Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/7S0D_Vuw89Hv9cIdXqQOmkSntMw.roa
File: 7S0D_Vuw89Hv9cIdXqQOmkSntMw.roa (raw, json)
Hash identifier: WOQcBomakocUyAEYFk3VsTbblGBagjFb5dmggGX0+vg=
Subject key identifier: ED:2D:03:FD:5B:B0:F3:D1:EF:F5:C2:1D:5E:A4:0E:9A:44:A7:B4:CC
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018CC7951D59E4D315A0ADFF36CD5CF964B8
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/7S0D_Vuw89Hv9cIdXqQOmkSntMw.roa
Signing time: Tue 02 Jan 2024 00:31:27 +0000
ROA not before: Tue 02 Jan 2024 00:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48108
IP address blocks: 45.142.213.0/24 maxlen: 24
45.142.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:1d:59:e4:d3:15:a0:ad:ff:36:cd:5c:f9:64:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 00:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed2d03fd5bb0f3d1eff5c21d5ea40e9a44a7b4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:46:be:1f:3f:b5:98:5e:d1:25:3f:c3:a5:
47:15:2f:76:fb:c9:d2:3a:8d:9c:62:67:45:87:11:
2d:d7:f9:96:40:17:0e:e7:e8:12:f1:35:bd:20:26:
77:09:34:3a:63:5a:57:26:b0:b9:a8:b2:65:6d:25:
70:81:18:5c:06:ff:2a:56:d6:ff:ca:ec:08:06:bd:
ac:4f:f0:f8:6b:bd:70:06:57:b7:57:38:4b:99:35:
63:c1:f7:ab:fd:e4:1c:0f:f2:f6:d5:ed:8a:d5:b4:
e2:9f:40:99:8c:c1:7b:d0:71:14:9d:f5:ec:b7:1f:
d8:3d:8b:e4:5b:db:fb:68:72:7d:de:44:3e:2d:27:
30:e9:41:bb:04:c6:8c:46:c3:5d:8c:84:6e:b2:fe:
7b:c6:7a:6f:f8:ff:73:05:94:07:14:6f:bb:0c:62:
a0:25:05:45:df:74:56:0c:0b:10:10:98:eb:7b:cc:
61:e4:b4:8c:0e:81:fd:ba:7e:43:69:70:96:86:ee:
4c:4c:d6:c1:a3:f1:d6:25:7d:e3:b4:51:08:c6:1a:
62:33:23:03:f9:60:b0:86:15:28:5c:e0:b5:59:aa:
b2:de:dc:98:77:8a:87:ac:a7:27:0d:53:8e:e9:19:
c7:25:11:20:75:8a:3d:fa:ea:41:42:7a:cf:12:31:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2D:03:FD:5B:B0:F3:D1:EF:F5:C2:1D:5E:A4:0E:9A:44:A7:B4:CC
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/7S0D_Vuw89Hv9cIdXqQOmkSntMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.213.0/24
45.142.215.0/24
Signature Algorithm: sha256WithRSAEncryption
82:24:2c:23:b6:73:06:87:b9:67:cf:09:6d:3d:ad:b2:52:cd:
e9:70:61:1c:05:fe:b7:a4:6c:62:b0:f9:dd:0a:12:f3:92:b3:
9b:8f:65:51:3c:44:99:46:dd:c8:81:af:52:96:5c:2d:93:d5:
fc:e1:86:80:94:92:12:58:0f:c4:2a:b5:03:11:0e:74:11:10:
2f:ab:9e:83:d7:b6:c9:6b:9b:8c:a1:dd:6e:ab:c2:50:91:d2:
ff:70:07:39:a8:5b:78:24:90:eb:23:33:33:fd:6f:a4:94:54:
f2:1c:64:b2:7d:98:c5:4b:a2:75:77:22:ff:34:73:39:c1:d1:
0c:97:72:3c:c8:3a:69:da:6c:e7:69:bb:1a:36:e1:14:2c:14:
92:82:81:26:0e:fb:56:b3:5a:c2:05:a0:e9:5f:b5:f9:21:eb:
95:5b:ae:10:e4:f5:34:53:7d:36:73:15:7e:5e:24:6c:62:71:
17:97:6f:0f:a7:f1:db:38:b9:49:b2:17:8e:c3:10:f7:1f:c3:
61:f5:92:dd:03:f7:13:60:8b:4a:c1:5e:af:32:69:a5:b5:f0:
aa:61:2b:db:7c:63:ea:65:6d:35:35:9d:ee:f0:14:a8:73:05:
45:5c:16:9a:eb:b0:83:01:7b:62:03:6c:97:e4:7e:66:59:79:
87:42:7e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:04:50 2024 by rpki-client on console-fra.rpki-client.org