Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/D-Ai-BP23d7XRZW21qg9U6SK1Qo.roa
File: D-Ai-BP23d7XRZW21qg9U6SK1Qo.roa (raw, json)
Hash identifier: 2mteIgzBd/LZJk6wOFhqvv8sdVqaXPAdV+ofiYeLbiU=
Subject key identifier: 0F:E0:22:F8:13:F6:DD:DE:D7:45:95:B6:D6:A8:3D:53:A4:8A:D5:0A
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 018E077E19B8C5B81B853BFC334A49001504
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/D-Ai-BP23d7XRZW21qg9U6SK1Qo.roa
Signing time: Mon 04 Mar 2024 03:24:48 +0000
ROA not before: Mon 04 Mar 2024 03:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 272962
IP address blocks: 45.153.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:07:7e:19:b8:c5:b8:1b:85:3b:fc:33:4a:49:00:15:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Mar 4 03:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fe022f813f6ddded74595b6d6a83d53a48ad50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:02:91:79:86:e4:5f:9d:0a:95:98:50:4a:7d:
81:77:29:e1:4d:24:66:0d:7c:18:31:ff:ab:b5:61:
05:00:03:98:3b:23:57:3b:75:6c:e4:49:a9:ae:0b:
26:44:f4:31:36:6f:b3:d8:ae:5f:68:8a:76:1f:31:
4b:08:ff:ed:97:17:e7:f6:2a:0c:e1:8f:78:05:37:
b2:52:2a:80:46:7f:21:04:0f:25:a5:17:f3:c4:d9:
9f:cb:1f:66:85:8e:be:2f:54:3d:8f:6b:d8:69:6e:
0c:69:1b:2e:e3:5a:c2:2f:33:27:86:43:5c:ce:7f:
a8:cd:bb:cc:3d:0b:98:5e:8f:3d:35:06:d8:da:47:
7e:ac:cd:fd:8d:06:fc:ee:ae:42:4e:6d:fe:ee:b5:
29:79:5a:aa:40:c0:df:4f:f3:cc:c7:b7:51:c4:0d:
08:b9:73:aa:a6:d6:fd:a8:47:a1:d3:69:02:f2:29:
12:93:9e:6f:1b:ef:27:e5:4f:df:c5:a3:88:1f:60:
3b:aa:a4:47:33:ed:c9:de:54:b2:5d:83:1a:7d:ab:
d0:75:15:d4:af:56:fa:eb:91:dd:d1:b5:c3:e0:10:
d6:44:ec:3c:de:eb:2c:53:55:4d:af:74:b7:7e:fc:
db:82:42:f4:e6:b5:b6:b1:44:bd:c5:4f:fb:0b:c8:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E0:22:F8:13:F6:DD:DE:D7:45:95:B6:D6:A8:3D:53:A4:8A:D5:0A
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/D-Ai-BP23d7XRZW21qg9U6SK1Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.165.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e7:05:f3:10:1c:46:f9:f8:47:97:df:5e:b5:6e:ce:05:71:
ba:ad:60:0e:a2:fc:d0:d6:1c:8c:05:f3:e1:85:4e:16:32:bf:
4e:8d:ad:ff:bc:d3:13:bf:0f:a1:7a:11:28:ec:93:ee:ed:d5:
55:7c:46:13:dd:55:72:51:67:2e:85:b2:df:da:3a:5e:ed:43:
04:8c:1f:77:c4:26:c5:ba:d4:48:ce:1d:72:8c:d1:42:6d:1a:
73:7a:89:b9:b9:fb:87:93:e5:20:25:3d:2a:79:ca:61:4f:2c:
55:6b:c4:34:74:d8:38:d7:07:e2:1b:1a:d1:92:85:d1:81:3b:
0f:25:06:8a:3e:cb:6a:ad:70:c7:33:6a:3a:72:18:38:05:ee:
2e:30:17:70:6e:ff:aa:be:67:c5:0b:f0:1b:48:c7:69:40:5d:
06:bd:62:11:2c:42:f2:2f:2c:b8:42:65:f0:af:a7:31:26:27:
36:6d:cb:32:8f:db:57:de:32:4a:c8:41:c5:75:31:75:da:27:
72:7c:54:1b:af:6c:05:60:6f:68:40:7f:47:b0:c0:8d:34:2a:
b7:c2:b8:94:d0:4e:8c:6c:68:9b:c8:da:56:24:09:6e:a1:aa:
f9:b5:66:a7:5e:ff:27:00:cc:9e:25:71:7b:cd:25:99:c9:a4:
ea:3d:07:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:54:17 2024 by rpki-client on console-ams.rpki-client.org