Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/IKsnLN4v7A2s-c5hIDCySGWYnMY.roa
File: IKsnLN4v7A2s-c5hIDCySGWYnMY.roa (raw, json)
Hash identifier: Ka7uaIl1dECB9tscbzL8dlhY/m041IKWW7t0zww5TBU=
Subject key identifier: 20:AB:27:2C:DE:2F:EC:0D:AC:F9:CE:61:20:30:B2:48:65:98:9C:C6
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 01921FFF28E0771DFB0EF63BF595999E035F
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/IKsnLN4v7A2s-c5hIDCySGWYnMY.roa
Signing time: Mon 23 Sep 2024 17:47:48 +0000
ROA not before: Mon 23 Sep 2024 17:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 45.139.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1f:ff:28:e0:77:1d:fb:0e:f6:3b:f5:95:99:9e:03:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Sep 23 17:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20ab272cde2fec0dacf9ce612030b24865989cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:f5:fb:ff:2e:82:b6:14:5d:b1:92:10:2d:
5f:05:bc:c5:aa:f9:7b:dd:36:f4:3f:d3:c7:53:f6:
c3:d0:f0:4a:63:d0:42:2c:51:9e:f9:7d:c9:1a:25:
62:8e:1a:90:10:e7:f6:50:73:b0:dc:60:3b:4f:2e:
03:be:ba:ad:94:31:51:85:ca:99:9e:1a:ab:bc:ba:
de:cc:f5:1b:53:45:54:99:93:53:e8:a7:f2:5f:e9:
38:45:7a:98:8d:77:bd:28:8e:8b:36:88:2c:46:a5:
4f:bb:44:35:83:22:2d:73:a0:5f:8f:e6:c3:71:b7:
65:56:c4:2a:2f:a2:cd:5b:91:a1:9d:40:91:6c:47:
24:c3:8f:89:ba:59:37:a9:0e:9f:f6:96:1e:f9:7f:
bf:8b:5a:45:ff:09:51:c4:43:4d:98:65:d0:02:bc:
9d:3e:e5:52:a9:2d:b8:80:c0:be:d8:be:76:33:f8:
8b:b0:f0:5a:e2:94:cb:81:17:8d:3d:87:15:1b:89:
b5:fc:66:f2:3a:c9:a3:85:19:f0:ac:c2:ec:56:55:
c6:a7:0d:65:bf:2d:69:48:09:a7:0a:9a:b1:07:d6:
45:cc:29:f9:03:a1:19:3e:5d:87:b2:7b:13:a0:98:
a9:d1:b7:83:50:96:d3:d0:fa:10:22:4f:bf:a5:76:
02:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AB:27:2C:DE:2F:EC:0D:AC:F9:CE:61:20:30:B2:48:65:98:9C:C6
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/IKsnLN4v7A2s-c5hIDCySGWYnMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.44.0/22
Signature Algorithm: sha256WithRSAEncryption
07:13:aa:9f:a5:e3:64:a4:37:a7:cf:48:3e:f5:99:9d:cc:77:
5c:51:3a:88:02:0f:d9:11:08:bc:23:11:a6:e5:1c:e0:45:ef:
ec:34:83:28:12:fe:09:38:54:97:d2:6e:fb:9b:3b:2d:4d:f7:
41:34:3a:7e:1a:c9:7d:84:21:c7:4c:ba:7e:5e:7d:01:7f:ce:
93:35:ce:bc:ea:82:1b:bc:2d:da:91:95:d7:31:47:13:27:f0:
f5:49:df:de:58:a2:9c:02:6f:2e:0b:9a:54:d8:83:88:63:ca:
ad:95:bd:87:14:ac:3a:33:c9:95:92:a8:8b:41:5a:cb:a0:22:
e3:8e:32:43:8f:40:eb:cb:9b:b5:6f:df:23:73:cf:2d:8d:56:
55:88:25:ad:20:51:00:5b:6d:f6:d7:8d:9f:90:c1:c1:50:a6:
51:e5:b5:72:e9:80:c3:68:70:64:81:24:7e:88:69:6f:f6:f1:
8e:3f:6f:00:d2:f4:24:ec:39:dd:b0:a4:9e:21:21:5b:17:c0:
4a:4b:bb:83:3d:1b:29:26:bf:e9:ed:fa:1d:39:cd:b1:9e:e0:
e7:51:81:11:2a:66:14:79:4a:25:74:c8:c5:e1:38:01:2b:5c:
c4:02:0c:92:11:d9:73:e8:e3:8c:73:4d:fe:ad:7f:de:47:79:
5b:d1:91:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:25 2024 by rpki-client on console-ams.rpki-client.org