Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/1-umA8kMpL9U8bveK4PhI8pC7Iy8.roa
File: 1-umA8kMpL9U8bveK4PhI8pC7Iy8.roa (raw, json)
Hash identifier: ZCM8IsKkXM5hxyavnTWPjTbiHEYG7akRI1xhRdgbwQU=
Subject key identifier: FA:E9:80:F2:43:29:2F:D5:3C:6E:F7:8A:E0:F8:48:F2:90:BB:23:2F
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 018CC26D073BE964908DF9B67BCDE13C6421
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/1-umA8kMpL9U8bveK4PhI8pC7Iy8.roa
Signing time: Mon 01 Jan 2024 00:29:34 +0000
ROA not before: Mon 01 Jan 2024 00:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397373
IP address blocks: 45.150.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:07:3b:e9:64:90:8d:f9:b6:7b:cd:e1:3c:64:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fae980f243292fd53c6ef78ae0f848f290bb232f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:72:ea:05:e3:64:61:57:5e:01:3c:c9:db:fb:
54:2b:07:84:a7:71:e0:f3:45:dc:a6:c0:59:75:8f:
12:ef:f3:e9:83:b2:d4:ab:5b:6f:bc:37:0d:bb:6f:
c4:58:9b:43:88:0c:26:b9:ab:d1:e7:d3:b3:d1:59:
05:5e:ef:bd:17:6a:48:34:c0:38:2f:b2:79:43:82:
e8:3b:47:d0:34:24:1f:f3:f4:e2:98:bc:db:11:af:
31:ed:02:89:f8:cc:f6:7d:34:16:5b:56:27:0a:a4:
aa:9e:83:65:ca:53:ca:1f:0a:29:66:07:db:c5:69:
8c:a7:c2:b3:88:27:5f:f8:b5:a7:be:ed:15:6e:bd:
4a:c1:cb:66:92:33:b2:55:7b:51:ca:8b:be:a3:82:
17:bc:19:e7:ef:cb:7a:7b:4a:a7:3c:81:87:6e:f8:
ad:1c:77:80:48:27:a3:45:f1:12:fc:0c:6d:28:ec:
25:ea:84:09:d5:89:0d:25:3c:08:77:9c:d1:2e:1a:
eb:19:74:7a:9c:45:b5:bd:f8:f0:5c:8f:7b:e3:a0:
46:8c:13:10:22:9b:75:bd:cc:77:29:34:24:51:73:
ca:30:5a:52:79:5d:2b:96:cc:11:84:38:be:b0:fa:
9a:98:d0:17:7a:70:26:99:8d:20:e8:d1:fd:c4:44:
d2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E9:80:F2:43:29:2F:D5:3C:6E:F7:8A:E0:F8:48:F2:90:BB:23:2F
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/1-umA8kMpL9U8bveK4PhI8pC7Iy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.23.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:12:33:fd:87:4a:ed:f6:28:cb:4b:f6:01:2a:8f:3f:a7:08:
68:7e:4e:25:20:2b:30:20:4e:79:d9:cb:f8:6c:c4:fd:4e:54:
c1:4f:99:bd:14:f4:79:b3:a5:ab:77:9a:1d:6f:9e:cc:50:96:
11:52:2c:ba:e0:4c:9e:ac:fa:4b:33:f0:e6:fc:50:31:89:07:
5f:3d:88:48:69:9e:69:3a:97:6f:2b:97:06:d8:5c:11:5d:72:
43:f3:3d:9c:a9:6d:63:f7:39:5e:21:48:e7:15:1f:4a:0d:47:
19:dc:33:9b:c4:f8:ab:e4:b1:56:a5:97:3a:ad:d0:41:3c:1b:
92:9e:46:09:c7:29:fa:f8:e2:e8:a0:f5:48:72:11:de:5a:b7:
47:51:b2:c5:d5:36:59:70:da:ef:a4:9d:3b:b0:50:56:84:fe:
64:7d:bd:a6:f0:92:fc:66:4e:b4:df:56:9a:12:70:02:c2:37:
e1:7f:62:c4:31:e6:7e:f1:34:f9:35:36:27:71:20:af:96:d5:
26:41:2b:ed:2c:c7:be:b5:c6:0c:92:f6:2a:74:9b:63:30:d7:
8a:0d:e9:c4:ea:0f:23:93:c3:40:d7:69:90:45:a3:83:60:de:
dd:d1:ba:61:ff:82:dd:c6:df:29:17:ce:a4:34:89:8e:6b:9b:
8e:dd:ef:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 19:20:54 2024 by rpki-client on console-fra.rpki-client.org