Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1yGlOIfeuvAeE2PYqo9JLydggBg.roa
File: 1yGlOIfeuvAeE2PYqo9JLydggBg.roa (raw, json)
Hash identifier: qJsyyx88XLwQrpOu0kDPuuJSh/in24Wr9bzemyrbO3I=
Subject key identifier: D7:21:A5:38:87:DE:BA:F0:1E:13:63:D8:AA:8F:49:2F:27:60:80:18
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE8377FF1D6AD571669EBA759F166C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1yGlOIfeuvAeE2PYqo9JLydggBg.roa
Signing time: Tue 02 Jan 2024 06:31:14 +0000
ROA not before: Tue 02 Jan 2024 06:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44547
IP address blocks: 45.9.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:83:77:ff:1d:6a:d5:71:66:9e:ba:75:9f:16:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d721a53887debaf01e1363d8aa8f492f27608018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:a5:f9:25:2c:63:be:64:20:7f:1a:d9:c6:
ea:4a:36:2f:27:be:f3:2a:71:17:e0:1e:17:fa:28:
0c:75:11:a2:07:e0:3a:7b:bc:11:89:98:1e:4e:f8:
45:2d:cc:a7:dc:fd:43:7e:6d:4c:2a:4e:77:57:68:
23:d9:84:ae:67:c5:d1:2c:79:b8:02:12:78:b0:ab:
fa:08:a0:26:b5:a3:94:7b:7c:4e:bf:4c:26:b3:d2:
26:20:be:d4:3f:26:4c:5e:89:d5:01:cc:9a:0a:c3:
cb:d9:0e:44:07:89:a1:a6:cb:3c:1c:c7:27:d4:b3:
eb:57:97:ad:0e:66:6e:d3:39:0a:c0:68:3a:15:19:
8a:42:fe:be:64:26:7c:b6:fd:e3:1c:ba:66:7a:64:
44:40:00:24:d3:77:98:f2:12:7a:43:3c:7d:89:08:
1f:b2:96:e0:61:9c:5a:33:55:58:26:04:df:23:0c:
f5:8a:78:79:3d:e8:b6:47:f9:f3:71:67:57:28:20:
e9:58:87:e0:02:2c:2a:21:bd:f4:31:d3:51:d1:3f:
21:91:ec:02:88:bb:db:d5:4a:68:86:70:b3:18:4f:
c4:6a:09:c2:b3:ee:ef:dc:f2:21:75:59:2a:1f:fa:
c4:10:60:61:eb:b0:58:0e:9d:c3:a6:1a:98:5d:14:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:21:A5:38:87:DE:BA:F0:1E:13:63:D8:AA:8F:49:2F:27:60:80:18
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1yGlOIfeuvAeE2PYqo9JLydggBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.5.0/24
Signature Algorithm: sha256WithRSAEncryption
be:26:4c:61:bc:6e:8e:6b:af:3e:e6:d5:81:6f:74:eb:52:33:
94:c6:97:c1:cd:f9:51:c9:e7:3f:ae:c0:dd:b3:e9:13:cf:fe:
db:c3:bb:30:af:df:0e:a3:4c:b4:5f:85:de:f1:c2:db:e4:52:
ce:53:ed:65:34:8f:44:76:3f:65:d8:e5:fc:fa:56:60:75:97:
8e:0f:63:b8:81:7b:d1:23:d3:83:2a:76:d2:5e:ea:f0:ce:07:
61:ea:38:0b:c7:f7:c5:2e:48:6c:33:0e:19:e1:0c:3b:97:0d:
b7:52:11:dd:ed:79:87:c7:11:5b:1b:0b:e6:1f:8c:c1:a8:cd:
bd:a2:af:20:5b:c8:8a:6e:ef:1c:bb:2e:31:8b:db:8d:b7:a6:
6a:18:7d:2b:34:64:6c:85:24:7c:3f:b3:03:b1:c4:7a:0d:2b:
4b:1c:d8:e9:14:40:65:81:a1:50:a9:4d:69:0c:69:9a:a5:cc:
3e:68:1c:85:b4:2d:60:37:9c:68:54:24:82:a8:82:9d:00:00:
2e:25:9f:e9:9f:69:77:3e:99:fe:76:07:9c:6a:ad:b6:eb:13:
4d:eb:3f:29:43:fc:24:49:11:0f:83:7b:7c:78:77:da:2f:23:
ed:76:f9:5f:dd:d2:14:0c:01:30:d3:ea:25:65:3c:b1:cb:d4:
4b:cc:e5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 23:56:26 2024 by rpki-client on console-fra.rpki-client.org