Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/v5dfbCMLPoIr477WnPpiP7IdPYw.roa
File: v5dfbCMLPoIr477WnPpiP7IdPYw.roa (raw, json)
Hash identifier: odomW2grL1u1kuLiSrEruLCBSimF3DIcFui0MDvVY1g=
Subject key identifier: BF:97:5F:6C:23:0B:3E:82:2B:E3:BE:D6:9C:FA:62:3F:B2:1D:3D:8C
Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial: 018CC500D7B6C08BF154E1434C87EDAF9F0F
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/v5dfbCMLPoIr477WnPpiP7IdPYw.roa
Signing time: Mon 01 Jan 2024 12:30:15 +0000
ROA not before: Mon 01 Jan 2024 12:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29611
IP address blocks: 45.89.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d7:b6:c0:8b:f1:54:e1:43:4c:87:ed:af:9f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
Validity
Not Before: Jan 1 12:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf975f6c230b3e822be3bed69cfa623fb21d3d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:a6:eb:a8:62:dd:06:0a:5e:9f:25:db:b7:
57:66:d8:c0:d8:3b:6f:96:12:6f:ea:84:e3:04:aa:
80:c0:2d:96:b2:2d:6b:70:38:f3:81:55:c8:84:3b:
99:32:81:0e:1a:ff:ab:38:aa:96:ce:09:3f:a2:07:
5b:ac:47:2c:cb:ee:86:d6:a9:30:2e:d2:ae:68:7a:
c8:6f:84:7e:d7:f1:f9:0a:dd:01:dd:6c:d5:00:f9:
57:66:c4:06:39:e8:17:e2:f9:65:09:7c:87:f3:03:
60:7f:f3:cd:13:3b:2d:92:c1:e0:89:8d:d7:2f:17:
f7:f1:78:30:cf:29:ab:4b:07:b2:d6:8a:63:07:87:
0e:5c:9c:31:7c:b6:8d:42:27:27:d4:19:1e:98:07:
a5:d8:72:81:aa:96:7d:ab:bb:3f:8d:c4:f6:19:bf:
a5:c2:3a:83:bb:ff:2f:c6:71:33:a2:a9:8d:66:fc:
e8:a0:8e:e6:6d:fd:be:7d:61:b5:db:29:9b:60:7e:
0b:ef:69:69:c5:f0:25:35:16:69:ed:4b:40:a0:63:
17:44:c5:6e:a4:5b:16:40:80:a1:0f:29:6c:24:7c:
69:16:7f:be:ea:cd:51:6b:1f:cd:ef:37:92:7e:3b:
01:c0:a5:b1:4d:b2:26:1d:8d:ae:e9:87:ba:7f:2c:
63:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:97:5F:6C:23:0B:3E:82:2B:E3:BE:D6:9C:FA:62:3F:B2:1D:3D:8C
X509v3 Authority Key Identifier:
keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/v5dfbCMLPoIr477WnPpiP7IdPYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:76:d0:1b:a2:24:f6:ef:19:d0:9b:cb:e2:c1:95:a4:89:ca:
86:10:15:26:a7:ac:f8:f2:36:41:45:44:d4:13:ec:d7:77:2b:
f9:bd:ab:84:62:ff:bd:e9:d6:f7:8c:76:db:03:cb:51:67:c7:
9a:c5:8e:22:f0:4c:c3:f6:91:e1:3d:8e:9e:1b:fb:25:28:97:
34:65:15:1c:a2:63:c6:e6:e1:c9:c1:50:42:08:5f:c9:19:59:
57:2e:f3:fb:8d:68:0b:c8:59:a4:6e:fe:42:0f:28:71:27:fa:
3d:ee:34:86:19:43:d1:51:d1:cf:ae:0e:bc:01:45:7e:b3:28:
53:39:fc:41:85:32:ac:a0:ff:ef:db:b8:ef:3d:6e:16:bb:33:
95:8e:ac:89:95:df:41:b7:7e:36:d1:cb:56:a5:cb:3a:0b:91:
47:46:0b:c3:16:c3:51:e4:0e:43:02:76:1f:fd:62:18:84:f1:
99:4f:b5:06:52:c3:d8:86:15:4c:88:39:e4:c1:3b:6f:64:7a:
34:cb:9a:b8:2d:2a:53:5d:5c:b8:00:65:d3:d8:6b:03:e8:8a:
99:81:0e:04:00:99:da:fb:e3:a4:97:9c:81:ea:33:4a:51:1c:
b0:71:22:0b:ba:6f:1d:fd:4e:bb:5f:88:9b:48:c7:29:84:b9:
d3:ee:d5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:37:02 2024 by rpki-client on console-fra.rpki-client.org