Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/1-xvF7HnX1wo5tKptl7juUJjh_M8.roa
File: 1-xvF7HnX1wo5tKptl7juUJjh_M8.roa (raw, json)
Hash identifier: RGGCw0IRLSnuROtvm6sDYiePAFCZt4jfkow8BRmQXn0=
Subject key identifier: FB:1B:C5:EC:79:D7:D7:0A:39:B4:AA:6D:97:B8:EE:50:98:E1:FC:CF
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 018CC6B7FBF818D9D41FAE1BCE57BB5EDB6B
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/1-xvF7HnX1wo5tKptl7juUJjh_M8.roa
Signing time: Mon 01 Jan 2024 20:29:55 +0000
ROA not before: Mon 01 Jan 2024 20:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 45.66.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:fb:f8:18:d9:d4:1f:ae:1b:ce:57:bb:5e:db:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jan 1 20:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb1bc5ec79d7d70a39b4aa6d97b8ee5098e1fccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:2b:08:4d:68:e0:19:d0:da:d0:9a:03:3e:
7d:b8:c7:91:74:cb:e4:95:cf:23:59:85:13:67:5b:
85:da:04:ce:99:88:b8:cc:41:c2:ca:ad:0a:61:e8:
27:9f:30:ce:e7:c2:dd:69:a3:f1:4b:29:5b:44:70:
e2:0d:61:50:a4:7a:85:4e:b5:b9:9b:ec:a5:99:16:
23:a1:69:d6:94:82:1a:77:59:f4:6e:bb:0c:0c:21:
d9:41:f8:6b:7a:6f:63:62:83:e4:db:a7:35:a1:95:
34:1a:35:35:62:88:c3:3f:b6:b6:5d:62:95:7c:01:
dd:3c:05:1a:97:25:e2:56:33:93:d8:83:da:3f:da:
78:00:79:27:1c:78:2a:98:ad:59:ca:37:28:e0:91:
d4:54:0a:08:8f:12:e6:fb:80:60:6c:a8:59:7c:61:
04:df:de:10:64:6f:57:40:a0:c9:af:3d:eb:47:21:
3d:82:d5:8c:85:a3:84:ae:b4:49:39:3c:67:2e:d8:
36:2b:a6:de:dc:a6:04:c7:99:d5:62:f3:24:7d:02:
3a:bb:50:26:5e:9b:62:d9:7d:41:90:05:12:fd:4f:
b5:01:16:ba:da:8e:ac:39:ea:a9:a6:b1:ac:02:76:
45:aa:a2:03:06:86:21:65:01:d7:c5:ae:ac:c4:be:
12:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1B:C5:EC:79:D7:D7:0A:39:B4:AA:6D:97:B8:EE:50:98:E1:FC:CF
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/1-xvF7HnX1wo5tKptl7juUJjh_M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.94.0/23
Signature Algorithm: sha256WithRSAEncryption
72:f7:20:9e:ce:75:9f:2f:d7:7d:9f:3d:4c:ca:90:53:5e:b3:
25:9e:80:d8:e3:08:32:15:b4:00:da:74:87:15:9b:44:89:0e:
97:a2:83:ad:db:d2:a1:14:db:ba:c4:e9:d1:36:4d:71:35:90:
ae:c7:e2:c7:63:f8:2f:50:a7:15:18:2e:66:17:b1:fb:28:7e:
2e:47:8f:00:91:54:e1:b8:08:74:a4:a6:ec:42:92:80:be:c1:
18:67:f8:66:a7:e0:29:2d:ce:71:b5:57:95:d0:16:4d:76:20:
36:b7:d1:0e:3e:ab:ad:7c:f5:ec:c7:6d:fd:f1:6e:a3:09:42:
19:34:5b:26:53:49:0b:a2:ef:f8:86:0d:c1:19:3f:8c:9a:80:
06:96:6d:1a:4a:5f:68:58:2c:be:d0:08:71:a1:0d:fe:79:10:
a5:68:eb:b2:f7:2e:bc:0f:8d:c7:5e:7b:f3:35:64:0c:00:d2:
bc:d2:82:4e:2e:d0:61:da:3a:17:42:c7:d7:be:01:a6:45:c3:
63:c8:52:a8:19:fd:d2:91:5b:0e:09:9c:a1:53:5e:92:9a:03:
1a:39:d7:84:d2:1a:9c:f2:f1:fa:7d:cf:ae:41:f9:1b:20:2e:
e2:0c:e9:f3:ec:67:ab:e4:57:e5:5e:7d:6f:95:2c:54:ed:bd:
4f:bb:2f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:43:50 2024 by rpki-client on console-ams.rpki-client.org