Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/b7Y_gI0I3PIV6lkWnPQlOX2fl5k.roa
File: b7Y_gI0I3PIV6lkWnPQlOX2fl5k.roa (raw, json)
Hash identifier: SKdnTOzk9swEpLrPEa6X/fecTH3ZNo40QS2YVraotjY=
Subject key identifier: 6F:B6:3F:80:8D:08:DC:F2:15:EA:59:16:9C:F4:25:39:7D:9F:97:99
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC8012D22AA2ACDB823DBBB4743ED578D
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/b7Y_gI0I3PIV6lkWnPQlOX2fl5k.roa
Signing time: Tue 02 Jan 2024 02:29:29 +0000
ROA not before: Tue 02 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56323
IP address blocks: 159.148.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:2d:22:aa:2a:cd:b8:23:db:bb:47:43:ed:57:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fb63f808d08dcf215ea59169cf425397d9f9799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:81:fc:2e:20:65:02:25:5f:e3:5c:dd:fb:
b7:92:44:c2:5e:05:b1:09:54:8c:59:82:70:fb:d6:
ed:f4:40:d9:4e:52:5e:b9:3e:e7:36:41:63:aa:42:
77:ec:3a:3c:4b:7e:bf:5b:7c:4d:47:95:78:ab:0f:
2b:46:d6:1a:75:d2:c1:37:1e:d2:03:d0:1d:65:04:
ca:48:83:10:63:a7:63:76:bc:0a:67:0e:a4:68:68:
60:c6:ef:54:76:1a:06:74:8f:a5:12:72:2b:3a:87:
57:60:2e:bc:c7:38:09:ba:21:97:d2:f5:8a:0c:75:
cf:dd:ed:02:37:6d:b8:7e:91:07:76:25:90:49:2b:
1d:14:fc:a8:64:c4:f5:fb:63:64:50:bb:08:98:59:
6d:da:86:1e:ec:25:52:d5:b6:fa:bd:fe:2b:fc:8d:
9a:4a:32:4f:4e:be:43:a7:16:51:8c:f2:21:b1:d4:
7d:0e:fa:3c:51:4d:22:2a:7e:93:37:b6:d5:89:62:
65:b1:39:fc:79:30:f7:73:b8:b7:32:f7:0f:98:fb:
dc:7b:cc:26:50:ff:63:99:d2:5d:e2:3b:15:dd:34:
70:9c:be:27:43:1a:fc:a8:4a:86:80:52:5b:97:d1:
66:ae:a9:89:09:a9:b4:8b:ec:2c:c1:8d:69:b7:6b:
b5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B6:3F:80:8D:08:DC:F2:15:EA:59:16:9C:F4:25:39:7D:9F:97:99
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/b7Y_gI0I3PIV6lkWnPQlOX2fl5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.141.0/24
Signature Algorithm: sha256WithRSAEncryption
45:eb:ac:c3:e5:48:53:80:d4:d3:8e:95:d5:77:38:bb:3a:d4:
44:fe:8a:1c:3c:01:6f:cf:b8:a3:07:d3:15:76:85:2a:ec:73:
89:5c:65:42:e1:f2:3d:49:c2:88:74:b6:d0:03:90:8b:d3:1b:
df:80:e0:a6:17:72:3b:4e:db:18:b4:34:8b:ac:3c:58:97:8f:
05:b5:a3:86:29:0d:97:24:68:5a:2a:31:68:75:eb:d0:46:33:
92:5b:1c:65:b5:ed:44:1e:71:2e:ac:1e:68:9c:ee:b5:fa:da:
cd:59:17:3b:2e:2b:a7:74:cf:1a:0d:e3:11:dd:24:3d:d8:c8:
24:00:c7:47:3b:3f:73:98:0d:48:0d:2d:0b:25:9a:ad:f3:87:
a1:d5:4c:2f:a7:43:1f:5d:a3:f2:63:cf:4e:2c:74:a0:16:ff:
b1:11:15:7c:46:bd:d5:fb:45:11:4c:6c:08:b3:4b:ce:07:f5:
3b:65:f2:76:5a:0a:62:34:8b:8f:57:24:43:ac:6e:77:13:45:
ba:b7:08:78:6d:32:0d:08:e3:5d:da:38:87:46:24:76:5b:da:
dd:54:2b:7e:33:d0:fe:c9:21:27:d0:10:5a:30:22:b3:dd:8f:
c9:78:e9:9a:41:0b:39:37:c9:31:1f:36:92:75:a4:76:a3:84:
8e:63:fa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:17:01 2024 by rpki-client on console-ams.rpki-client.org