Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/fax8_EgWoSpGPhavBMbBxIZhtZw.roa
File: fax8_EgWoSpGPhavBMbBxIZhtZw.roa (raw, json)
Hash identifier: LomWPniyX6P90Ba/X+68BcP+DGyqHH/IXISosg/uR2Y=
Subject key identifier: 7D:AC:7C:FC:48:16:A1:2A:46:3E:16:AF:04:C6:C1:C4:86:61:B5:9C
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 018CC5DC6BA58E475E5B7E67BFDA7D6EFB17
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/fax8_EgWoSpGPhavBMbBxIZhtZw.roa
Signing time: Mon 01 Jan 2024 16:30:06 +0000
ROA not before: Mon 01 Jan 2024 16:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 45.95.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:6b:a5:8e:47:5e:5b:7e:67:bf:da:7d:6e:fb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Jan 1 16:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dac7cfc4816a12a463e16af04c6c1c48661b59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:81:0f:d4:e7:6f:e9:78:8e:6c:1d:ed:93:a9:
91:27:0a:23:ea:eb:c9:f0:d0:f3:3f:13:01:1c:61:
0c:f7:c7:ed:99:bf:8d:fc:2c:78:9a:46:e7:e6:1b:
af:e4:39:53:fb:c6:b1:24:dc:f6:31:32:d1:6d:27:
29:0b:6a:f0:f5:6a:c5:8f:47:55:16:77:7d:3e:cf:
b4:a3:ee:1a:ee:5a:1d:de:6d:5d:23:fe:73:a8:86:
2f:61:b5:89:26:cb:2c:d8:08:42:91:a2:b1:f9:ae:
47:2c:e3:94:6b:c9:51:81:90:5c:50:8e:ca:90:4e:
44:4c:63:bc:69:c9:90:8f:4b:fa:7b:97:4e:18:b7:
8e:58:ee:f8:ca:38:06:6c:15:7a:33:02:38:11:69:
d6:13:39:63:70:f0:9d:9b:06:25:a2:7e:42:14:45:
89:ba:3a:0a:77:54:7f:2b:3c:f6:1e:1b:d3:42:d6:
4a:cf:e2:92:a2:cf:c2:8c:65:e2:06:d9:ce:c3:aa:
27:83:b7:d8:26:cd:7f:84:c5:50:6a:d0:b1:34:b7:
ca:af:ff:58:7f:90:c4:b7:ab:e7:33:fd:a5:fc:5a:
c6:e4:d0:f5:b8:6d:fa:83:90:51:b0:41:24:81:a0:
1a:e5:b2:2a:7d:34:91:8e:05:94:52:03:82:a5:53:
24:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AC:7C:FC:48:16:A1:2A:46:3E:16:AF:04:C6:C1:C4:86:61:B5:9C
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/fax8_EgWoSpGPhavBMbBxIZhtZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:b2:a0:5c:8f:25:81:ad:93:05:92:bb:69:6f:ce:af:d6:23:
43:00:ba:a6:19:56:ec:59:0a:9a:dc:c8:ce:89:f6:e8:0e:3d:
94:63:e3:a9:9d:8e:2d:68:31:85:ee:7e:8b:99:34:bb:ee:7c:
e3:53:81:ed:5b:ae:b6:65:b4:17:39:5d:86:5c:94:28:d8:cf:
a7:8f:9d:b9:aa:54:de:a3:32:4d:b5:d4:e5:2d:61:ab:33:30:
15:10:3e:27:4e:56:7f:5a:ca:37:c2:72:69:38:1f:e0:bd:25:
68:85:14:5e:2d:ef:b0:67:46:4a:53:ba:72:20:9a:17:29:71:
70:3b:00:7c:19:1b:cd:d0:39:13:f8:85:24:24:a3:1d:23:61:
5c:9c:eb:ef:18:30:db:1f:4b:0f:ed:9d:1f:bb:e7:92:f3:79:
1e:10:73:fb:67:bf:31:90:ca:b5:55:ec:27:11:70:a5:9c:ae:
68:42:ac:59:a5:b5:c7:6c:fe:15:ab:e3:a6:81:be:e8:59:ef:
05:82:93:0a:08:26:aa:79:12:83:49:6a:47:89:28:9f:22:7c:
ef:dd:57:f0:67:43:1d:8c:59:a1:63:c6:8d:b5:7b:2e:8b:a9:
6b:3f:68:44:34:98:1b:de:15:49:d5:14:e4:8f:86:11:8f:63:
e2:ca:c2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:24:28 2024 by rpki-client on console-ams.rpki-client.org