Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/jkU6cuw43j_c90ko1C71erePt58.roa
File: jkU6cuw43j_c90ko1C71erePt58.roa (raw, json)
Hash identifier: FmJ+238IRqYM20rQG1RakLQRaHy6DTtWd1jh19grmNU=
Subject key identifier: 8E:45:3A:72:EC:38:DE:3F:DC:F7:49:28:D4:2E:F5:7A:B7:8F:B7:9F
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 018E8056A2ECB19D857B5EDAB5C66D522B58
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/jkU6cuw43j_c90ko1C71erePt58.roa
Signing time: Wed 27 Mar 2024 14:35:45 +0000
ROA not before: Wed 27 Mar 2024 14:35:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212137
IP address blocks: 45.150.56.0/24 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:56:a2:ec:b1:9d:85:7b:5e:da:b5:c6:6d:52:2b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Mar 27 14:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e453a72ec38de3fdcf74928d42ef57ab78fb79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:81:d6:bd:4b:5e:ee:73:b3:47:f6:08:0b:
5b:61:c2:8e:45:df:32:05:a7:96:c3:fe:9d:9c:bf:
d5:53:d9:98:07:43:7d:bb:f4:5a:2e:ed:c4:7d:4c:
50:83:d4:dd:65:2b:e7:97:8d:c4:75:d6:7e:67:86:
88:2e:db:91:d7:48:a1:c5:61:0c:93:d4:da:48:4c:
f2:6f:c8:ef:6d:b4:2f:88:46:51:5d:d9:5e:1e:78:
cb:25:66:cc:e2:73:7b:eb:d7:d7:19:76:86:68:f5:
11:8f:bb:1a:da:d0:4a:7b:cb:be:9e:13:ae:81:0f:
53:52:6a:7f:9d:ce:af:8a:6e:39:69:96:df:30:2c:
6e:3a:c7:65:dc:4a:de:3b:cd:d8:f5:05:30:b5:b9:
4e:2b:49:0a:67:e8:15:86:90:29:4f:81:78:87:56:
39:40:12:e2:c0:3a:19:da:e4:4d:bc:fb:b8:40:d9:
03:7d:9a:f4:06:50:7a:21:cd:c7:f2:26:dc:f0:00:
18:77:7a:30:2b:b2:8f:64:51:97:ad:6d:bf:ce:4c:
d8:98:6e:7c:08:ec:59:47:4e:87:54:ed:09:39:90:
56:40:69:34:45:b1:0b:82:a8:dd:97:85:4a:7e:50:
b9:f7:83:1b:a7:e9:7a:cb:d4:e3:a3:38:bb:de:a9:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:45:3A:72:EC:38:DE:3F:DC:F7:49:28:D4:2E:F5:7A:B7:8F:B7:9F
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/jkU6cuw43j_c90ko1C71erePt58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.56.0/24
Signature Algorithm: sha256WithRSAEncryption
44:2f:8a:8e:14:00:2f:1d:67:ed:f2:b1:ef:ea:35:ca:46:18:
f2:be:78:c0:2c:1d:59:13:70:99:ff:80:83:cf:7d:57:fc:74:
ba:85:07:04:d5:87:82:64:5e:e8:ba:99:c9:5c:cf:f7:97:fc:
36:43:11:b6:84:9a:ff:10:d7:fc:1f:e2:c2:62:bd:ed:36:40:
c4:c9:9c:6b:a5:f2:2f:ea:13:da:74:e0:2d:dc:e6:4f:a5:7f:
a2:62:fc:4d:ae:b1:ac:83:2b:7d:f9:38:6d:5b:3f:a3:b4:78:
29:25:c2:86:41:21:92:78:7e:de:7c:29:a7:68:85:6f:6d:28:
4e:8f:08:d3:13:ee:c7:6f:92:8f:2f:4e:54:78:3b:54:91:ce:
a6:98:db:ab:bb:b9:75:8a:0c:a3:59:e7:7e:71:4a:56:94:72:
b5:17:0f:2b:4a:58:d9:fb:11:c3:91:11:cb:43:be:82:2b:3e:
10:ef:ff:eb:e7:77:02:1b:2a:87:fd:6e:13:63:5f:90:3c:7f:
af:f4:66:b7:66:4a:c1:e1:e2:80:16:84:e3:1e:d2:c6:1a:4c:
95:4e:5f:78:71:83:5b:b5:92:d6:43:cd:29:7a:31:71:cf:de:
59:14:6a:41:19:f7:8a:41:07:89:99:96:da:72:61:38:bb:89:
cd:13:2c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:04:55 2024 by rpki-client on console-fra.rpki-client.org