Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/Fu5YRa7ooMCtN05-zrg72RhB7XU.roa
File: Fu5YRa7ooMCtN05-zrg72RhB7XU.roa (raw, json)
Hash identifier: aZ3/MAYHLrv2vmex+u6JIyNKJLazuK9g6vNN/fANojY=
Subject key identifier: 16:EE:58:45:AE:E8:A0:C0:AD:37:4E:7E:CE:B8:3B:D9:18:41:ED:75
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 018CF5502C5AE167633759A51AB4386121A7
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/Fu5YRa7ooMCtN05-zrg72RhB7XU.roa
Signing time: Wed 10 Jan 2024 21:38:41 +0000
ROA not before: Wed 10 Jan 2024 21:38:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210447
IP address blocks: 45.144.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f5:50:2c:5a:e1:67:63:37:59:a5:1a:b4:38:61:21:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: Jan 10 21:38:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16ee5845aee8a0c0ad374e7eceb83bd91841ed75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:81:bd:b0:13:9b:bb:84:f1:79:24:aa:c9:bb:
73:f0:a4:04:0d:38:0f:48:54:25:fe:a2:a1:09:5f:
ba:04:0e:14:82:a8:d5:ed:c9:05:83:46:08:14:d4:
53:2a:95:fb:42:67:76:ea:5f:6c:8a:c0:a4:f2:5a:
38:8c:ae:c5:d0:1a:ac:c7:e1:8d:4c:dc:cf:a1:99:
96:57:93:fc:60:c0:4b:66:56:f4:f4:92:3b:d4:6d:
b2:65:67:46:9a:89:b3:f9:69:07:04:d1:68:c4:0f:
f7:a6:a5:5c:e0:14:04:be:96:18:7b:3d:d5:1e:25:
54:09:77:d7:f4:44:1a:f7:d9:a8:c5:48:48:fd:f9:
f3:63:64:e7:ba:8e:b7:eb:e0:3f:fd:90:8b:52:df:
70:b2:9b:34:bf:3b:01:c0:59:08:ad:c1:58:3f:aa:
99:6b:8c:0f:cf:e5:62:44:be:53:ff:cc:27:9a:d8:
ea:19:df:68:9c:f6:1d:1d:73:08:65:22:9a:aa:3c:
93:a3:e0:78:22:18:06:4f:9f:87:10:8a:d9:ca:63:
c5:64:c5:58:ec:4d:a9:05:65:e5:32:9d:e3:87:45:
48:de:df:26:50:25:15:91:f4:8a:2e:88:46:9a:af:
94:2f:b1:e5:17:bb:60:58:0e:aa:82:65:e6:ff:6d:
c1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EE:58:45:AE:E8:A0:C0:AD:37:4E:7E:CE:B8:3B:D9:18:41:ED:75
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/Fu5YRa7ooMCtN05-zrg72RhB7XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.43.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b9:31:2d:0b:82:3e:77:8a:f2:ae:04:0f:73:97:ed:cf:7f:
4b:34:01:f1:a4:2c:8a:c6:a8:6f:7a:e8:e8:7a:f0:c0:68:68:
54:d3:ca:db:89:da:84:98:c3:63:64:00:46:0e:f3:91:25:d3:
ed:b5:97:3d:d5:55:42:5d:5f:97:9b:49:71:7f:fa:37:38:74:
34:49:a0:ee:37:15:27:fb:37:1b:b2:90:ae:8c:4e:d3:34:b5:
8a:7f:da:05:c5:18:0b:ec:83:11:7e:f7:52:92:b1:d0:ba:e2:
86:2d:5b:de:d7:e2:76:66:fe:42:11:a5:b4:2f:9d:e0:d7:68:
33:73:1b:c2:55:a3:53:d0:96:f7:12:27:c0:28:10:1f:65:b9:
ab:a4:9e:fd:31:70:ff:1c:6f:b4:27:af:e0:f4:88:aa:d9:3f:
e3:2c:a4:e3:27:96:95:9a:82:12:c5:4b:6d:ca:b0:b5:08:55:
ab:f1:a1:cc:0d:ef:a0:57:27:4f:13:0e:3e:e2:5a:30:4c:39:
8b:d4:5a:1e:3c:ad:55:c6:f7:51:a2:bc:e5:31:6e:1a:4c:e1:
dd:c7:b4:61:82:c4:e7:44:ff:91:0b:98:36:da:4c:98:44:da:
1f:36:1f:d7:56:be:5e:6a:7f:d3:a9:f0:ab:7c:45:9d:21:8d:
9b:bb:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:45:36 2024 by rpki-client on console-ams.rpki-client.org