Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/4ej4XAE7wNsr1Q-7iKYDu8rEAz8.roa
File: 4ej4XAE7wNsr1Q-7iKYDu8rEAz8.roa (raw, json)
Hash identifier: eDukHA8ZBqC66o4L0bamSmz4nlyBUIHX/eJVl0b3E3Y=
Subject key identifier: E1:E8:F8:5C:01:3B:C0:DB:2B:D5:0F:BB:88:A6:03:BB:CA:C4:03:3F
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 01923D7F57D208972777D195F4A11C673A39
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/4ej4XAE7wNsr1Q-7iKYDu8rEAz8.roa
Signing time: Sun 29 Sep 2024 11:16:48 +0000
ROA not before: Sun 29 Sep 2024 11:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 45.112.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3d:7f:57:d2:08:97:27:77:d1:95:f4:a1:1c:67:3a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Sep 29 11:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1e8f85c013bc0db2bd50fbb88a603bbcac4033f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b2:81:b8:d4:fe:a1:6e:49:cc:89:cc:23:37:
54:65:b7:2b:3b:3a:5b:17:97:01:26:21:ca:84:86:
00:58:4c:80:03:e5:6d:9e:96:df:4c:13:d1:c8:2d:
2a:d4:56:eb:4d:5d:f2:81:71:d2:2c:a8:42:9d:19:
c3:f1:1d:79:05:12:22:19:2a:7b:1a:3c:02:7e:dc:
fb:65:2b:3d:f9:2e:74:51:97:b0:0b:24:20:55:c6:
94:c5:77:87:03:3b:02:93:f3:ec:6c:42:a7:10:89:
89:69:60:a0:ff:a9:b1:43:34:05:d6:2b:f8:49:03:
ca:62:21:e5:21:62:5f:6f:8d:9d:8d:c8:3b:64:d3:
34:2a:3e:ec:3f:9a:32:b0:19:0d:a7:ae:8a:6d:7d:
8c:92:a4:15:61:0c:81:03:d2:b8:f3:be:58:7e:8d:
c3:7f:3e:1f:e8:1c:94:9c:10:19:fb:f6:c4:d3:20:
2c:c3:6f:4b:40:2a:15:4f:26:c2:46:ff:f9:e8:e4:
d2:d8:00:8a:2c:4f:fb:e6:01:d8:d4:39:32:14:d6:
f2:b1:c8:4c:f8:b3:e8:6c:ef:c8:73:9a:88:44:0a:
db:75:6d:d6:d0:94:17:69:48:16:e6:98:95:c0:31:
8d:55:90:05:3c:bb:54:60:06:84:1c:0d:90:63:8d:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E8:F8:5C:01:3B:C0:DB:2B:D5:0F:BB:88:A6:03:BB:CA:C4:03:3F
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/4ej4XAE7wNsr1Q-7iKYDu8rEAz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.112.193.0/24
Signature Algorithm: sha256WithRSAEncryption
18:77:49:a4:9f:7a:c8:90:78:60:31:62:98:b5:81:91:bd:6c:
41:d9:b6:ea:c4:4e:42:b0:ab:91:b0:c4:3c:f4:5b:82:28:04:
23:96:9a:dc:2d:6d:3d:88:2f:04:37:4c:e4:89:19:e3:4c:e4:
58:92:be:2d:b0:b1:0e:ce:69:22:50:95:2e:fe:6e:4a:a2:29:
79:0a:9a:3e:32:e2:ae:81:02:a0:33:7f:97:06:84:c6:51:d0:
69:89:88:bf:1e:01:60:41:e1:88:9a:29:d6:bb:94:73:ff:e5:
6a:fe:8f:99:7c:e4:6f:14:a5:17:4e:fb:04:c3:97:dd:84:7d:
13:c8:d2:96:26:f4:12:4e:26:db:f4:ae:26:45:48:f0:f9:23:
3e:9b:c8:06:2c:40:5f:20:57:e2:0a:e4:3f:4c:c4:de:cd:fd:
24:a8:c9:ca:ff:3a:e2:70:1a:6c:67:4e:d2:0f:3d:e4:63:1d:
97:f8:9f:8a:63:23:0e:53:1b:93:51:04:87:a0:30:8b:c5:cd:
6f:69:c9:d5:5f:23:32:e6:b4:93:c2:bc:40:8e:3d:d9:08:d0:
90:88:cd:e3:ba:b3:ec:06:ff:03:60:9d:31:77:75:b0:fb:89:
52:e6:6d:43:b2:d8:b3:2e:13:5a:a8:f3:fa:59:0d:af:84:65:
b9:f9:e2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:06:36 2024 by rpki-client on console-fra.rpki-client.org