Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/qZC0jzAsgmrLnQKRtGOthLIyu9Y.roa
File: qZC0jzAsgmrLnQKRtGOthLIyu9Y.roa (raw, json)
Hash identifier: d52sKiNvD93K83/s6g7XGP7/wYZqDR8/R2lgMATKXXg=
Subject key identifier: A9:90:B4:8F:30:2C:82:6A:CB:9D:02:91:B4:63:AD:84:B2:32:BB:D6
Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial: 018CC500579835084BD125CB03801C12A7B3
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/qZC0jzAsgmrLnQKRtGOthLIyu9Y.roa
Signing time: Mon 01 Jan 2024 12:29:43 +0000
ROA not before: Mon 01 Jan 2024 12:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208131
IP address blocks: 45.157.151.0/24 maxlen: 24
45.157.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:57:98:35:08:4b:d1:25:cb:03:80:1c:12:a7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Validity
Not Before: Jan 1 12:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a990b48f302c826acb9d0291b463ad84b232bbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:c2:cb:49:48:e5:dd:70:4c:ae:e7:d1:9f:
b6:2c:22:d5:07:fd:31:c2:e5:b5:a6:40:27:4e:9e:
4b:43:5a:73:06:2a:a4:cc:ec:ca:07:2a:c0:5b:d6:
e9:0a:d0:86:0a:ab:0b:c7:8e:e9:99:1b:e9:4c:61:
d8:d7:7e:2c:e7:74:c9:b0:65:bd:29:ab:07:9d:ff:
4a:91:c2:df:11:a6:d8:6f:08:b7:74:51:0c:46:50:
69:e1:66:f1:f3:6c:f2:85:f9:c8:80:56:d5:6a:57:
4b:94:fe:92:d0:5e:e9:ef:f2:54:44:e9:f2:8b:b2:
b8:80:d2:51:bf:3e:8f:ee:0f:58:11:5a:cd:2a:1c:
d7:07:0b:ad:4a:06:3b:ef:8f:f5:09:4d:54:60:7f:
d3:0c:e0:1c:3b:64:84:ea:7f:b4:08:17:72:9a:cb:
7f:d2:54:69:df:14:0b:dd:69:0c:05:9c:a1:cb:2f:
5b:a4:58:41:af:6a:fc:cc:76:00:f6:8e:bd:83:df:
76:16:de:dd:a7:23:c4:e6:ec:27:eb:7e:84:6c:ab:
88:4a:23:43:68:b1:24:3a:9b:68:da:62:ce:27:03:
0e:4c:4e:06:8a:f1:a4:02:84:4e:05:fd:63:d3:a0:
6d:e6:90:aa:98:c2:c7:89:38:58:1f:94:af:27:d1:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:90:B4:8F:30:2C:82:6A:CB:9D:02:91:B4:63:AD:84:B2:32:BB:D6
X509v3 Authority Key Identifier:
keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/qZC0jzAsgmrLnQKRtGOthLIyu9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.150.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:d1:e1:93:68:9c:50:60:4e:08:0c:3a:a8:85:35:2a:c6:15:
4e:56:71:04:26:64:2f:ca:76:1c:7b:d5:10:0d:95:ec:15:68:
71:ab:8c:c9:58:0f:1e:7b:9c:04:6f:23:30:2a:d3:f0:5f:9a:
62:db:45:33:71:07:be:fa:8e:a3:63:40:7d:82:77:c1:ec:30:
2a:d1:e4:6d:fa:04:b6:23:eb:8d:d0:fe:d1:78:34:61:42:f5:
0d:ba:a8:0a:6a:8b:3a:22:ad:c9:26:e5:a4:9a:45:aa:c1:03:
5d:20:80:31:21:fc:98:51:99:ed:7d:76:0b:54:f1:2a:5b:b5:
24:04:73:3f:df:b9:00:13:9d:9b:71:a7:fa:57:61:68:cf:da:
92:f0:99:9f:52:5e:5c:fa:cc:9c:9e:f5:bd:6b:cf:50:64:04:
de:43:e2:f3:cb:a2:75:03:40:fa:7f:0c:54:d2:ef:48:79:31:
8c:de:02:6e:83:da:37:95:3b:47:3e:67:58:bb:6f:fc:ef:e8:
a1:c0:f5:7f:37:24:b3:a4:15:37:43:fc:14:30:dd:70:9f:19:
a7:5e:b0:54:1c:fc:76:b9:f7:fd:ed:1b:b3:ce:4d:7c:8e:c7:
c4:2c:09:63:c5:e1:35:5c:52:53:1e:b0:84:91:d9:88:d9:c0:
52:05:5b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:46:00 2024 by rpki-client on console-fra.rpki-client.org