Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tae6zoDaNwyJcAmah96YaZzHUAU.roa
File: tae6zoDaNwyJcAmah96YaZzHUAU.roa (raw, json)
Hash identifier: heZDKIVCMK93XS5yUOIrK/zMqWC9PEtIPntSEIsAqlQ=
Subject key identifier: B5:A7:BA:CE:80:DA:37:0C:89:70:09:9A:87:DE:98:69:9C:C7:50:05
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CC9BC26FD0EFE6842046E5203749E671B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tae6zoDaNwyJcAmah96YaZzHUAU.roa
Signing time: Tue 02 Jan 2024 10:33:20 +0000
ROA not before: Tue 02 Jan 2024 10:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135377
IP address blocks: 45.128.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 06:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:26:fd:0e:fe:68:42:04:6e:52:03:74:9e:67:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 10:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5a7bace80da370c8970099a87de98699cc75005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:73:3d:ad:28:8e:29:04:7e:69:df:56:b1:
65:fc:06:6c:b6:f8:cb:e5:d5:eb:2a:c1:bd:20:b4:
24:3a:dc:5f:62:28:94:75:b1:95:b1:ea:42:ed:c4:
a3:2c:df:c2:46:f6:d3:2a:c5:4b:7d:a9:91:e7:ce:
ef:c0:28:57:b0:a9:d9:73:ea:f5:f1:a9:9b:e1:04:
51:28:4f:cf:0a:98:3f:a5:d2:ab:4d:8d:fa:c2:e9:
87:c5:d0:92:5a:5b:20:76:9a:05:d8:ba:eb:88:08:
f3:4b:42:b4:82:a1:62:58:65:b2:72:99:57:2c:ba:
7c:57:a0:4c:18:2a:ea:3a:78:92:43:d7:ef:cc:60:
31:e5:e1:ab:ec:fc:c8:c6:2a:8e:40:72:67:b3:98:
5a:28:5a:c2:35:9d:b9:64:42:7a:25:b0:59:80:7d:
06:33:c4:63:2d:e5:f0:b6:3d:d1:a8:3a:d1:bc:eb:
37:28:cc:8c:3e:25:59:01:ef:78:1c:04:ca:20:50:
62:47:3d:2a:d7:3e:a0:43:8a:9a:58:5a:4b:4c:9d:
87:fe:b3:1e:bd:7e:4a:3b:89:f0:70:46:07:98:71:
35:5c:da:9f:1e:8d:e1:b9:44:7a:0e:f6:3a:7b:a3:
b0:f0:10:05:a3:fc:34:31:d2:92:a3:88:67:de:5e:
1f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A7:BA:CE:80:DA:37:0C:89:70:09:9A:87:DE:98:69:9C:C7:50:05
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tae6zoDaNwyJcAmah96YaZzHUAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a6:c2:05:53:b8:86:b1:7b:49:75:48:af:d9:5e:ed:99:29:
f0:6f:50:2d:d2:80:ec:9e:16:4b:b3:f5:0e:72:5e:4b:f4:7c:
7f:3e:a5:a7:b9:89:c1:3a:0a:13:c7:86:22:d4:f9:57:a7:a1:
83:87:a1:52:c3:4c:ad:ed:75:53:ca:36:81:ae:bc:aa:d8:f2:
5c:d9:68:00:60:8a:29:91:c7:53:17:29:8c:56:d7:bf:34:6b:
37:e1:f2:87:4a:1e:69:7b:79:ab:26:37:e6:1e:5a:98:29:7b:
bc:5b:0c:2f:0d:e6:63:84:f1:70:79:90:d8:41:f7:7d:57:ce:
e2:59:d4:d1:f5:4b:92:01:a7:5e:17:ce:38:79:19:17:b7:63:
3a:a0:7b:2f:51:d4:4f:b1:7f:11:f2:d2:b6:a3:7b:10:29:a8:
d8:10:52:aa:a7:d0:f3:20:99:2b:7b:33:4d:af:76:70:5e:8b:
89:f2:ff:ae:24:3a:6c:9d:cf:32:d4:00:b3:fa:e4:57:a7:ac:
43:e3:f8:27:28:17:b0:fa:0a:95:8d:a9:d8:bb:fb:d9:9a:1a:
52:1e:25:cb:0c:e6:7c:50:ff:97:22:13:d0:63:fa:13:59:c5:
5c:87:4c:b0:a6:5c:7e:a8:e2:07:5e:cf:af:b3:80:e7:d7:80:
98:07:be:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 09:39:20 2024 by rpki-client on console-fra.rpki-client.org