Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/pMy17ooA24-d04K1qk0u5HggW6Y.roa
File: pMy17ooA24-d04K1qk0u5HggW6Y.roa (raw, json)
Hash identifier: 1X5BhhMkEtw1s43TfbUlhyUV9u6Ai+n8b/JYykqVyf4=
Subject key identifier: A4:CC:B5:EE:8A:00:DB:8F:9D:D3:82:B5:AA:4D:2E:E4:78:20:5B:A6
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018DB14F51D9F73192A4512FF1F079AA2F7D
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/pMy17ooA24-d04K1qk0u5HggW6Y.roa
Signing time: Fri 16 Feb 2024 09:46:21 +0000
ROA not before: Fri 16 Feb 2024 09:46:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 45.67.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b1:4f:51:d9:f7:31:92:a4:51:2f:f1:f0:79:aa:2f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Feb 16 09:46:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4ccb5ee8a00db8f9dd382b5aa4d2ee478205ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9b:0a:55:6f:50:00:9a:b9:a0:1e:fa:5f:11:
8d:74:9a:02:64:21:07:82:7b:29:3a:88:b2:ca:3b:
51:af:82:12:b5:e5:9c:1c:64:69:bf:82:64:b3:16:
98:34:99:72:5e:3d:b4:01:1e:68:d1:61:29:10:ed:
81:3a:e6:a3:9f:65:e0:6c:cf:da:f6:9c:f6:eb:ad:
03:05:1f:e1:d9:e9:3a:2c:d6:19:b7:e3:aa:f2:3f:
7e:87:4a:32:34:0b:bf:05:a4:f8:cf:46:22:21:8b:
4c:08:7c:a5:7a:99:60:67:48:56:88:b7:30:cd:dd:
e9:61:9e:32:72:8b:6a:f7:5a:44:10:99:93:e0:38:
f3:e7:22:e9:40:cb:db:63:e3:7c:ff:8d:15:98:28:
6a:ce:55:76:cc:a3:ef:f7:83:77:ba:ae:b1:19:d5:
ce:85:fd:0b:fd:18:a8:13:5e:0f:8a:22:5a:ce:8c:
49:28:80:5f:74:7d:09:fa:95:88:ac:92:b2:01:3d:
63:7c:bd:bf:97:69:17:a3:49:06:4f:4d:54:7a:3b:
f1:03:dc:59:3c:81:a3:a4:07:3b:d1:b8:cb:35:7e:
fa:b4:58:c4:87:56:ba:44:70:59:9d:78:2c:8a:85:
2b:e1:b4:be:23:36:88:ff:b6:53:a0:ba:23:ca:cb:
c9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CC:B5:EE:8A:00:DB:8F:9D:D3:82:B5:AA:4D:2E:E4:78:20:5B:A6
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/pMy17ooA24-d04K1qk0u5HggW6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.202.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c2:3f:d6:61:eb:b4:71:58:64:04:5a:70:45:69:5f:74:af:
e2:81:26:4d:c3:ff:5f:62:8b:9e:fd:ab:b5:3d:c4:29:7b:86:
f0:fd:f0:ee:87:19:4f:c9:e0:69:71:fe:5f:76:eb:60:da:7f:
b4:35:f4:19:c2:d3:12:b4:83:1a:3b:ef:7e:0c:53:3d:0e:11:
78:9f:e1:6e:18:b3:fb:f6:32:40:f0:3b:ee:fb:e8:b1:f7:32:
bd:98:12:9f:e1:15:f7:b6:b9:eb:39:ce:68:33:f4:78:2f:a9:
32:a3:e5:76:f8:9a:b3:3d:80:6c:55:3f:e8:23:43:42:78:e4:
48:19:0d:99:ea:2c:83:ef:94:f2:34:46:75:ae:d0:83:76:10:
3e:e2:12:de:18:cb:6d:af:61:df:73:7d:88:88:86:8e:c0:15:
92:28:f6:6f:b1:1e:90:db:c2:c2:27:9a:49:77:af:90:fa:12:
14:f9:23:dc:31:25:a0:d4:1f:6a:02:6f:36:a8:44:92:5c:66:
4b:cd:d6:d5:e2:99:e1:13:97:d7:d6:bd:d1:55:70:80:d6:71:
e0:12:a0:3a:bc:ee:27:df:08:91:d8:4a:9b:f7:4a:37:ea:49:
33:c7:ee:b0:84:16:dd:03:b7:e7:60:4d:7a:e8:71:5b:98:77:
78:22:dd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:12:21 2024 by rpki-client on console-ams.rpki-client.org