Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lHjAmYJu9ICiGip_zkqTa5x-KwY.roa
File: lHjAmYJu9ICiGip_zkqTa5x-KwY.roa (raw, json)
Hash identifier: vqrjdm6/zWdffM/0smb9ZzKbrpezs/fKEWNkPIbXqK4=
Subject key identifier: 94:78:C0:99:82:6E:F4:80:A2:1A:2A:7F:CE:4A:93:6B:9C:7E:2B:06
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8028A941EE7B1DD569A7F8DFE84C9D6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lHjAmYJu9ICiGip_zkqTa5x-KwY.roa
Signing time: Tue 02 Jan 2024 02:30:58 +0000
ROA not before: Tue 02 Jan 2024 02:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202513
IP address blocks: 45.90.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:8a:94:1e:e7:b1:dd:56:9a:7f:8d:fe:84:c9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9478c099826ef480a21a2a7fce4a936b9c7e2b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:c6:81:e1:fb:6a:7f:20:b6:22:bd:5a:8a:
8c:85:16:e7:9b:41:9c:a8:14:0a:09:0a:2c:ef:8f:
83:ce:7b:ff:78:25:76:8e:6f:a6:4b:86:8c:4f:60:
63:fc:9e:59:51:f6:e4:d4:56:23:3b:c3:ac:1a:29:
79:6b:f8:40:4d:75:f5:a4:1a:a8:e8:36:42:a7:22:
25:bc:3a:49:2f:d9:b1:67:8e:61:1f:9b:62:d6:a6:
de:a0:2b:ed:c0:eb:cc:d7:31:7e:aa:ec:93:f9:cc:
3b:f0:c9:88:55:b9:67:d5:a8:9d:d9:c6:f1:55:11:
3e:21:fe:9a:cf:77:3d:88:81:12:bf:9a:e3:d1:6e:
cc:05:e9:f8:8b:ea:f4:7d:a0:f0:41:86:4f:88:8f:
7a:1e:8c:20:e8:8b:1d:cc:3e:78:91:ef:28:86:1d:
0a:fb:8b:34:f5:15:52:bc:ec:93:19:3e:4b:56:8d:
99:37:34:af:5d:c4:ed:1a:f1:e6:3d:0e:ae:9a:b6:
09:9a:3a:d8:36:14:70:ab:fe:0d:58:d5:92:26:d4:
5d:b2:60:68:d9:f4:97:88:b2:cd:df:7c:3d:e1:3b:
e2:80:29:ef:23:d0:b3:48:94:f8:4b:bd:0d:8c:46:
d1:2f:39:df:56:c3:35:23:1b:df:84:dc:c2:18:b4:
83:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:78:C0:99:82:6E:F4:80:A2:1A:2A:7F:CE:4A:93:6B:9C:7E:2B:06
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lHjAmYJu9ICiGip_zkqTa5x-KwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.237.0/24
Signature Algorithm: sha256WithRSAEncryption
17:72:00:b7:82:34:26:a6:97:79:0c:0a:80:c0:1d:01:33:5d:
cc:41:de:01:ec:aa:de:48:ff:5a:75:06:e3:24:b4:51:cd:21:
bd:8e:6f:67:ce:66:47:8a:ab:80:9c:92:ef:0c:9c:f6:72:59:
02:b7:7d:24:d6:a4:c7:69:4a:16:83:d6:aa:8a:d0:f9:29:9d:
34:4a:0b:d0:e2:bc:33:53:d4:21:d5:7d:82:d8:35:d0:aa:77:
fc:cf:19:cf:6f:6a:da:4c:64:64:22:28:57:34:a8:f5:be:e8:
55:4d:21:50:34:c7:37:dc:d0:17:7e:5a:b2:be:a4:ff:2b:7d:
2f:6b:55:d2:dc:84:a9:4d:99:a9:f3:9f:63:b7:72:55:a1:72:
ee:02:a1:60:e4:0f:23:cf:c4:a4:62:13:93:42:cb:1c:b6:03:
28:df:87:09:e2:01:d3:7a:3c:41:47:ac:51:1b:a6:6b:45:16:
79:f2:b3:e4:44:62:7c:f8:93:20:cb:db:e0:98:e0:7b:b6:13:
34:07:1d:da:7d:79:85:18:f4:6d:d5:06:7c:b1:32:d0:2f:ea:
73:eb:f6:f3:47:7e:be:4c:77:e7:c5:e4:06:b8:ea:b2:c2:92:
08:e4:da:41:f3:ce:ec:f4:8e:19:e3:ec:5e:e1:3e:1c:a0:37:
11:00:14:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:52:49 2024 by rpki-client on console-ams.rpki-client.org