Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/uaP9cGla4ZCSjpoSGpN2eujkRs0.roa
File: uaP9cGla4ZCSjpoSGpN2eujkRs0.roa (raw, json)
Hash identifier: oPHD0mcqKp3lS9WfPB60PUh2VPpAryquaNV9v895fXI=
Subject key identifier: B9:A3:FD:70:69:5A:E1:90:92:8E:9A:12:1A:93:76:7A:E8:E4:46:CD
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 0191DA5CEDBF4BD37B08E1542D7C58D4FCA8
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/uaP9cGla4ZCSjpoSGpN2eujkRs0.roa
Signing time: Tue 10 Sep 2024 05:16:48 +0000
ROA not before: Tue 10 Sep 2024 05:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60117
IP address blocks: 45.134.12.0/24 maxlen: 24
45.134.14.0/24 maxlen: 24
45.134.15.0/24 maxlen: 24
212.8.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:da:5c:ed:bf:4b:d3:7b:08:e1:54:2d:7c:58:d4:fc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Sep 10 05:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9a3fd70695ae190928e9a121a93767ae8e446cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4e:55:7f:b4:83:e1:9c:3c:0d:bb:ce:d8:54:
31:b7:65:bc:28:3c:37:5a:c7:94:7f:16:32:3d:e7:
a6:65:e5:d2:f7:ab:65:2f:f7:0f:45:f6:8a:89:72:
5a:c1:0a:f3:33:f0:25:b2:13:a1:25:f9:28:20:28:
ac:5b:fe:be:df:2e:00:33:b1:09:9b:d7:fd:75:35:
4f:4a:1a:91:0c:55:e6:f0:51:53:12:8b:19:f6:38:
bf:d7:73:d4:1a:a6:65:0d:bf:1b:2f:64:b7:1a:06:
33:2f:5a:e3:4c:0f:eb:c9:d5:64:f5:58:25:ef:5b:
1c:b3:16:a5:27:c5:b9:c7:4a:6e:3e:11:c3:99:ea:
b5:77:1e:d5:89:51:e6:3c:ac:66:ae:8b:dc:17:b9:
71:2d:dd:4e:cf:7d:0e:ec:dc:ba:4d:e5:9e:82:18:
a8:37:8d:a4:85:76:8a:39:4f:f3:23:a5:09:a5:74:
a8:8a:fd:9d:75:09:64:f7:12:d2:b8:50:df:7d:63:
4b:50:78:53:10:d6:59:3e:33:a1:7c:f5:92:f1:dd:
39:f1:62:f0:66:f8:c8:f0:6d:ee:f6:6d:08:70:bb:
35:1d:e4:f4:37:e6:66:bd:cf:e8:13:4a:50:c0:85:
bd:99:0b:2b:74:74:1a:18:f3:8c:03:39:c0:3e:d0:
ba:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A3:FD:70:69:5A:E1:90:92:8E:9A:12:1A:93:76:7A:E8:E4:46:CD
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/uaP9cGla4ZCSjpoSGpN2eujkRs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/24
45.134.14.0/23
212.8.229.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f4:ee:4a:57:f6:24:b6:e8:4d:36:16:82:61:11:68:f3:09:
87:77:50:c8:fc:cb:8e:b6:2a:d9:e0:71:7f:51:aa:0b:58:4d:
81:b9:59:ed:fd:9a:aa:5b:e0:9e:96:da:cc:c9:b7:f4:f6:06:
50:27:e1:cf:69:29:41:9f:e4:40:92:3d:27:ff:c7:a5:11:e3:
e7:5e:2f:5e:0b:d9:22:e6:d7:c9:5e:3c:3d:4f:6b:5d:42:14:
f9:76:65:9e:ca:43:67:74:d6:78:f5:e8:83:c1:84:4f:bb:e9:
79:0d:74:cb:db:50:06:04:38:a0:4c:11:4d:5d:eb:02:09:ec:
a5:b4:1d:5c:22:32:6a:7f:39:81:48:d7:2c:f0:4d:cb:24:94:
ec:f6:ca:25:2c:fd:4d:2d:95:25:63:75:8c:53:5f:66:3a:8e:
e2:2a:7e:75:57:aa:61:e0:47:b3:2d:7e:f3:59:1c:b2:bc:e4:
59:f1:9c:a6:61:01:b0:c1:55:a0:f7:d5:91:7c:25:be:69:67:
4c:b3:1e:73:d9:f3:0c:e0:55:21:6d:12:80:9b:c5:5c:97:40:
33:7a:c4:b7:d5:74:fe:7e:4a:00:cc:4a:c2:d9:b5:51:a8:2d:
cc:09:48:db:d5:2e:dd:54:b7:7c:77:e8:25:ca:d1:ce:f0:af:
c9:32:57:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:00:28 2024 by rpki-client on console-fra.rpki-client.org