Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/UmSK1IWq9lw9ipcgZEuVj4Ihwpo.roa
File: UmSK1IWq9lw9ipcgZEuVj4Ihwpo.roa (raw, json)
Hash identifier: OECAPr+AXlZdxy0aP2+ALxhdREhiJGHrV4ALqPJcDxM=
Subject key identifier: 52:64:8A:D4:85:AA:F6:5C:3D:8A:97:20:64:4B:95:8F:82:21:C2:9A
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 01907F7BCE1E971096ADC186F7DC9C7320C6
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/UmSK1IWq9lw9ipcgZEuVj4Ihwpo.roa
Signing time: Thu 04 Jul 2024 20:42:18 +0000
ROA not before: Thu 04 Jul 2024 20:42:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 272073
IP address blocks: 45.153.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7f:7b:ce:1e:97:10:96:ad:c1:86:f7:dc:9c:73:20:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jul 4 20:42:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52648ad485aaf65c3d8a9720644b958f8221c29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:bd:b1:71:db:dd:53:aa:8f:b7:5e:74:be:
dc:68:c7:a2:3d:8c:29:4d:b8:18:0d:f9:82:c1:83:
db:34:f4:6d:39:81:37:6b:6e:e9:ef:4c:4b:3b:b5:
1b:16:31:03:72:78:b7:fc:16:28:0e:ae:40:27:41:
59:15:9c:b8:6f:ed:cc:4c:e2:bd:98:ca:13:b3:73:
05:fe:9e:cd:3e:07:1f:f7:80:70:d6:f6:e8:c3:4d:
89:81:c9:48:a9:f4:d7:44:d0:79:f2:83:d2:d9:40:
ba:83:b3:9f:09:0e:72:36:a4:77:21:5a:30:a8:d9:
cb:d8:c0:9e:d5:09:37:ce:c1:3e:a8:29:60:bd:9c:
56:15:02:21:92:ca:58:ca:f3:35:5c:b0:da:4b:ed:
e2:08:f5:7c:84:e9:a5:ca:62:3c:37:aa:ed:e2:9f:
d6:33:4b:55:0c:cd:fd:2b:94:b7:69:46:14:4f:4d:
69:4a:4e:5d:25:af:01:c4:1a:01:c6:83:7b:3e:34:
3e:63:e0:8b:3d:fb:4b:d5:87:fa:88:ef:dd:d7:12:
bd:e5:0d:07:37:72:ed:aa:09:0a:90:be:be:f6:65:
cc:f1:86:9b:40:e4:1d:22:ff:71:da:de:e7:07:be:
33:cb:f6:d9:5e:37:00:46:ae:07:89:f0:87:d5:f0:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:64:8A:D4:85:AA:F6:5C:3D:8A:97:20:64:4B:95:8F:82:21:C2:9A
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/UmSK1IWq9lw9ipcgZEuVj4Ihwpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.165.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:ca:87:07:08:25:bc:7c:e5:12:18:ed:ce:e1:3b:61:5f:4a:
ef:09:99:ca:b1:dd:c2:a2:76:00:d0:b9:73:13:8e:a5:5c:e7:
9c:b5:d8:9f:33:00:ff:59:78:34:ab:85:68:70:99:b9:9a:15:
61:9c:8d:3c:60:8c:fc:f3:0a:2c:10:26:cc:2b:93:fd:b9:ed:
db:13:31:b4:46:a5:f7:f4:75:e8:25:a5:a0:77:e3:f4:16:3f:
57:b8:f8:ed:02:49:2d:01:bc:80:b3:0a:dc:2d:ea:39:d3:4a:
25:97:19:50:11:95:66:39:08:ca:7b:5b:7b:35:7a:cd:c3:3e:
e9:26:0c:2e:b3:ab:a7:c5:c8:3e:c8:e9:2b:d9:c4:0e:ae:82:
2a:2d:34:ea:0f:4e:7f:70:db:80:33:2f:b6:b0:09:f4:d1:32:
2b:84:70:90:10:ec:b4:b2:52:6d:c9:e9:61:f9:15:f7:14:e2:
c4:ec:b6:c0:55:b5:31:d2:b4:c9:98:63:5b:b7:2c:0e:73:fa:
a9:61:65:69:27:46:0e:8f:4c:c7:c6:dc:35:4e:67:a6:6c:71:
2f:85:9d:07:15:65:ea:08:8e:05:12:53:c1:bc:52:e6:ea:da:
df:9c:60:c4:61:9a:4d:22:78:de:73:91:60:39:3b:87:66:d3:
de:35:ed:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:39:56 2024 by rpki-client on console-ams.rpki-client.org