Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/9OaWQN41EivsfpjACTkUPF6u9F8.roa
File: 9OaWQN41EivsfpjACTkUPF6u9F8.roa (raw, json)
Hash identifier: Jrphsqyhqo/rDYjvXcA4Qdc5W5HDlx4bDqYb46mj9ek=
Subject key identifier: F4:E6:96:40:DE:35:12:2B:EC:7E:98:C0:09:39:14:3C:5E:AE:F4:5F
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 018CC56EDD4772977F8061088273E0627DBD
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/9OaWQN41EivsfpjACTkUPF6u9F8.roa
Signing time: Mon 01 Jan 2024 14:30:26 +0000
ROA not before: Mon 01 Jan 2024 14:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 45.151.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:dd:47:72:97:7f:80:61:08:82:73:e0:62:7d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Jan 1 14:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4e69640de35122bec7e98c00939143c5eaef45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c7:9a:49:6f:52:c3:95:0b:9a:c4:2a:33:e0:
01:8f:74:d8:f7:4c:5f:96:47:df:0f:8a:1c:e2:52:
e4:a1:d8:9b:b8:df:f8:0c:61:88:5e:aa:4e:48:e8:
2d:75:56:46:46:22:7a:06:9f:a5:48:67:b9:f6:25:
d4:c5:1d:d8:34:4e:69:53:1d:6e:68:8e:71:6f:37:
8b:0f:e5:97:06:28:b6:93:1c:68:31:31:34:0b:b1:
3c:98:01:25:4d:eb:61:c9:3e:55:d8:f7:17:30:0f:
b8:e1:ff:10:e2:79:f9:3a:77:e1:c7:43:38:49:82:
5e:40:47:96:e0:b4:35:aa:e8:e2:d6:98:9b:97:3d:
56:56:2e:4e:56:61:24:dc:14:78:bb:72:ca:39:0b:
59:43:5a:f5:13:16:49:ea:ee:72:ed:32:29:4c:e9:
4e:bf:84:af:a7:18:75:c7:c2:3b:f0:f6:5c:ef:da:
c2:2a:5b:9d:10:f3:42:1f:ea:03:fd:b1:f9:55:71:
65:98:64:d5:b1:bf:ea:25:1c:2a:53:80:27:60:a7:
8f:b0:11:35:94:b6:cc:21:46:80:97:0a:87:6b:bf:
5d:19:bd:a6:60:e4:7b:85:28:28:66:5f:fd:95:21:
b7:b7:c8:b6:e2:ee:a4:1b:90:64:5f:bb:cd:f2:ac:
76:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E6:96:40:DE:35:12:2B:EC:7E:98:C0:09:39:14:3C:5E:AE:F4:5F
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/9OaWQN41EivsfpjACTkUPF6u9F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.143.0/24
Signature Algorithm: sha256WithRSAEncryption
04:02:95:89:36:34:dc:7f:26:b2:a9:be:cc:e8:ab:1b:32:ae:
76:d8:8b:d9:d7:0f:ab:3b:89:34:c0:b5:22:b7:e6:83:65:2d:
4d:24:71:25:0c:d1:e1:24:25:e7:39:cb:6d:73:a2:ad:5d:d9:
9f:f4:4f:c4:2d:15:83:1d:f5:8b:ee:fe:ec:c6:e2:e0:b4:47:
a5:92:6f:b8:59:9a:c6:65:5f:42:45:4c:5a:2f:a0:47:2a:f2:
63:2a:1f:75:d6:6d:68:ae:55:49:37:93:2b:c6:b9:bf:dc:bd:
9f:b6:7e:d6:77:55:27:ea:1d:12:0a:08:a8:18:62:2c:27:59:
a7:3e:d7:b9:88:6e:fd:0f:bf:5e:61:31:bf:cb:f5:dc:a7:59:
cf:e7:02:61:29:4a:0e:e3:f8:d7:63:8d:19:a5:b6:c7:56:5c:
82:b5:1a:ca:a4:11:65:52:03:8f:24:76:09:7c:49:39:d7:95:
5b:31:0d:89:af:af:39:04:2b:24:6b:0e:6d:10:01:a7:20:9d:
a4:57:b1:98:a3:db:36:12:0f:be:b0:ce:64:8a:af:8e:c4:19:
0b:fb:c4:ee:1e:2f:b8:e2:77:cb:34:bd:9f:a9:58:9f:d6:35:
08:0e:4b:62:db:70:23:72:2b:97:13:02:8e:b1:16:b8:64:19:
ad:ab:ea:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:44:31 2024 by rpki-client on console-fra.rpki-client.org