Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/xWKMqfI72Z9cP9g7XAsaj0nIxhA.roa
File: xWKMqfI72Z9cP9g7XAsaj0nIxhA.roa (raw, json)
Hash identifier: jSUv9aKKCBFlubJFh33nIo1/cdGKoM86PasSrIpXoQ0=
Subject key identifier: C5:62:8C:A9:F2:3B:D9:9F:5C:3F:D8:3B:5C:0B:1A:8F:49:C8:C6:10
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 018CEE3952389CAE49200A5900D7D1D80C69
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/xWKMqfI72Z9cP9g7XAsaj0nIxhA.roa
Signing time: Tue 09 Jan 2024 12:36:23 +0000
ROA not before: Tue 09 Jan 2024 12:36:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49151
IP address blocks: 45.141.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:39:52:38:9c:ae:49:20:0a:59:00:d7:d1:d8:0c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Jan 9 12:36:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5628ca9f23bd99f5c3fd83b5c0b1a8f49c8c610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:85:7b:95:ac:d6:07:d7:1d:19:79:e2:4a:2a:
ab:75:9d:51:4d:5c:5c:98:1a:b0:25:43:f4:a0:fb:
29:41:ee:59:68:5e:53:d0:f4:5e:46:58:70:d2:0f:
1a:d9:b2:53:2f:8b:0e:cd:b6:0c:a7:87:18:38:96:
b0:6f:fc:c5:79:da:d3:be:fd:e2:46:f1:a7:dc:e2:
83:13:66:27:25:42:0a:8e:9a:59:89:5b:7b:6f:a0:
aa:52:70:7f:3c:99:fc:e1:95:1f:00:f1:28:a7:78:
83:c2:11:d8:eb:2a:59:67:b0:a5:f3:f5:f7:73:22:
3a:5c:ea:1c:07:37:ba:e8:16:3e:70:93:fc:d2:c9:
93:8f:10:13:1e:eb:48:42:0e:8a:13:85:51:01:91:
7b:b1:97:5c:d5:6f:42:0e:c3:05:53:16:b4:a9:4e:
92:49:6e:ba:b8:5e:fa:f9:04:fd:49:9d:4e:3d:87:
55:6a:37:e7:3b:87:ed:7b:e8:d4:2e:64:ad:59:4a:
b1:08:eb:a1:72:6e:34:31:2b:58:b3:70:89:18:ec:
2a:36:d0:5b:54:26:03:34:44:74:37:19:30:9b:26:
02:fe:8b:6d:71:94:8a:a7:8f:47:89:fc:d4:d7:75:
ba:f0:45:55:bf:20:df:e5:be:b8:85:05:ac:91:0e:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:62:8C:A9:F2:3B:D9:9F:5C:3F:D8:3B:5C:0B:1A:8F:49:C8:C6:10
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/xWKMqfI72Z9cP9g7XAsaj0nIxhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.1.0/24
Signature Algorithm: sha256WithRSAEncryption
92:6c:ba:bf:60:01:6f:ea:02:e3:35:38:eb:41:48:ca:45:1e:
c6:ef:41:6b:af:7c:79:31:24:32:58:4c:0a:3f:bf:39:8d:a8:
28:18:42:33:aa:bb:1d:fd:ae:5d:29:9e:5b:e5:49:a4:8a:88:
f5:09:05:a3:30:c0:b9:59:77:fb:83:f3:1e:ec:02:ab:0b:59:
c5:e6:4b:6c:f2:61:cb:a0:9a:3a:ec:1f:66:24:42:10:10:f4:
d1:3c:7e:3e:7f:cf:0d:9f:cc:a2:bb:10:36:95:95:7a:5e:58:
9c:13:63:22:37:f7:92:24:e5:b3:e7:38:33:cb:f4:f4:5b:62:
c5:d0:c0:b7:87:51:b3:eb:0e:27:d8:ca:29:9d:98:a0:15:27:
47:77:43:45:bf:f0:54:63:d3:63:cc:f8:e2:35:8b:48:76:e4:
fc:f1:97:26:bb:03:1c:bd:19:e5:96:9d:19:c0:6f:ab:0c:6e:
f8:e8:03:11:e5:b1:f7:cf:85:73:77:8f:d4:eb:59:49:72:e3:
b0:2d:7d:88:2e:5d:a7:b9:0b:5b:bc:51:e5:ac:7e:a2:8a:ce:
96:7f:c9:88:6e:dd:9f:da:82:67:85:72:3e:90:8c:50:ca:23:
dd:3d:bf:3e:f2:34:c1:5b:78:f0:5d:7e:3d:34:77:06:de:41:
af:a0:f1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:00:59 2024 by rpki-client on console-ams.rpki-client.org