Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/cZ1RrjnYo1sEt1boz5-T9Qy-oz4.roa
File: cZ1RrjnYo1sEt1boz5-T9Qy-oz4.roa (raw, json)
Hash identifier: Oqe/plm9DdvKEYyuorStDXgi1eva187WZQQOJcm/FaM=
Subject key identifier: 71:9D:51:AE:39:D8:A3:5B:04:B7:56:E8:CF:9F:93:F5:0C:BE:A3:3E
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018CC64ADCD20DEC276B6C058896DDC6CDB7
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/cZ1RrjnYo1sEt1boz5-T9Qy-oz4.roa
Signing time: Mon 01 Jan 2024 18:30:44 +0000
ROA not before: Mon 01 Jan 2024 18:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34924
IP address blocks: 45.86.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 12:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:dc:d2:0d:ec:27:6b:6c:05:88:96:dd:c6:cd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 18:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=719d51ae39d8a35b04b756e8cf9f93f50cbea33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:0b:87:41:0f:b2:de:fe:10:d8:b9:8e:60:
3e:89:42:47:15:7c:5a:ca:56:90:39:79:cc:d3:15:
45:8e:62:c2:67:e2:86:0e:a0:37:ee:25:25:a0:0b:
b2:eb:ff:0c:46:88:e7:3e:05:7f:d7:0d:bc:26:a5:
f8:f8:89:45:a2:f8:86:aa:97:4e:41:ed:f5:66:42:
c8:6a:bf:b0:4d:58:43:50:8d:69:77:36:5e:cd:a4:
1a:73:58:84:2d:a6:0e:ad:3d:09:5f:1e:8f:b8:b9:
28:db:f6:d4:ac:69:00:95:b0:be:5c:5d:3c:7d:24:
07:1e:61:4c:17:37:76:6c:5e:b1:6d:01:1b:79:e2:
f2:2b:99:59:00:1a:f1:20:9e:79:b7:34:ba:9b:92:
26:db:01:07:7b:39:33:ee:ae:9c:5d:ce:03:62:18:
f8:8e:c4:e2:ee:d8:19:59:03:3f:70:46:73:f0:f4:
d9:9c:a9:d1:8e:2b:b4:31:df:10:29:e5:27:59:10:
b1:b1:44:62:f2:b0:ed:d1:b8:1d:2f:18:d4:5c:45:
08:de:0c:05:08:01:5f:3f:3b:d4:aa:cc:de:ec:4a:
a3:81:4e:74:2b:30:54:06:70:16:f8:55:85:56:b1:
03:47:2b:01:dd:79:8f:49:fe:44:f7:e0:7e:ef:b2:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9D:51:AE:39:D8:A3:5B:04:B7:56:E8:CF:9F:93:F5:0C:BE:A3:3E
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/cZ1RrjnYo1sEt1boz5-T9Qy-oz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:72:cd:c6:01:25:d8:dc:1b:ca:d0:c5:06:0f:39:78:59:e8:
fa:57:e3:ee:73:d6:f2:de:1f:cb:27:85:a4:17:36:b6:5e:0a:
0d:5e:98:c4:5a:f3:82:2a:74:a7:cc:6f:f6:6b:6f:b4:9a:38:
59:0c:a7:89:14:51:79:93:e3:6a:2e:4f:ac:4b:ef:38:19:8d:
0a:5c:ef:f9:60:ad:49:aa:7a:88:ac:0b:54:6d:20:8a:e4:0f:
43:2f:39:58:36:ae:f0:72:04:9e:39:35:25:fa:f4:80:08:e7:
b5:cd:cd:5a:dc:e4:a1:cc:71:ea:13:6d:38:06:d8:05:ed:df:
ba:ab:0b:63:ef:5b:29:04:97:47:bd:60:34:1d:85:1b:2a:42:
bd:8e:a4:6b:10:b1:20:4c:0d:40:04:cd:aa:80:cc:cd:3b:e6:
f5:e5:80:9c:9b:9a:fe:6b:8c:99:e2:f2:6b:2c:ee:02:5a:0c:
a5:62:19:f4:d6:6f:24:12:a0:40:0b:82:16:92:49:5e:ed:eb:
c2:bf:72:8f:61:74:05:71:a2:a5:36:ff:da:b1:42:c1:7d:da:
ab:a9:94:17:f1:1f:eb:4f:b3:91:7c:ec:c1:ad:93:b0:a5:c5:
a7:1e:86:8c:eb:f1:23:76:11:c0:9b:22:0a:60:03:04:ed:c3:
03:83:7a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:04:55 2024 by rpki-client on console-ams.rpki-client.org