Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/rEWOroLYcpb0MGyptN_yVBoqVIM.roa
File: rEWOroLYcpb0MGyptN_yVBoqVIM.roa (raw, json)
Hash identifier: pONzU8KuT3psx/aPta7eORedpMjnt4/OVcZivbptOSY=
Subject key identifier: AC:45:8E:AE:82:D8:72:96:F4:30:6C:A9:B4:DF:F2:54:1A:2A:54:83
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 018CC64B11BBB68DD03D68CB0465A66615FD
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/rEWOroLYcpb0MGyptN_yVBoqVIM.roa
Signing time: Mon 01 Jan 2024 18:30:57 +0000
ROA not before: Mon 01 Jan 2024 18:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 553
IP address blocks: 134.108.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:11:bb:b6:8d:d0:3d:68:cb:04:65:a6:66:15:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Jan 1 18:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac458eae82d87296f4306ca9b4dff2541a2a5483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:de:1f:06:77:ce:c0:5c:91:b3:5d:4b:07:
d2:85:5f:88:4c:57:8f:49:01:f9:58:2b:fd:ff:e7:
b8:7a:f5:86:67:38:b4:93:fe:c5:f0:2e:e3:15:35:
c6:63:4c:93:bd:80:07:7e:88:64:4a:10:7c:1c:8e:
82:b7:d7:0d:9f:07:04:4a:81:4a:92:17:88:78:5c:
e8:da:4d:d7:1c:15:aa:3a:12:c5:c4:a3:78:82:83:
ce:15:60:ed:03:12:78:64:87:05:30:ec:d2:92:ad:
29:2a:9b:5d:36:92:9d:e9:39:65:e2:fe:d9:b0:b9:
a7:a1:24:14:84:42:58:a3:d0:36:c2:50:fa:d0:a3:
c4:21:a6:c9:86:78:66:22:b8:8c:af:7d:e0:f0:89:
7e:27:a8:84:55:ac:c2:35:56:0b:ed:7d:63:39:e8:
49:36:b8:21:0b:30:4c:2c:97:a1:14:de:7a:37:50:
5f:c3:fc:04:f1:74:ec:76:03:54:53:25:a6:a8:ee:
10:ae:05:b7:db:fd:ec:75:72:aa:dd:27:85:bf:b0:
57:db:e2:65:31:a0:8f:65:aa:4c:d0:33:48:c4:cd:
4f:19:6b:b8:b9:6b:fe:bd:f4:40:cb:35:a2:0a:b7:
d7:85:a8:42:d8:dd:c0:3c:d7:96:60:cb:fb:14:b6:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:45:8E:AE:82:D8:72:96:F4:30:6C:A9:B4:DF:F2:54:1A:2A:54:83
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/rEWOroLYcpb0MGyptN_yVBoqVIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.108.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:de:8e:e9:73:13:e9:52:10:db:aa:73:fd:d8:4a:8b:39:73:
59:31:d5:e5:59:e5:9d:9a:1a:b5:91:2d:0c:74:6d:ca:74:3d:
ef:69:55:47:21:f9:47:61:bb:fc:74:4d:25:15:eb:48:5e:5d:
b0:31:a8:9a:f6:1e:22:1d:1e:c7:fd:6a:44:0c:fd:e0:0a:3f:
60:71:e9:d7:46:12:33:ac:10:49:8d:e2:38:45:aa:46:68:19:
88:68:c9:e8:5b:09:39:16:2e:e2:2b:7e:e2:90:c2:f8:45:f1:
03:a4:0c:ba:53:d4:85:1c:e1:b4:2c:15:c7:92:03:99:37:61:
59:48:d1:1b:89:48:32:0b:65:c3:82:63:fb:29:56:ac:9a:6b:
b9:20:c7:26:ee:b7:17:d0:37:f6:6d:b6:12:e1:5b:48:5d:68:
33:b7:f6:6a:35:0d:85:9b:87:1b:ac:ac:fe:cd:c8:6a:60:fe:
80:29:2f:08:b9:04:99:b7:f8:2d:0d:ef:1d:b6:fe:ef:4b:26:
a2:25:70:77:df:f7:38:9f:3c:98:11:b8:ef:95:53:f1:13:e6:
bf:29:26:1f:7b:3e:da:1b:81:6e:d2:d6:f8:d4:66:88:e3:d6:
0d:c9:28:71:ba:07:56:9f:3a:c3:06:1e:b7:71:5c:a1:c7:b2:
3b:5a:08:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:35:01 2024 by rpki-client on console-ams.rpki-client.org