Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/9ico9z-4BLKJ9HjF9RZgD2sLMbY.roa
File: 9ico9z-4BLKJ9HjF9RZgD2sLMbY.roa (raw, json)
Hash identifier: vOJYwzxJ57DcL2po6fCt42VV3sh6nPd9mdgz/J/PxHE=
Subject key identifier: F6:27:28:F7:3F:B8:04:B2:89:F4:78:C5:F5:16:60:0F:6B:0B:31:B6
Certificate issuer: /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial: 018CC9BBF839060FA91303467B34F7C4239A
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/9ico9z-4BLKJ9HjF9RZgD2sLMbY.roa
Signing time: Tue 02 Jan 2024 10:33:08 +0000
ROA not before: Tue 02 Jan 2024 10:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50629
IP address blocks: 45.151.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f8:39:06:0f:a9:13:03:46:7b:34:f7:c4:23:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
Validity
Not Before: Jan 2 10:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f62728f73fb804b289f478c5f516600f6b0b31b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b9:bf:10:96:6c:df:15:4a:d9:d7:af:74:b0:
f0:ed:11:c7:b2:1c:c7:07:38:f2:44:18:5a:fb:18:
90:00:2e:eb:f7:ab:c4:87:56:a2:11:ce:b8:ab:22:
08:5b:2e:4c:92:27:0e:6c:d5:c9:8f:2f:f2:f5:b7:
57:b1:5c:96:38:58:61:c3:57:90:d0:38:4a:7a:a6:
f7:53:10:c7:13:0d:94:87:18:5b:94:01:64:fc:79:
c0:06:e7:dc:05:d9:0e:79:46:25:79:99:d7:f5:8c:
05:18:d7:19:13:b9:4c:c5:fb:b1:c4:af:58:9a:95:
1f:4e:f1:5d:0b:01:49:5e:93:1f:66:5e:8c:ca:74:
aa:16:ca:57:b0:97:8a:d4:5f:f4:47:21:60:ec:c1:
a9:16:18:23:f8:d2:31:29:13:00:dc:df:a4:aa:d3:
fd:ee:2b:10:69:44:09:0e:34:28:d0:59:76:db:ee:
f5:a2:5e:d0:0d:af:8c:03:5c:0b:89:28:73:7d:3a:
bc:0a:bd:e9:b2:ec:2b:e8:b9:3d:87:66:b9:74:4b:
96:23:41:c9:ac:ba:10:6b:90:a8:a2:b8:a9:1c:68:
bf:3d:6b:91:3c:99:7e:24:ea:0d:20:e7:1d:33:8b:
fc:46:32:4b:e5:25:4e:ed:3c:9f:02:e4:6f:3a:aa:
b3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:27:28:F7:3F:B8:04:B2:89:F4:78:C5:F5:16:60:0F:6B:0B:31:B6
X509v3 Authority Key Identifier:
keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/9ico9z-4BLKJ9HjF9RZgD2sLMbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.240.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:e2:68:eb:63:cc:14:29:62:64:96:4a:85:0e:1e:1d:c7:63:
78:26:82:b8:c5:62:9d:5b:12:5a:de:e3:02:c2:97:73:8d:f9:
b9:97:3e:3f:ac:cb:98:63:f3:7c:6a:a1:96:db:5f:2f:91:19:
49:a3:1a:9b:5e:77:66:db:b0:e7:34:28:85:90:66:ef:41:2e:
37:c0:37:c5:f1:36:12:1d:d2:4b:ab:d9:9e:5a:fd:25:78:8d:
ee:6f:b6:65:a9:dc:5f:a9:ea:27:28:22:f8:5b:75:6a:49:4c:
e5:05:7e:7e:2a:49:2b:74:9b:54:7a:8b:d6:69:10:b6:7b:4d:
44:f7:10:40:fb:bf:50:8f:1d:97:cf:39:af:80:72:07:07:92:
b4:e3:1e:bc:33:c3:92:a6:e6:8b:2d:6e:0d:95:ea:53:f4:7e:
df:a1:b7:0e:d8:75:17:e1:34:89:d6:00:10:0d:80:f2:47:3a:
9d:9c:40:37:95:f7:a3:49:f7:ef:83:2d:af:ba:13:ae:dd:b8:
6b:54:e9:83:8c:7b:0b:47:16:81:b3:bf:d6:dc:58:5a:08:49:
fe:fc:ad:c8:86:21:f8:f4:8b:a6:0f:f2:85:f0:b0:c3:46:c6:
d6:21:bc:69:4e:18:75:b5:94:78:f3:91:cd:4b:90:b1:86:a8:
39:50:fe:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 14:30:41 2024 by rpki-client on console-fra.rpki-client.org