Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3yf8yRwIxNBkcEKtsB-ajLPQPqM.roa
File: 3yf8yRwIxNBkcEKtsB-ajLPQPqM.roa (raw, json)
Hash identifier: oABO1IgSaDTVgZwI8+cKGDa7vnqCAQUX3hk8i34aXlg=
Subject key identifier: DF:27:FC:C9:1C:08:C4:D0:64:70:42:AD:B0:1F:9A:8C:B3:D0:3E:A3
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FAF783CA5D458DBBEF3A150CF37B0
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3yf8yRwIxNBkcEKtsB-ajLPQPqM.roa
Signing time: Tue 02 Jan 2024 04:30:11 +0000
ROA not before: Tue 02 Jan 2024 04:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142299
IP address blocks: 45.83.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:af:78:3c:a5:d4:58:db:be:f3:a1:50:cf:37:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df27fcc91c08c4d0647042adb01f9a8cb3d03ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:19:6a:f2:c8:a9:d7:31:43:bb:3c:f3:13:
81:5c:2e:57:74:16:86:8c:0e:72:4c:be:40:f3:cc:
49:5d:00:25:ed:a6:6c:d0:cf:f1:a8:5b:d1:4a:5d:
d2:1d:70:c5:1b:d0:0f:c4:1e:d5:52:3c:82:4a:9f:
61:d0:38:66:40:6b:fd:31:b0:26:41:f3:12:a1:96:
f0:9d:9e:26:20:12:cf:b3:d8:d9:59:5e:7a:79:7e:
37:e3:06:71:da:4f:4b:f9:e2:9e:42:5a:9b:be:a2:
89:f3:d6:a1:b1:c0:1e:2a:17:6d:78:74:4d:36:20:
46:ab:0a:41:23:60:88:2f:0d:b2:32:ce:94:37:f3:
8e:8c:ec:5b:36:b3:ea:64:88:57:5b:d5:b6:82:f6:
5f:fc:f9:e9:23:bb:2c:70:3a:61:ed:83:85:4f:51:
68:ff:0b:d8:ea:bf:a9:07:5a:4c:ad:b4:60:7e:f2:
25:35:e5:77:e8:1a:59:f8:95:e1:8e:5b:60:92:61:
17:9c:92:a1:a4:f0:40:01:80:05:fc:b7:b2:00:ce:
76:79:2c:5d:3c:db:02:33:09:c1:ba:7e:d8:3f:91:
6b:37:77:a3:7c:58:89:f4:9a:9a:f1:ad:b1:b8:e6:
e5:8f:d9:49:4f:68:9f:46:79:03:9e:50:27:4a:f0:
88:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:27:FC:C9:1C:08:C4:D0:64:70:42:AD:B0:1F:9A:8C:B3:D0:3E:A3
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3yf8yRwIxNBkcEKtsB-ajLPQPqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.207.0/24
Signature Algorithm: sha256WithRSAEncryption
63:32:a0:a6:d8:3a:09:92:71:5a:cd:c5:ca:05:d6:6c:f2:42:
8f:bb:f8:d6:c5:cf:a8:e8:76:43:91:05:4a:20:7a:59:85:e9:
30:30:f1:59:bf:e8:14:de:39:05:5d:50:48:89:59:7d:16:09:
3d:5f:e8:0b:a3:15:7a:02:2d:d7:35:44:f8:a4:7c:37:5d:85:
91:e8:78:54:69:20:f8:e2:c9:be:81:8a:d4:6e:ef:7c:11:31:
1c:c1:f2:11:b8:6d:af:51:2d:d7:bd:a8:29:ff:97:13:4a:52:
4c:fa:64:16:48:be:82:3f:14:9a:69:eb:07:c3:6b:9a:d2:fe:
0e:41:a1:92:d7:41:46:c4:69:f0:f3:cc:ee:f3:b2:ab:8b:44:
0c:00:c5:d6:01:18:d3:ff:fb:1f:17:3f:1b:08:c5:14:05:ee:
ea:6d:8c:8d:85:12:68:7a:a6:52:4b:dd:94:8e:11:7a:7e:48:
2c:b5:ad:a2:49:7e:1f:50:84:8d:a2:73:16:e0:d1:bd:af:9b:
f6:51:d3:17:af:7c:f0:de:59:fa:db:09:53:1d:ab:c3:9e:27:
2a:0a:ae:02:a2:4c:5a:74:f5:ef:84:80:3f:01:6d:a4:90:41:
34:c4:bd:fe:a8:01:30:f9:3d:e3:d5:16:b8:a9:13:29:a4:88:
b6:84:db:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:08:34 2024 by rpki-client on console-fra.rpki-client.org