Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Q01I-ywnpXo7nAupcRdj67_g2Xc.roa
File: Q01I-ywnpXo7nAupcRdj67_g2Xc.roa (raw, json)
Hash identifier: KUV4Qq3oT3ZtxgF9eRGSBpWdKfjyJyhR7z5VGVK8fjc=
Subject key identifier: 43:4D:48:FB:2C:27:A5:7A:3B:9C:0B:A9:71:17:63:EB:BF:E0:D9:77
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B5437A76C19FD06D02CFC6911F1DE
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Q01I-ywnpXo7nAupcRdj67_g2Xc.roa
Signing time: Tue 02 Jan 2024 12:34:46 +0000
ROA not before: Tue 02 Jan 2024 12:34:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46261
IP address blocks: 45.138.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:54:37:a7:6c:19:fd:06:d0:2c:fc:69:11:f1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=434d48fb2c27a57a3b9c0ba9711763ebbfe0d977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:7c:32:0c:6c:27:5c:1f:be:4b:c9:62:b9:
ed:ca:4e:2f:89:d1:9b:02:4f:51:af:23:59:7d:49:
c9:38:6a:84:ee:50:dc:70:2b:78:63:62:ab:7a:e6:
a2:53:de:26:5a:96:18:bb:b7:19:39:c8:20:7b:10:
0d:33:49:c9:e7:84:7a:51:1b:72:fc:ab:4c:0c:7d:
71:7a:88:4c:ee:15:ab:d0:dc:2c:ad:07:82:d4:96:
cb:f2:ee:97:5a:31:8e:03:5e:67:9a:ef:16:f1:a9:
ce:8c:87:d5:a7:20:71:32:fc:37:31:70:17:5f:71:
ff:f0:02:24:df:81:34:03:e8:3f:fa:de:43:0b:6e:
a5:76:0b:49:d6:b2:c9:6e:8a:13:5f:73:c6:d2:66:
14:ad:52:59:09:2b:ca:7b:9e:2e:a0:ed:81:5b:6c:
68:7a:57:87:bf:95:35:ae:cc:6b:95:cd:6e:55:06:
3e:aa:b8:3c:cc:78:25:02:dc:1f:90:77:ce:c2:af:
d1:ee:da:35:10:41:c0:de:34:69:56:dc:67:b3:e9:
02:8d:56:d9:80:c2:29:1b:68:63:91:93:5f:20:01:
8d:6f:1b:97:d1:58:57:bf:cd:0f:32:72:7e:f8:93:
da:93:be:4a:6f:63:dd:c4:ee:c4:86:50:69:c0:97:
f4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4D:48:FB:2C:27:A5:7A:3B:9C:0B:A9:71:17:63:EB:BF:E0:D9:77
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Q01I-ywnpXo7nAupcRdj67_g2Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.210.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:97:25:e1:5a:d9:fa:c0:1f:04:7f:ef:7c:24:d2:b0:d9:21:
ae:48:3b:53:d2:09:af:36:21:36:14:8e:b5:6d:70:37:2a:92:
8c:b3:c6:a0:bc:f0:ea:c6:a1:09:b8:6c:82:91:dc:f2:53:87:
4b:62:60:d9:97:d2:f1:ef:82:68:9e:87:0b:58:8e:0f:42:4e:
64:8e:54:8c:9e:4f:aa:8e:de:08:97:ea:54:1f:37:6e:51:7f:
e4:61:2e:06:0f:01:32:96:55:14:8e:9a:41:21:e1:ed:99:fa:
53:2f:ef:3e:45:c0:4b:78:b9:05:26:69:e2:88:95:43:72:d7:
56:43:7f:d4:78:c1:56:ea:ac:66:2f:3b:db:e1:3f:f6:2d:62:
0b:b6:9a:60:b6:e6:fc:f3:3c:83:3f:26:31:79:6b:b5:ab:e5:
39:c0:d2:30:4c:c9:84:06:5f:73:19:19:eb:92:3a:fd:35:e7:
a2:18:e3:98:fd:ee:a6:f4:07:72:24:b9:ea:7e:fc:f9:d4:8c:
ff:b2:5a:c7:aa:48:96:85:90:1e:1b:44:a7:83:ad:7c:42:6c:
0c:83:bc:10:71:57:5a:ae:38:e0:fd:3c:26:04:f3:48:a5:58:
9c:57:b4:ca:c8:79:3b:bb:46:fc:ba:21:63:03:33:20:e4:b2:
46:7b:4a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:26:16 2024 by rpki-client on console-fra.rpki-client.org