Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/u9DCtQ3Dneem8P4536cBnubK1Jg.roa
File: u9DCtQ3Dneem8P4536cBnubK1Jg.roa (raw, json)
Hash identifier: jX7Kp4Ar+aqlPSUbqvAqkmwYmGn8baqRmy2jGBuGmKY=
Subject key identifier: BB:D0:C2:B5:0D:C3:9D:E7:A6:F0:FE:39:DF:A7:01:9E:E6:CA:D4:98
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018EEC87CB3D4524B000659BBD133C724B5A
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/u9DCtQ3Dneem8P4536cBnubK1Jg.roa
Signing time: Wed 17 Apr 2024 14:48:26 +0000
ROA not before: Wed 17 Apr 2024 14:48:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215302
IP address blocks: 45.137.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ec:87:cb:3d:45:24:b0:00:65:9b:bd:13:3c:72:4b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Apr 17 14:48:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbd0c2b50dc39de7a6f0fe39dfa7019ee6cad498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:53:58:2d:0c:32:af:a0:12:31:b3:ed:a2:71:
26:73:f2:34:de:8a:97:3c:21:19:f1:48:8c:51:73:
ce:d9:1c:0d:7b:29:e2:80:31:41:42:d1:25:0f:f3:
30:23:51:b4:c4:46:ad:af:18:9d:75:9e:6d:c5:4e:
a7:b4:e9:fb:f3:d8:35:6c:50:a9:5a:40:4c:22:cd:
e2:54:f6:d0:9c:d5:bc:cb:f5:7b:ae:9c:dc:76:15:
fc:f5:b1:d1:23:f5:08:4d:0d:d3:9f:c7:62:a9:e6:
50:6e:9b:80:21:c0:ea:77:74:08:38:27:61:76:48:
fb:e5:34:c6:2e:d3:03:da:b3:21:ae:0e:39:3f:9b:
c3:1d:e8:fd:ea:ba:60:5d:fd:05:8b:c3:4e:e4:9e:
92:7e:e0:4b:68:0e:66:a0:9e:1f:b1:fa:69:40:a8:
04:16:62:27:78:cb:f6:3c:5f:eb:71:cd:4c:ea:a9:
7c:0e:97:6f:85:8c:0b:e1:67:50:00:b1:a7:ed:60:
e6:bf:fa:34:99:50:d3:35:2f:c5:c4:b7:c2:f9:28:
9c:45:d2:d0:72:2f:d7:76:94:46:49:da:20:15:8d:
36:6e:4f:7e:0b:2b:22:42:b1:c6:f6:78:29:c0:74:
c9:a9:8e:23:e7:70:d9:0c:9d:f8:7b:05:42:c0:bb:
f7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D0:C2:B5:0D:C3:9D:E7:A6:F0:FE:39:DF:A7:01:9E:E6:CA:D4:98
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/u9DCtQ3Dneem8P4536cBnubK1Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.107.0/24
Signature Algorithm: sha256WithRSAEncryption
71:7a:f6:09:40:c7:de:8b:cf:f2:e7:f5:31:62:32:6d:33:d7:
e0:1a:a6:28:c6:49:cb:89:2b:a7:d2:87:3f:93:fd:42:f1:df:
d7:06:2a:f9:7b:35:eb:17:55:8d:ea:db:94:48:07:ac:9e:1b:
34:db:9c:67:6e:1e:b6:f9:7d:3b:42:79:c8:84:39:26:c0:0b:
52:f6:c7:1f:f4:c8:f6:8d:86:9e:0a:a8:1f:79:2a:28:fc:61:
fd:51:a9:89:89:dd:c5:54:f8:a8:0c:bd:99:b2:53:95:ae:40:
8e:33:80:6b:de:49:0d:e0:b6:4f:72:12:0a:17:2f:06:b4:df:
77:c5:81:ea:76:66:04:78:f8:40:0e:9b:d8:09:1e:7c:db:7b:
8e:67:23:6a:08:d5:bc:1d:1f:dd:f9:d8:ae:e1:d0:84:79:04:
ce:3c:ef:2c:68:4f:ad:20:50:51:e9:e0:00:a8:41:65:cf:ae:
0a:b7:49:81:82:b8:95:d0:2b:f8:a2:73:fc:24:1b:71:c9:81:
27:a1:f4:7d:e9:3b:de:b1:b5:bb:16:16:98:1e:d7:f8:71:38:
5c:25:40:69:ca:5b:d7:01:64:4b:39:e6:14:55:47:b9:e8:66:
98:da:9e:43:60:7e:f2:fe:50:f4:69:c7:71:8c:55:05:02:3c:
14:62:9d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 21:32:27 2024 by rpki-client on console-fra.rpki-client.org