Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/kWM5fjcZcvreJRsxT-BC4b4mnFk.roa
File: kWM5fjcZcvreJRsxT-BC4b4mnFk.roa (raw, json)
Hash identifier: FX3PX03gEweW6VzVjb0HllAn0OCzaRqbAPAW9/UgvHo=
Subject key identifier: 91:63:39:7E:37:19:72:FA:DE:25:1B:31:4F:E0:42:E1:BE:26:9C:59
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 018CC492E2B4D4551DA1C534D5FBBB913496
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/kWM5fjcZcvreJRsxT-BC4b4mnFk.roa
Signing time: Mon 01 Jan 2024 10:30:09 +0000
ROA not before: Mon 01 Jan 2024 10:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134351
IP address blocks: 45.147.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e2:b4:d4:55:1d:a1:c5:34:d5:fb:bb:91:34:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jan 1 10:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9163397e371972fade251b314fe042e1be269c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:18:fa:88:dd:34:8d:d1:05:90:6e:93:58:
9a:19:4e:15:b8:54:25:69:fb:26:6a:0d:07:ba:ba:
87:e6:5b:e0:84:5d:af:90:12:68:f5:d9:a0:f2:9b:
15:62:99:de:bc:a4:d8:c1:51:32:f7:4e:ba:48:42:
3e:a6:77:5c:75:45:b4:13:05:60:4c:e6:84:8a:68:
ed:95:60:a0:13:ff:eb:71:7e:e9:a6:ed:f3:bc:6f:
67:ef:71:d1:8e:92:ec:fb:21:3c:2a:d9:4e:41:c3:
9b:29:48:cc:b5:9f:8d:f3:41:ed:fe:3e:6a:c0:af:
28:36:7f:dc:b2:a9:bd:71:76:51:bc:ee:68:64:55:
97:37:62:5f:cf:dd:e0:9c:14:b5:c0:db:39:63:4a:
7d:05:56:ab:03:c1:36:10:97:ad:71:b0:d9:27:5b:
79:83:9c:62:8d:47:10:d5:3b:86:90:44:da:85:56:
f9:dc:69:96:f0:72:76:a9:9b:86:44:ae:bb:79:2d:
9f:4e:b9:78:8c:18:2b:91:14:5f:63:96:57:05:91:
d9:16:67:31:0f:dd:0c:ff:a8:94:8a:52:7e:d9:86:
4d:f6:2a:59:08:ca:fb:15:84:6e:70:d4:3d:49:e6:
97:0f:93:86:26:c4:78:e1:e6:89:f8:c8:de:47:3e:
3a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:63:39:7E:37:19:72:FA:DE:25:1B:31:4F:E0:42:E1:BE:26:9C:59
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/kWM5fjcZcvreJRsxT-BC4b4mnFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.60.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e5:a5:ce:36:5e:73:f9:8b:49:bd:22:15:2e:11:6c:10:29:
7e:37:b3:b9:5d:d6:1e:39:ec:0f:74:1d:f7:c3:b8:d5:ca:c3:
02:d7:6e:05:2c:25:ad:c5:dc:02:68:cb:7a:20:2e:c3:0e:3e:
69:41:8c:ec:c4:85:fc:33:0c:e1:75:0b:7f:6e:94:36:9f:9d:
51:3e:65:7e:89:47:f7:4f:8e:09:b3:3f:ce:b7:db:dc:b1:75:
a1:8d:a8:cc:e2:be:91:ba:e1:e5:be:c9:12:28:f5:d6:e5:8b:
0c:ba:ff:62:a0:13:4f:dd:69:15:75:b9:e3:b8:26:8a:9e:c4:
6f:63:c5:55:c2:6a:38:c5:94:92:5b:34:b5:e4:3c:27:04:a6:
b5:ca:1f:95:b3:9a:da:21:f2:71:d9:40:aa:e0:52:34:68:8a:
f4:96:30:9a:47:60:93:15:ae:78:a9:23:ce:06:2f:1b:33:37:
b1:66:4e:96:7e:ba:a2:bb:a9:1f:02:59:bf:5d:ae:8d:15:1e:
47:8b:a6:5a:64:f8:7f:24:28:12:52:a6:ee:ac:33:40:38:99:
ca:d5:fe:a0:5d:cd:25:c3:3c:e1:20:13:3e:15:4b:36:94:8a:
41:7d:8d:65:42:65:57:59:f5:c6:e4:9c:38:36:5c:2b:1c:a1:
90:0e:09:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 14:31:04 2024 by rpki-client on console-fra.rpki-client.org