Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/QiCSonh74sr4ACViymh-mKyv_Ks.roa
File: QiCSonh74sr4ACViymh-mKyv_Ks.roa (raw, json)
Hash identifier: lY+fN1rhMRkTXEHksM74KEPmEkwI83o3iIoVBi9Pe1Q=
Subject key identifier: 42:20:92:A2:78:7B:E2:CA:F8:00:25:62:CA:68:7E:98:AC:AF:FC:AB
Certificate issuer: /CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Certificate serial: 018FE709C304E2335968E5E868F8DF165455
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/QiCSonh74sr4ACViymh-mKyv_Ks.roa
Signing time: Wed 05 Jun 2024 06:15:27 +0000
ROA not before: Wed 05 Jun 2024 06:15:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61049
IP address blocks: 45.13.152.0/24 maxlen: 24
45.13.153.0/24 maxlen: 24
45.13.154.0/24 maxlen: 24
45.13.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e7:09:c3:04:e2:33:59:68:e5:e8:68:f8:df:16:54:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Validity
Not Before: Jun 5 06:15:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=422092a2787be2caf8002562ca687e98acaffcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:67:5c:de:3f:56:cc:15:88:cc:67:34:5c:
b7:c9:a0:89:83:2e:50:f3:9a:e3:c9:49:f0:85:e9:
71:85:47:1a:6c:4a:16:13:df:57:76:5f:71:37:7c:
46:01:87:07:17:ab:48:e3:47:71:c0:a7:94:5d:29:
84:01:54:2c:21:21:1f:02:fc:8a:72:8e:36:2b:0b:
55:a7:5e:3e:7d:fa:45:59:48:2e:c3:3e:a6:9a:72:
c4:6a:a8:1e:2f:5a:8e:d8:a8:99:e1:70:92:63:5f:
ed:72:36:40:4d:5f:18:8f:c4:3a:0e:67:38:d9:aa:
94:37:61:e4:4c:c6:da:e4:b2:a4:6f:a4:2e:ea:b7:
cd:2c:89:0c:78:0b:13:82:bd:fb:b5:09:2a:77:76:
59:45:5a:17:6b:56:69:97:df:89:d6:2f:7c:4d:c5:
3e:a3:7b:55:88:f9:cd:6b:b1:63:15:97:c1:42:77:
52:fb:3c:60:9a:3e:cf:72:f1:9c:0e:c6:87:59:5b:
ab:fe:6a:f7:9b:82:aa:b0:9c:73:4a:27:c3:c6:d9:
42:05:b0:c3:7c:24:72:e7:57:f6:ba:72:8c:77:01:
4d:a2:23:c5:8c:af:05:0c:bd:58:1b:06:eb:d6:f9:
10:a4:79:33:20:5e:8d:20:1f:e1:84:b2:f9:5c:dc:
18:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:20:92:A2:78:7B:E2:CA:F8:00:25:62:CA:68:7E:98:AC:AF:FC:AB
X509v3 Authority Key Identifier:
keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/QiCSonh74sr4ACViymh-mKyv_Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.152.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:c5:3c:16:aa:b7:b1:49:a3:0c:68:d3:e3:75:e8:ed:7f:8e:
36:18:a4:46:36:fc:52:1b:8e:c9:b4:4e:24:bc:31:a8:ad:36:
dc:9e:6c:93:38:bf:50:a8:1f:63:8f:95:43:4f:f6:0a:bc:ee:
30:e7:d0:57:ba:2c:00:68:9c:35:af:5c:66:2a:51:0f:1c:a1:
3d:f3:cd:e8:c8:f1:70:ba:7f:3a:ee:8d:4c:4d:21:8a:1e:ab:
7b:63:75:72:62:df:56:98:da:11:ab:96:c4:1d:2f:12:22:3d:
45:70:83:e9:ec:47:d9:c0:a0:b3:2e:00:dc:9d:86:31:d2:0e:
b4:5b:a0:6a:73:76:74:0c:30:db:d3:d6:6d:63:7f:77:97:6d:
c8:df:ed:82:42:61:2c:9a:a2:e3:9d:d6:f6:f1:17:9c:21:b4:
6c:dc:15:e5:11:b5:e0:2a:e5:21:39:5e:ce:df:87:8a:b8:bc:
79:0a:29:18:18:9f:85:1d:ee:22:0b:8b:f7:4d:b4:de:bf:3a:
32:23:df:75:a3:e9:6e:9c:f7:98:90:68:92:c0:a4:37:86:66:
f0:d2:87:ef:ea:38:19:ae:64:5c:e3:8a:9d:ec:ff:b6:a1:ef:
08:50:dd:96:9b:83:a1:ee:89:c4:5f:5e:bc:dd:da:44:a2:2f:
00:ef:02:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:06:01 2024 by rpki-client on console-fra.rpki-client.org