Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/_a_r4t5dYfXBBcDGS13ZYZFKxnQ.roa
File: _a_r4t5dYfXBBcDGS13ZYZFKxnQ.roa (raw, json)
Hash identifier: tWmvCMs8oNxH8YGeX7kv27DqpUuIt2X4vlnrwAUVyOA=
Subject key identifier: FD:AF:EB:E2:DE:5D:61:F5:C1:05:C0:C6:4B:5D:D9:61:91:4A:C6:74
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018F9B4162BB8DBED00D8857ED9ED4B40C5F
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/_a_r4t5dYfXBBcDGS13ZYZFKxnQ.roa
Signing time: Tue 21 May 2024 13:05:04 +0000
ROA not before: Tue 21 May 2024 13:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57494
IP address blocks: 147.45.102.0/24 maxlen: 24
147.45.147.0/24 maxlen: 24
147.45.158.0/24 maxlen: 24
147.45.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:41:62:bb:8d:be:d0:0d:88:57:ed:9e:d4:b4:0c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: May 21 13:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdafebe2de5d61f5c105c0c64b5dd961914ac674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:14:4d:dc:43:be:49:14:29:db:ff:38:4d:
03:09:99:ff:75:eb:56:77:e3:20:61:11:e6:7b:4f:
61:5d:34:5e:d4:b6:88:f7:5f:0b:44:ad:e0:17:6e:
9c:44:16:e9:61:be:f5:45:de:09:3c:8a:a2:1f:02:
ca:c8:28:50:6f:64:21:6f:9c:d6:56:27:1e:21:cf:
75:e4:9c:3d:d8:c6:d0:cf:83:99:49:0e:2a:23:90:
2a:d2:d3:08:fc:e3:16:9b:35:78:04:89:48:78:1d:
d7:d2:13:5d:bd:f0:d6:0c:c9:a7:4e:d0:bf:78:97:
d4:01:54:4e:04:d6:24:82:00:d8:47:8f:7e:7b:74:
ad:b1:eb:24:49:65:78:2b:11:aa:8f:74:1e:36:a6:
ac:58:6f:78:36:64:b1:c7:3d:c9:b3:e0:bc:5a:b0:
be:46:dc:22:b4:ce:44:70:0a:bc:d2:c1:44:7d:22:
b9:14:69:da:f8:9b:b3:93:e8:a4:c0:93:99:6a:f0:
be:3e:1d:a8:54:89:f3:bd:2a:8b:ae:09:83:11:e2:
f5:b2:71:db:b9:4f:05:86:a2:07:73:aa:5e:f2:67:
1d:54:ae:c2:bd:2b:a8:18:e3:3a:aa:bd:07:ea:88:
7f:ab:4d:b3:d2:3f:53:38:b9:21:12:fa:0d:0b:3d:
1b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AF:EB:E2:DE:5D:61:F5:C1:05:C0:C6:4B:5D:D9:61:91:4A:C6:74
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/_a_r4t5dYfXBBcDGS13ZYZFKxnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.102.0/24
147.45.147.0/24
147.45.158.0/24
147.45.161.0/24
Signature Algorithm: sha256WithRSAEncryption
75:89:f9:10:8e:5c:95:e8:a3:6f:39:9a:c9:8b:7c:d7:a6:22:
a8:53:8a:8d:ea:e9:23:3b:d1:cf:75:7d:08:fe:f7:ba:8f:92:
18:d7:e4:4c:65:77:71:56:b1:2c:cf:79:78:6b:1c:b5:22:32:
c6:17:25:e8:f9:3d:9e:b1:d3:56:1e:10:4f:b4:a3:e9:32:f1:
15:c4:7d:44:88:fa:ba:28:26:20:d8:43:a7:53:41:be:1c:73:
a2:91:b2:ba:6f:fd:0e:62:47:9c:7d:52:d1:49:89:bc:d2:72:
1e:d9:f8:10:1f:e5:29:86:cb:c8:2b:fa:7a:dc:72:6d:0a:f8:
ce:0b:92:c5:3d:93:c8:ee:a8:ca:4a:b1:e9:c9:37:40:73:d3:
6e:72:d9:40:85:32:21:56:fa:0b:15:ab:d9:f9:52:5c:97:be:
e4:86:88:96:8d:78:5b:6c:b0:65:ec:e8:46:4a:87:32:e1:e3:
76:97:35:b1:32:b0:dc:89:d1:54:30:1b:71:1c:de:c4:07:75:
97:b7:5a:97:5d:a9:01:f4:a3:5e:46:d4:50:0b:6e:c7:95:e9:
7f:8d:3a:a7:a6:8e:e1:02:8c:02:34:b9:36:7c:6b:13:9c:d0:
c3:1a:36:bb:47:a0:00:69:0e:7c:68:8f:df:f9:16:6b:25:8b:
26:cd:1a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:40:12 2024 by rpki-client on console-fra.rpki-client.org