Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/YOGvghFVMgiL4YNFyP6541rUXQs.roa
File: YOGvghFVMgiL4YNFyP6541rUXQs.roa (raw, json)
Hash identifier: noiaDyeso25N2waO6qxANNwe5UbcqtdVm+khGfAck8A=
Subject key identifier: 60:E1:AF:82:11:55:32:08:8B:E1:83:45:C8:FE:B9:E3:5A:D4:5D:0B
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 018CC94AC88B21363601F06FB865C10C8C6B
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/YOGvghFVMgiL4YNFyP6541rUXQs.roa
Signing time: Tue 02 Jan 2024 08:29:30 +0000
ROA not before: Tue 02 Jan 2024 08:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142062
IP address blocks: 45.157.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:c8:8b:21:36:36:01:f0:6f:b8:65:c1:0c:8c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: Jan 2 08:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60e1af82115532088be18345c8feb9e35ad45d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:bb:7c:29:8c:68:47:ab:0e:7e:de:54:2a:
98:eb:09:7c:ad:31:5c:b8:db:45:d8:7f:4c:1f:41:
6f:ec:2a:3f:ab:8a:ab:a3:07:c1:a2:2e:8c:bf:d0:
c2:8a:88:2e:32:75:12:cc:0f:3e:73:d9:2a:39:04:
bd:7f:db:63:7e:aa:50:85:3e:94:af:2d:ed:8d:de:
bb:83:bf:8a:9a:7f:52:c9:51:61:8e:cb:4d:80:08:
c0:a8:3d:ab:4b:8f:93:46:02:5a:a9:64:15:43:be:
54:4c:57:10:a1:ea:d4:e6:29:02:60:6d:36:0c:f6:
fc:1f:c8:e9:de:4c:62:2e:6f:53:f4:ff:db:2f:2b:
6a:60:ef:3e:9c:2e:e9:c9:ff:7e:f1:3b:5a:88:07:
4f:36:8d:ff:99:43:84:1d:cd:3d:f4:02:24:f6:73:
cb:a1:08:70:65:34:e7:d4:d4:35:17:bb:40:60:9b:
62:7f:56:be:30:e8:5e:d3:7d:95:d9:26:4b:40:06:
25:40:d0:d4:cf:da:64:1c:eb:ec:f1:ca:7d:bf:d2:
a5:1c:5d:e8:6b:26:dc:b8:53:fb:67:8f:f2:3c:5c:
18:93:8f:f5:35:4e:da:2f:e1:12:0d:44:af:e2:51:
db:d1:5f:f9:f7:5b:d4:68:cf:bc:a4:6a:b4:ac:39:
f0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E1:AF:82:11:55:32:08:8B:E1:83:45:C8:FE:B9:E3:5A:D4:5D:0B
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/YOGvghFVMgiL4YNFyP6541rUXQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.69.0/24
Signature Algorithm: sha256WithRSAEncryption
83:a5:83:b9:96:65:08:ee:5e:ca:cb:08:4a:ae:27:9c:56:42:
f0:b3:b6:43:1e:ac:7a:ee:fa:95:f5:4b:30:fe:9d:a6:2a:00:
08:2b:15:c4:f3:b1:90:17:4d:cd:57:36:8a:31:fe:a3:b2:0f:
4d:12:a0:7d:4a:ae:7f:1b:c6:9a:a1:4d:60:b4:d6:87:03:00:
21:5c:7d:d4:a2:7c:ab:46:a5:2b:27:28:b7:04:36:58:a6:22:
9e:73:2a:12:60:14:f0:78:b0:98:84:4f:eb:9f:d2:02:05:92:
08:8f:f2:b8:de:18:c1:76:44:32:fa:c1:6b:44:76:41:bb:3f:
d8:d9:a1:c9:6a:82:0c:00:aa:fd:c3:fb:90:f3:dd:b0:33:7b:
c3:17:62:d0:0f:de:19:48:7d:39:43:02:6b:dd:d4:ee:14:58:
9d:86:0f:35:9e:ce:f6:bd:d6:6c:ea:13:8c:93:7e:dc:7a:52:
e3:31:c0:99:fe:5b:f5:b5:59:07:dd:2e:e1:6d:81:7d:4b:08:
07:67:3b:09:69:bd:c2:57:60:6c:b6:62:d6:d4:8f:73:28:a5:
6d:1e:0f:52:83:e5:9d:ba:50:82:45:d6:56:b2:01:46:12:0f:
41:b3:81:44:2f:28:22:ea:b8:02:0b:28:34:41:00:eb:d1:cf:
1f:2c:4e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 13:13:31 2024 by rpki-client on console-fra.rpki-client.org