Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/F8I75rGinamNdvaRwDL0e8RafgA.roa
File: F8I75rGinamNdvaRwDL0e8RafgA.roa (raw, json)
Hash identifier: 7esXJSpX0pKURNV7WXXRzQjrGyZpInbqF2QrGLirTPQ=
Subject key identifier: 17:C2:3B:E6:B1:A2:9D:A9:8D:76:F6:91:C0:32:F4:7B:C4:5A:7E:00
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 018F76E935D940A2B322050663C655A22BE2
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/F8I75rGinamNdvaRwDL0e8RafgA.roa
Signing time: Tue 14 May 2024 11:42:26 +0000
ROA not before: Tue 14 May 2024 11:42:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201691
IP address blocks: 45.159.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:e9:35:d9:40:a2:b3:22:05:06:63:c6:55:a2:2b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: May 14 11:42:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17c23be6b1a29da98d76f691c032f47bc45a7e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:a2:a3:c4:df:a3:ea:f2:b8:35:f3:0e:88:
9b:4c:80:74:e9:16:29:f0:b0:ea:cf:e5:ee:17:c7:
97:3d:07:ca:11:fa:51:15:98:ad:5e:58:38:59:ff:
37:19:e7:a9:77:c9:1b:07:14:66:7e:43:66:7d:c8:
69:fb:56:26:6c:46:77:cc:23:d7:94:6e:e5:42:d2:
fc:a4:c5:7e:c0:d9:b7:66:55:3a:e7:b5:06:03:af:
d5:ba:01:d1:e1:b2:41:d9:4b:78:96:66:2d:86:1f:
39:ed:e6:bf:d6:5d:4a:0d:ef:ca:f4:5d:31:25:69:
66:5c:2f:99:91:93:28:57:44:c4:37:33:06:48:a4:
7d:d4:d5:11:58:b7:26:5f:dd:fc:50:67:6e:07:07:
be:57:0d:d4:2c:f2:51:86:a1:71:c7:b7:6e:98:6c:
46:9e:c1:dc:8c:32:a9:2f:9a:17:6a:bc:cf:52:39:
9a:e0:a4:55:a9:ba:04:a0:8a:dc:9c:39:3a:f0:95:
ee:53:e3:f2:be:b3:c6:5b:50:cb:a8:7b:dc:72:fa:
f1:a5:bb:2d:fa:37:76:80:e8:bd:3a:a0:78:89:5e:
89:18:56:92:f5:a1:4d:90:5f:06:d4:ee:d6:91:3a:
72:ab:10:8e:5a:89:eb:0a:22:a7:20:35:95:a1:65:
d5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C2:3B:E6:B1:A2:9D:A9:8D:76:F6:91:C0:32:F4:7B:C4:5A:7E:00
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/F8I75rGinamNdvaRwDL0e8RafgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.151.0/24
Signature Algorithm: sha256WithRSAEncryption
52:17:6d:aa:3a:cf:67:2b:67:bd:9f:ca:fe:ec:ed:23:99:76:
59:6a:f4:b7:98:d1:9a:4f:b1:91:8a:f1:e4:9c:78:6a:01:4c:
13:db:6a:1a:dd:52:70:3c:7c:18:87:32:78:e1:dc:0b:df:66:
61:f6:e5:7f:d4:66:02:4d:f1:0d:38:46:4a:41:85:b0:a5:43:
0d:9b:16:fe:5a:b7:f1:73:61:81:b8:69:ad:46:29:eb:62:16:
75:57:e0:75:40:eb:3d:b0:c0:82:74:83:e0:26:2f:69:3b:0e:
52:7f:51:b2:e4:f8:fc:df:71:fc:45:1c:ff:2c:ef:54:2b:33:
25:af:a4:63:12:b4:63:45:a3:fd:69:fa:c3:76:1f:6a:7f:5a:
52:27:56:de:29:7a:6e:0f:2b:de:75:a0:f1:42:21:9b:3f:56:
88:1f:a7:84:d7:3a:ae:fa:a3:af:59:9e:39:7d:da:b3:8e:06:
35:89:56:41:0f:4e:80:81:31:79:eb:38:3e:1f:13:c8:69:98:
82:a6:8c:94:86:86:a5:d6:2d:f8:6d:fc:3a:7e:3f:b0:b0:1f:
b7:c4:ec:cd:d0:70:80:42:a9:dd:ff:ac:43:20:0c:b6:b5:03:
18:06:a9:5f:fb:c8:71:ca:65:76:d3:4c:b9:84:86:24:48:57:
08:00:6e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:01:26 2024 by rpki-client on console-fra.rpki-client.org