Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/sOzXU_n9KsKngetVWgkovBGPkUc.roa
File: sOzXU_n9KsKngetVWgkovBGPkUc.roa (raw, json)
Hash identifier: vSS88vGTnegWSe6gx5QSqeU9MAnCxERLqqpJOk4S35I=
Subject key identifier: B0:EC:D7:53:F9:FD:2A:C2:A7:81:EB:55:5A:09:28:BC:11:8F:91:47
Certificate issuer: /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Certificate serial: 01927B59BF3EB82B405188EC29444A2C4B8A
Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/sOzXU_n9KsKngetVWgkovBGPkUc.roa
Signing time: Fri 11 Oct 2024 11:32:12 +0000
ROA not before: Fri 11 Oct 2024 11:32:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204497
IP address blocks: 45.67.157.0/24 maxlen: 24
2a09:7ac1:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7b:59:bf:3e:b8:2b:40:51:88:ec:29:44:4a:2c:4b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Validity
Not Before: Oct 11 11:32:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0ecd753f9fd2ac2a781eb555a0928bc118f9147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:11:ed:2e:6a:88:6d:94:4f:92:cf:c6:d1:83:
f2:3e:95:01:5f:ad:1e:1f:8a:bc:2b:22:cf:68:6f:
49:2f:68:7b:6c:10:d0:cd:bb:a5:fe:af:37:10:a2:
d6:9b:44:47:35:16:10:1d:c2:9c:7d:d8:f7:dc:fa:
a5:99:b8:f5:43:82:d9:89:01:9b:3d:1a:65:12:25:
92:01:ec:96:8f:c9:69:44:a9:ed:6d:e2:6e:20:b0:
9e:fe:c5:a6:c6:7e:b0:32:3d:b7:54:91:36:a5:8a:
c4:4e:3c:fb:06:56:85:62:a2:c7:f5:ea:2d:2c:11:
1d:c4:14:62:5c:2c:48:b4:b5:f1:9f:65:dc:1f:d8:
cb:a0:ad:4b:b8:e4:fe:80:28:40:15:2e:18:e6:e4:
f9:d9:2f:c3:2a:c3:b3:8a:1f:be:7d:43:b1:38:65:
f1:e0:30:97:c5:63:34:da:95:cb:d5:de:e6:3b:6f:
16:e7:5a:ba:f5:b3:dd:cf:20:36:56:a4:d6:0d:68:
1c:b9:e8:98:8f:08:51:eb:48:10:66:6f:2a:2c:49:
5d:a7:72:b9:c6:2a:90:00:45:40:7e:da:aa:49:47:
b1:ad:c0:43:ac:11:83:13:6c:28:8a:7b:d5:f2:0d:
90:52:b8:12:73:9e:28:b9:68:ae:85:df:77:f8:1c:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EC:D7:53:F9:FD:2A:C2:A7:81:EB:55:5A:09:28:BC:11:8F:91:47
X509v3 Authority Key Identifier:
keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/sOzXU_n9KsKngetVWgkovBGPkUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.157.0/24
IPv6:
2a09:7ac1:2::/48
Signature Algorithm: sha256WithRSAEncryption
14:19:7a:ec:33:a0:d5:06:62:c6:24:e1:42:a5:a2:e9:1a:c1:
45:34:33:04:77:d9:8a:ab:b1:f6:ee:79:23:be:54:08:b5:ef:
3b:d2:f2:cb:08:6b:d9:d0:c3:fa:21:2a:1d:70:c9:6d:b0:74:
2a:10:c8:b1:cf:39:23:19:d5:1a:23:86:17:c6:8d:31:1a:18:
ec:c7:23:d3:d7:a2:17:bd:d7:06:6f:36:b4:e6:29:6a:6c:1d:
8a:06:79:9d:d9:ac:10:2c:a7:f4:44:4c:bd:87:49:22:c2:24:
59:78:d0:35:0f:7d:c3:59:60:f5:7d:75:71:d8:e8:18:8e:57:
19:e9:42:a0:56:0d:c3:87:9c:2c:35:4f:9b:fb:93:49:69:38:
7d:4d:53:06:8e:13:ee:f5:07:00:1e:c1:0b:70:c4:4d:cb:d3:
70:b8:ff:07:69:47:2a:73:55:65:e1:39:b0:9e:11:77:e2:1e:
ba:57:2d:aa:56:97:df:79:66:04:60:c5:e7:48:1a:f2:24:24:
e0:05:b3:b0:12:a7:28:19:69:f5:a6:3b:51:1f:a3:49:76:f2:
69:85:61:ba:01:66:9e:b0:d2:29:51:a3:42:a2:50:d8:c1:20:
3f:60:c2:e0:69:b6:29:2e:ee:99:d9:ca:62:a2:64:e6:a6:86:
b8:48:fd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:20:47 2024 by rpki-client on console-fra.rpki-client.org