Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/Vw8BcVLWd6Lw_oVjf_viu8i3MLE.roa
File: Vw8BcVLWd6Lw_oVjf_viu8i3MLE.roa (raw, json)
Hash identifier: N84k/ceenoSIO3tWCvtZDJlVCBJMxt8O2b2U6++mkZ4=
Subject key identifier: 57:0F:01:71:52:D6:77:A2:F0:FE:85:63:7F:FB:E2:BB:C8:B7:30:B1
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 018CC2DB5B2D8E9E234627E7C4F595249E60
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/Vw8BcVLWd6Lw_oVjf_viu8i3MLE.roa
Signing time: Mon 01 Jan 2024 02:30:04 +0000
ROA not before: Mon 01 Jan 2024 02:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.153.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:5b:2d:8e:9e:23:46:27:e7:c4:f5:95:24:9e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 1 02:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=570f017152d677a2f0fe85637ffbe2bbc8b730b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:fc:6b:4b:75:d9:52:40:b3:d6:56:c6:81:
63:0b:52:ff:49:6a:95:ad:32:8e:4d:ab:b6:ce:23:
a7:d2:59:26:9a:a8:d6:dc:38:22:9f:f8:71:d7:3c:
65:35:2b:28:86:15:68:5d:16:fe:5c:64:13:83:9d:
8e:9b:35:0f:41:68:99:f6:99:32:23:46:87:d9:0a:
55:22:f9:0e:85:48:f4:82:43:90:60:95:61:12:2d:
67:28:70:fc:97:a5:21:53:66:aa:01:6c:41:7c:9d:
85:d4:27:aa:55:69:b0:83:ff:66:36:29:aa:a5:86:
cd:92:44:43:be:31:92:2f:68:92:30:16:34:3c:5c:
64:60:1c:e5:b8:84:a4:ae:40:3c:4f:d8:25:68:72:
5d:19:37:68:f1:29:6f:38:7f:0d:8a:90:23:ea:33:
34:fb:1b:71:f7:25:51:af:7c:e5:96:87:52:f6:f4:
9f:37:95:6a:24:d3:e0:dd:d5:fc:be:54:4f:d6:41:
70:53:a8:82:62:8f:f7:e4:e7:a9:dd:42:2f:10:64:
8e:52:93:1f:19:25:1d:00:16:e7:1f:5f:d4:b0:6a:
c9:6d:29:5e:30:e1:26:72:7b:22:2c:96:29:e2:2a:
89:eb:df:97:06:af:af:ea:ac:b1:00:62:71:dd:32:
21:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0F:01:71:52:D6:77:A2:F0:FE:85:63:7F:FB:E2:BB:C8:B7:30:B1
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/Vw8BcVLWd6Lw_oVjf_viu8i3MLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.167.0/24
Signature Algorithm: sha256WithRSAEncryption
01:0e:9d:b5:8b:06:a1:25:3b:9b:d9:01:4d:5a:f3:10:9c:5f:
67:6e:e4:66:b3:35:87:b9:22:48:c1:be:9d:fa:7c:14:d4:f1:
ed:16:37:d7:bb:c5:30:61:60:ff:c5:66:16:08:84:f8:c7:dc:
4e:62:d2:42:de:f6:fa:9e:9a:2d:fc:69:8d:52:95:50:f8:41:
e6:d2:e0:dc:48:ea:86:3a:35:ff:af:c2:57:84:21:7a:71:e2:
23:2f:f9:02:35:1a:fe:43:88:b7:fc:e5:9c:3a:d4:9f:21:e2:
2f:fd:05:6d:41:7e:f6:67:93:85:60:90:1e:b4:91:bc:94:3e:
3c:2e:b0:c0:2d:f2:8e:fa:b0:01:49:cc:13:d9:54:fc:bd:9a:
de:a7:d8:62:62:22:ce:e4:16:94:69:74:af:ad:43:7c:20:63:
08:6e:b1:17:52:7c:e9:4f:2e:b8:fc:5d:77:ab:af:be:4f:99:
2b:da:f0:23:28:a7:f0:b9:85:6e:53:4b:3f:b5:6d:a2:e2:c0:
28:dd:19:8c:a5:34:a6:a6:92:cb:ba:3f:fe:c9:00:76:e4:6a:
c2:b7:d6:d3:f7:10:7c:29:88:64:de:8f:3b:e1:8a:95:c3:63:
c0:a0:1a:ec:16:b7:b5:74:03:fb:55:2e:43:e9:e6:de:70:96:
24:8a:08:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:32:46 2024 by rpki-client on console-ams.rpki-client.org