Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/ogKbSJDSUx0MvJhjOdSQFvyHm1w.roa
File: ogKbSJDSUx0MvJhjOdSQFvyHm1w.roa (raw, json)
Hash identifier: kDFU7A/Raf3gxiXjWdGVf2RyatoEItK89le6LwuN4aE=
Subject key identifier: A2:02:9B:48:90:D2:53:1D:0C:BC:98:63:39:D4:90:16:FC:87:9B:5C
Certificate issuer: /CN=542f094f0427b14f3499f7cdf61d883b0888628a
Certificate serial: 018CC500D682AB27E8095B3BA4B2F5048F39
Authority key identifier: 54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/ogKbSJDSUx0MvJhjOdSQFvyHm1w.roa
Signing time: Mon 01 Jan 2024 12:30:15 +0000
ROA not before: Mon 01 Jan 2024 12:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208963
IP address blocks: 45.13.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d6:82:ab:27:e8:09:5b:3b:a4:b2:f5:04:8f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f094f0427b14f3499f7cdf61d883b0888628a
Validity
Not Before: Jan 1 12:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2029b4890d2531d0cbc986339d49016fc879b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:d4:58:16:84:04:30:8b:5d:7e:d0:35:92:
93:e4:c2:0d:27:d1:3d:a0:b7:e2:e9:71:3d:43:53:
8c:32:3b:d8:98:e8:83:f3:0d:b1:57:c3:56:b1:80:
5a:31:64:2e:26:af:bb:dd:8b:22:54:e1:be:f0:bb:
a7:b3:7d:e4:28:ae:dd:b5:62:8b:f6:33:84:d5:f7:
ea:5e:41:8a:45:c2:15:3f:d2:c5:e3:56:5e:51:1c:
48:99:1f:f6:f4:fe:fb:7b:70:48:b1:55:b1:66:87:
77:d5:8b:59:a6:f7:6e:80:32:4c:1d:1c:25:cd:64:
63:5f:cb:12:4e:c0:c5:ab:17:13:22:1f:6e:0e:a0:
63:53:a0:dc:b3:6b:26:05:93:3a:e9:08:4f:39:50:
f6:81:68:fe:05:a0:d1:48:78:9d:87:f9:7f:fa:52:
0d:56:ae:e0:96:58:71:48:f1:1b:47:bf:29:42:0d:
ef:74:3c:84:75:8a:20:38:24:c5:da:ea:07:c8:ef:
46:e9:10:30:16:be:14:d3:23:9b:a3:ea:f8:c4:19:
60:9a:ae:2b:d4:5b:03:a7:4b:da:02:d6:3f:31:1a:
74:de:0c:ef:b7:3f:3a:45:d5:b1:9c:69:31:d1:d6:
bb:5f:ff:b4:02:2c:bd:69:da:4d:5d:ab:46:db:ab:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:02:9B:48:90:D2:53:1D:0C:BC:98:63:39:D4:90:16:FC:87:9B:5C
X509v3 Authority Key Identifier:
keyid:54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/ogKbSJDSUx0MvJhjOdSQFvyHm1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.48.0/22
Signature Algorithm: sha256WithRSAEncryption
25:a7:b7:38:ed:92:e5:66:29:54:46:77:91:b6:71:9d:a9:49:
ae:86:89:09:b7:a8:e0:e6:b8:e0:02:fd:0a:38:2d:b7:a0:04:
b7:25:e0:27:c4:46:71:69:ac:de:8d:c5:d9:50:02:93:dd:b7:
d9:06:6a:01:b5:ee:b4:71:7d:0a:c7:4e:b1:08:c8:c8:96:11:
60:cc:79:ef:6c:38:33:f3:64:99:ff:01:30:32:7c:1d:a9:0c:
9b:ba:ae:d0:f5:11:a0:2c:c8:40:09:fd:ff:7c:b0:33:0f:71:
57:69:e1:de:ee:10:14:37:c7:85:c3:69:f0:11:85:1a:88:95:
dd:f7:2b:c7:4d:a4:72:ae:12:ee:32:12:c0:dc:8e:15:08:c4:
ac:62:96:bd:35:54:7b:5c:0b:21:2e:b0:7c:f0:8e:0a:68:5c:
65:d0:e1:99:e6:70:e8:6b:da:16:a3:13:de:c5:cc:eb:2e:99:
a2:fe:16:b3:ce:7d:c5:b8:07:99:01:2a:fa:33:0b:00:20:3a:
27:42:2e:f4:5e:ff:ad:70:39:66:fd:60:1f:ac:11:45:1f:78:
48:61:d6:8f:04:11:06:67:e1:51:87:a5:c9:8f:f0:83:db:00:
78:82:83:c2:57:9a:4f:33:77:c6:80:d9:b2:0b:09:37:44:49:
67:07:f0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:27:35 2024 by rpki-client on console-ams.rpki-client.org