Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/SvrHxEuWs6RRRcj6Lp1n6OndWtc.roa
File: SvrHxEuWs6RRRcj6Lp1n6OndWtc.roa (raw, json)
Hash identifier: +EhguYosVo0caT4oWI3Ik2d4EerKMNYy0G+ZPsa7+C8=
Subject key identifier: 4A:FA:C7:C4:4B:96:B3:A4:51:45:C8:FA:2E:9D:67:E8:E9:DD:5A:D7
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 018D8613698887A7385A59D02273D16512C6
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/SvrHxEuWs6RRRcj6Lp1n6OndWtc.roa
Signing time: Thu 08 Feb 2024 00:17:15 +0000
ROA not before: Thu 08 Feb 2024 00:17:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.158.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:86:13:69:88:87:a7:38:5a:59:d0:22:73:d1:65:12:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Feb 8 00:17:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4afac7c44b96b3a45145c8fa2e9d67e8e9dd5ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:86:9a:48:dd:5c:ab:07:e8:65:08:d1:a6:fe:
95:8f:18:1f:f3:06:01:3e:af:93:a7:cf:e2:20:93:
4c:2e:23:58:37:3a:a3:bb:13:e8:dc:10:33:c7:90:
a2:da:03:9a:ec:b3:05:dc:97:c5:34:c1:a6:ad:b9:
d0:95:6e:a9:d7:e4:2d:b1:09:27:c4:b7:fd:ed:90:
14:45:82:6c:61:80:fe:cb:1f:ed:f6:67:70:5a:5d:
aa:56:d8:69:8f:19:b7:5f:97:d4:b5:a5:33:3a:a4:
3c:fa:51:2c:bb:5b:6c:20:94:45:44:38:89:7a:81:
e5:64:17:c2:5d:47:9e:0c:2f:d3:47:cc:bd:e0:81:
17:08:60:64:de:1a:4d:1d:d2:b1:25:bc:03:e8:76:
4c:d2:43:96:a5:57:17:d9:c6:7e:ee:8f:78:f7:84:
8f:fc:19:4f:ac:b6:73:8b:e2:87:2e:ec:97:a8:ca:
08:82:22:08:f5:2e:7a:7e:9e:ad:9c:b4:e0:21:16:
68:fd:ef:c2:a9:2c:d9:53:89:f2:81:98:46:1e:bd:
e3:af:17:f1:11:8b:54:9d:d1:6f:6a:56:f7:60:c1:
34:36:9a:c1:8b:5e:1b:db:32:18:6e:06:66:85:a4:
65:11:f5:74:01:88:91:63:3f:b6:64:ac:1c:2a:cc:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FA:C7:C4:4B:96:B3:A4:51:45:C8:FA:2E:9D:67:E8:E9:DD:5A:D7
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/SvrHxEuWs6RRRcj6Lp1n6OndWtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.62.0/23
Signature Algorithm: sha256WithRSAEncryption
63:20:67:71:d3:c3:27:08:be:7e:26:f2:27:70:9b:2c:b3:ff:
ca:28:99:62:3b:72:87:b6:7d:ca:b9:35:ae:91:d8:2f:0d:6a:
fe:04:8a:c2:48:df:7d:fa:25:28:be:96:86:d5:7e:15:7e:d2:
cc:2c:14:ca:6c:b7:e7:4a:fc:39:21:ff:8a:2f:5a:47:60:6d:
9c:91:41:7a:e7:1e:44:2e:dc:ae:56:d5:4b:5e:81:0d:df:bd:
e3:bb:d6:01:55:76:c3:74:ec:76:ea:5e:53:90:82:d0:ce:31:
f4:88:13:52:66:23:29:24:41:db:c0:2b:e0:74:b4:f0:f8:09:
ed:1b:04:90:fe:11:20:b7:9d:e8:90:90:3f:48:af:3a:4d:02:
b3:ae:31:c6:f9:78:00:ec:65:c1:e0:03:2d:02:7e:a9:ec:2f:
78:76:3f:20:0c:51:87:18:48:30:ab:87:09:21:6e:68:a1:a9:
8a:5d:76:ef:97:9f:35:2f:1c:30:e0:f7:8e:5c:c2:8e:df:4c:
05:a0:35:1a:b0:45:53:c0:cc:69:05:a2:1a:81:b5:d6:db:c5:
dd:54:83:a4:8b:71:ba:93:94:25:9e:1f:ec:a3:23:d3:87:6e:
48:2d:2e:4a:42:1a:53:41:93:24:ed:f2:d1:67:9b:3a:c1:f6:
91:66:2f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:55:37 2024 by rpki-client on console-ams.rpki-client.org