Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/CDpASLUSF12iDi1V_gJWV09-rmU.roa
File: CDpASLUSF12iDi1V_gJWV09-rmU.roa (raw, json)
Hash identifier: Tudx5wgMXO9j0be2zrywafxMyjlhgQHvGmqYkd4yYFg=
Subject key identifier: 08:3A:40:48:B5:12:17:5D:A2:0E:2D:55:FE:02:56:57:4F:7E:AE:65
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01909204501F5C9ECE7B36F51A3DCCDC92C3
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/CDpASLUSF12iDi1V_gJWV09-rmU.roa
Signing time: Mon 08 Jul 2024 11:04:34 +0000
ROA not before: Mon 08 Jul 2024 11:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215026
IP address blocks: 45.89.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:92:04:50:1f:5c:9e:ce:7b:36:f5:1a:3d:cc:dc:92:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 8 11:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=083a4048b512175da20e2d55fe0256574f7eae65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:e4:de:a8:d9:76:b2:80:59:52:79:c7:8b:
a5:58:12:bb:9a:ec:dd:cd:3e:eb:ed:0d:a8:61:18:
36:c1:ef:32:e0:5c:15:9c:b3:9d:d1:2a:26:b3:4b:
52:54:75:0e:b5:4a:91:86:52:5d:05:8d:dc:a4:19:
c1:a9:db:7d:d2:1f:ae:35:4d:1a:f0:70:ae:58:15:
01:e6:5c:e4:03:3b:04:8b:e4:7f:20:79:da:89:ac:
9f:cc:fe:ba:0d:68:ab:12:f6:4c:7b:df:66:c6:b3:
18:ba:9e:fd:e6:ba:12:7c:a7:23:4a:9f:22:94:17:
71:e4:0b:1f:4e:5e:0f:0a:66:71:30:f7:2f:ad:52:
45:f4:57:a1:b6:a2:1d:9d:f8:34:04:24:e0:44:80:
d7:34:9d:87:fd:e4:a3:83:96:8d:20:bd:d5:40:85:
f1:f9:a8:1c:99:5e:e7:02:84:38:b8:71:e0:bf:4b:
34:cf:8d:40:3d:f9:87:0a:ab:7a:07:bb:1f:43:16:
91:f0:8d:1b:5c:27:52:dd:52:4a:13:25:00:12:3f:
92:08:d1:fa:2b:e8:e9:8c:16:76:ae:28:d8:93:a5:
df:77:4d:40:39:cd:f7:17:67:d8:ff:cc:6c:ac:14:
ec:ee:1f:00:ba:5b:c8:c0:ba:ea:30:0c:3d:c8:c6:
4a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3A:40:48:B5:12:17:5D:A2:0E:2D:55:FE:02:56:57:4F:7E:AE:65
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/CDpASLUSF12iDi1V_gJWV09-rmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.99.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:3c:e0:5c:7c:0a:d3:2e:a9:00:e3:44:4d:4b:8d:f2:b8:c6:
db:95:d9:a6:d6:16:14:8e:56:21:f1:db:73:2a:60:ce:73:3d:
c2:d4:74:92:09:94:06:73:76:47:62:7b:2e:3e:68:2a:52:aa:
6b:b9:12:87:a4:09:90:f9:72:b2:f2:b1:90:2c:d2:a5:db:19:
54:a0:b7:84:13:40:e4:f8:ed:45:74:a9:ac:15:b3:09:55:6d:
14:b5:49:17:cd:7b:a0:c3:57:d5:e3:24:95:ea:d3:a7:ba:a1:
f3:1d:6b:54:ad:b8:23:1f:49:26:27:0a:24:a1:f0:27:c6:f5:
ed:d5:9f:30:91:f8:36:64:c2:4e:15:b1:79:1e:ab:7a:ac:a3:
f1:17:b5:7a:cf:81:35:f4:84:f3:01:96:93:21:98:72:7d:1b:
b7:fa:d6:9f:69:05:97:be:80:75:5f:a4:13:fa:46:67:98:74:
d8:08:de:9e:08:92:3f:df:e8:e4:1d:1d:3f:97:31:b1:0e:37:
25:24:20:e5:0c:09:e4:bf:de:93:3e:d0:40:c3:31:b7:8d:36:
cc:c9:45:33:b7:79:63:63:9e:58:28:7b:f9:f2:d0:fa:d1:0b:
b7:00:93:af:ca:b1:03:54:47:cb:73:5c:47:2f:eb:3d:69:47:
30:d8:b7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:04:58 2024 by rpki-client on console-ams.rpki-client.org