8:6f:bb:
d8:68:e9:fd:70:cd:98:9f:ad:14:56:6c:d5:0d:f8:6d:a1:73:
ee:45:96:4b:6a:74:3a:38:1e:05:90:52:e4:7a:d1:43:e9:ce:
db:e3:32:58:87:7d:d8:fd:b0:39:0d:4c:72:94:ad:3c:6c:7b:
97:40:c3:dd:f4:9e:6c:9f:d4:07:32:a7:dd:fd:a8:93:fd:6b:
fb:9f:4a:87:55:85:b2:15:42:e5:02:4d:f1:3b:60:0f:75:35:
e1:05:36:cf:cb:98:49:cd:48:fa:0e:48:a0:3d:f3:07:46:34:
db:74:73:46:ef:6f:9d:8d:78:8d:78:9d:ca:5c:22:9c:f5:1c:
15:a1:4f:7a:36:aa:2a:74:1b:22:f5:6e:b2:cb:48:81:a5:f7:
56:c1:80:0d:bb:c7:13:42:6f:41:70:69:b9:17:b3:db:9c:38:
16:91:ab:3c:8a:37:fb:75:78:3e:e8:74:54:27:14:a4:54:8e:
ec:df:f3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:57 2024 by rpki-client on console-ams.rpki-client.org