Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/9sFpZZeHPWJjk7j_PpyzqlazOgM.roa
File: 9sFpZZeHPWJjk7j_PpyzqlazOgM.roa (raw, json)
Hash identifier: LeuTUDT24w0aVn77L745LMQntLZrYP9aebWqRYIDbXk=
Subject key identifier: F6:C1:69:65:97:87:3D:62:63:93:B8:FF:3E:9C:B3:AA:56:B3:3A:03
Certificate issuer: /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial: 018CC794286F6B893A8CBC2E65D7E743BDE4
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/9sFpZZeHPWJjk7j_PpyzqlazOgM.roa
Signing time: Tue 02 Jan 2024 00:30:24 +0000
ROA not before: Tue 02 Jan 2024 00:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205953
IP address blocks: 45.159.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:28:6f:6b:89:3a:8c:bc:2e:65:d7:e7:43:bd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
Validity
Not Before: Jan 2 00:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6c1696597873d626393b8ff3e9cb3aa56b33a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a8:89:09:d0:bf:25:23:ca:a9:00:15:75:e9:
0b:70:60:56:0b:a2:70:3c:4c:f3:48:09:8d:dd:66:
b9:cb:d4:43:5b:b3:a9:28:ee:bb:61:fd:0d:60:c0:
da:99:14:f5:bd:4a:84:c4:b9:e6:d6:d8:6a:78:09:
4c:d5:61:eb:26:b5:04:16:cb:c9:80:3a:c1:43:65:
2f:a5:de:5d:63:cf:3f:b5:1f:23:db:8b:ec:bb:47:
ae:8b:ce:d2:ac:3f:f3:5a:ff:34:5f:e5:b6:50:fe:
8b:57:86:a5:08:dd:8d:46:11:fe:93:60:b0:12:eb:
41:39:32:e0:3e:4a:45:5f:41:ba:b9:1d:89:74:39:
08:54:9a:c2:a8:4c:d7:14:2d:a7:94:1f:c4:82:a0:
92:f2:d8:5e:8c:63:a7:88:46:4b:ff:f9:df:75:e6:
f9:9a:3c:47:6f:d3:ac:95:b1:c1:4e:54:75:e9:bd:
7f:18:5f:ea:e8:ae:6e:2b:07:ef:ec:f4:bb:d3:4d:
a8:72:3d:4f:26:7f:4f:65:5c:86:8f:f6:df:52:41:
53:23:01:f4:46:08:69:01:07:38:01:a0:50:25:76:
41:27:29:5a:f8:58:8c:49:43:bc:ef:64:6b:64:16:
da:f0:b2:1b:e4:86:58:b7:67:d2:dc:39:a5:c3:c6:
b8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C1:69:65:97:87:3D:62:63:93:B8:FF:3E:9C:B3:AA:56:B3:3A:03
X509v3 Authority Key Identifier:
keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/9sFpZZeHPWJjk7j_PpyzqlazOgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.30.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:5c:1a:65:4a:b8:8b:cd:79:af:1d:a2:b1:6b:44:05:b5:fe:
01:96:ce:3d:44:78:5d:dc:cb:21:b5:d4:90:5d:d2:e6:72:8f:
fe:74:f5:1e:0d:37:43:d3:d1:8c:94:a1:a5:e4:0f:27:c0:85:
a2:5d:6b:62:60:54:55:2b:15:f5:70:fc:7b:42:16:a4:bb:d6:
0f:c8:b9:33:ca:7f:73:e1:fe:18:a7:84:b3:d1:38:ae:26:e3:
63:96:9e:f9:83:d6:bc:36:db:62:4c:3d:0e:d3:14:a8:ca:f9:
7e:1c:33:9d:a5:1c:94:74:84:46:62:46:0a:39:20:02:1a:a4:
fc:44:14:5d:cd:d5:5c:7b:cb:56:95:32:3f:d9:d3:7e:55:af:
74:cb:68:5d:15:95:fe:46:59:a6:93:12:32:8c:49:57:40:0e:
3b:03:42:ba:8a:b6:e5:62:cf:ed:ec:46:ca:da:e9:73:ef:a0:
59:39:1a:63:ce:df:82:52:ff:5f:7a:74:36:3e:eb:f5:40:e7:
b9:d4:c2:58:21:02:f1:df:43:c7:bc:ac:e3:2b:33:c4:ce:00:
55:e5:5b:2d:f8:09:21:38:8b:8c:4d:a4:36:ea:dd:df:60:b6:
1a:77:e4:5d:c2:8a:ef:4f:b9:4c:99:a6:41:2e:45:28:41:49:
1f:94:28:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:30:10 2024 by rpki-client on console-ams.rpki-client.org