Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/SRlruqAxEZyIVZjVfzPAfE49OhE.roa
File: SRlruqAxEZyIVZjVfzPAfE49OhE.roa (raw, json)
Hash identifier: 7MjXPOeEELriJgC0OWzuxNfLkiGeaP+W/BeTtGDvFDg=
Subject key identifier: 49:19:6B:BA:A0:31:11:9C:88:55:98:D5:7F:33:C0:7C:4E:3D:3A:11
Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial: 018CC49242A0A5BD1974C94A0FEC1C020B33
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/SRlruqAxEZyIVZjVfzPAfE49OhE.roa
Signing time: Mon 01 Jan 2024 10:29:28 +0000
ROA not before: Mon 01 Jan 2024 10:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64286
IP address blocks: 45.139.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:42:a0:a5:bd:19:74:c9:4a:0f:ec:1c:02:0b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Validity
Not Before: Jan 1 10:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49196bbaa031119c885598d57f33c07c4e3d3a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e1:9c:3d:98:c8:79:0f:c2:7e:69:7a:20:e5:
bb:27:2b:d4:ad:d7:f1:25:1a:d6:ab:5f:4d:8c:59:
cc:72:95:be:41:45:d9:dd:e0:73:ed:20:57:50:bf:
89:af:9d:84:30:40:e1:d4:59:37:40:9d:0b:11:52:
14:66:cb:46:77:e6:33:c2:62:11:02:75:33:93:43:
7b:14:f3:98:64:56:64:ee:8b:b8:51:b2:fc:c7:1c:
da:4f:ad:65:c4:40:f7:6e:94:20:de:b2:6d:5c:0c:
87:69:41:76:30:87:37:19:a2:c6:8d:b1:68:bd:03:
90:f2:17:2c:9f:bd:51:38:f2:38:d4:cd:91:4d:c8:
27:90:bf:7a:b8:e3:a7:d8:66:fc:60:2a:c5:15:87:
eb:b8:c9:a0:71:f6:b8:86:c9:a5:01:4d:3e:5b:e2:
0e:d5:a4:5b:1a:09:23:9e:b4:16:60:46:4c:75:cf:
a4:de:8e:33:d5:ed:91:19:54:c6:78:64:a1:00:c6:
0e:37:77:ec:4f:0d:5d:95:97:19:15:36:2e:2c:21:
4b:17:55:84:54:78:36:f8:82:4a:74:ec:56:23:9b:
66:cd:e0:0c:62:12:23:ab:e1:bb:94:8e:33:ad:e7:
20:36:20:df:51:ed:68:2f:71:fb:6f:3e:b5:06:12:
09:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:19:6B:BA:A0:31:11:9C:88:55:98:D5:7F:33:C0:7C:4E:3D:3A:11
X509v3 Authority Key Identifier:
keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/SRlruqAxEZyIVZjVfzPAfE49OhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.210.0/24
Signature Algorithm: sha256WithRSAEncryption
52:f8:73:24:b3:31:f2:21:72:a1:fb:2b:4d:8d:63:8d:b3:8d:
30:26:22:fd:a3:6f:51:1c:02:74:3e:7c:e5:7b:52:cd:ff:9f:
be:3c:c2:51:4f:22:5f:81:29:30:08:34:0b:cc:c4:5c:90:0c:
61:01:95:44:69:1c:cc:1d:b9:0d:d0:bb:6d:06:18:0e:51:73:
55:1d:7c:16:92:4b:51:e1:07:c1:0c:48:49:b4:14:07:7c:06:
f9:33:d6:c0:2f:af:a2:ef:7d:30:27:c5:45:03:56:70:29:c9:
90:f1:ac:8d:c8:93:5d:80:9e:f2:45:8a:42:24:32:44:1f:49:
02:d7:a1:d1:86:ba:00:6f:38:43:c8:ee:31:1d:33:f7:7a:dc:
7f:7d:d4:5b:29:6b:79:d0:ce:1a:f5:c2:d4:77:4a:4b:87:96:
dd:50:ff:f4:bf:c3:f3:21:fd:38:23:fe:b2:0f:07:78:dc:99:
ad:8a:d2:f4:fa:d9:ae:e8:24:72:93:72:98:2d:07:23:34:47:
99:55:41:5c:61:75:91:b4:c3:a7:e6:90:fc:71:11:e7:07:2b:
64:d9:37:3a:7f:3e:8c:d1:17:d9:1d:da:40:ed:d3:5c:bc:2c:
f5:40:5e:7a:eb:30:63:3b:b3:0e:78:be:ff:ea:c6:b8:a1:2c:
84:14:1e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:24:33 2024 by rpki-client on console-fra.rpki-client.org