Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/E7-sEaUWhZJVl-10TADMiN82oP8.roa
File: E7-sEaUWhZJVl-10TADMiN82oP8.roa (raw, json)
Hash identifier: iiBWVKOg2GEAMKRECtwjPNHstqTUtT2Nm071TtC6N98=
Subject key identifier: 13:BF:AC:11:A5:16:85:92:55:97:ED:74:4C:00:CC:88:DF:36:A0:FF
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 018F726FE0A240BD8DF7C22878322687FF77
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/E7-sEaUWhZJVl-10TADMiN82oP8.roa
Signing time: Mon 13 May 2024 14:51:25 +0000
ROA not before: Mon 13 May 2024 14:51:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152700
IP address blocks: 45.157.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:72:6f:e0:a2:40:bd:8d:f7:c2:28:78:32:26:87:ff:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: May 13 14:51:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13bfac11a51685925597ed744c00cc88df36a0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:1f:5b:41:07:f9:bf:ca:5a:b8:eb:d3:51:
cc:34:28:bd:00:a9:2b:9c:b8:5b:5f:d4:fd:2c:54:
6f:b0:26:ca:8d:79:13:b8:df:20:e1:18:87:42:67:
3a:2b:23:a4:e0:ac:9d:ee:98:93:55:95:83:c9:3f:
eb:51:a4:72:1e:d8:52:69:a6:6a:54:47:7d:76:2f:
a1:92:f9:c7:a4:21:cb:bc:0e:55:d2:e7:26:38:59:
3a:f0:98:75:d7:d5:a6:71:34:fe:aa:1a:2a:5a:b9:
53:e4:8c:5e:ad:e4:ff:ce:b1:89:18:b2:5f:1d:db:
3e:df:d2:66:d9:2e:d8:b3:7e:d7:58:30:fb:83:e3:
48:40:25:fc:82:08:56:60:62:df:49:26:e8:4a:0f:
88:ea:b3:15:57:1c:89:b1:6b:e6:53:25:b6:49:78:
67:a7:d3:fe:03:82:57:7e:aa:56:54:42:dd:b6:27:
bb:d8:0c:28:92:78:89:22:ce:eb:16:29:b3:5f:c8:
90:a2:00:07:6d:60:a7:46:91:fc:97:e3:09:21:43:
ca:0c:f7:4a:48:b4:88:97:10:9c:dc:c8:52:b7:e4:
47:5a:43:ff:cd:ff:99:f9:c7:8b:81:b3:a1:11:87:
33:58:6f:3f:60:0c:59:2e:ed:92:97:77:e0:4f:fd:
06:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BF:AC:11:A5:16:85:92:55:97:ED:74:4C:00:CC:88:DF:36:A0:FF
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/E7-sEaUWhZJVl-10TADMiN82oP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.137.0/24
Signature Algorithm: sha256WithRSAEncryption
42:9f:21:73:18:0a:98:6d:f0:74:0d:0c:99:40:af:9f:30:2e:
64:69:4a:7a:2f:e5:5c:77:56:2b:e7:a1:f9:b1:24:1d:55:05:
55:12:63:05:33:76:e8:d5:5e:1b:de:17:1e:29:3b:69:a0:d7:
c6:30:5d:22:03:73:88:6f:08:90:2b:55:cc:5b:33:35:6c:c5:
f3:8a:65:d5:45:e0:c4:6c:fe:74:35:ca:87:49:ea:b5:fb:4c:
ad:3c:a0:4f:32:6b:5c:fc:be:c4:41:4b:26:52:11:8e:9a:7b:
35:db:4e:e0:df:64:8c:80:3e:05:30:23:54:af:8f:8b:57:a4:
f0:2c:87:3e:5b:87:cb:95:3a:5b:c1:85:21:38:eb:59:00:b5:
c7:0c:b5:a7:16:65:38:9c:66:60:c5:1d:99:1e:21:74:3b:ce:
fa:f4:ee:57:8f:fb:40:d6:37:a2:4e:0a:39:f3:39:f6:86:b0:
1f:6e:30:a0:d5:c7:c5:ae:c7:8a:1b:87:b0:6b:1e:72:11:74:
95:81:09:53:28:be:0c:03:7b:5e:1a:37:83:be:60:ec:07:28:
bf:74:ec:1e:50:a4:32:bf:47:92:a0:ba:bf:f3:48:78:29:71:
99:a5:c4:d2:a1:e5:f8:1d:a3:77:c7:81:2a:17:2d:e0:cc:2d:
aa:08:b3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:22:44 2024 by rpki-client on console-ams.rpki-client.org