Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/TJdnNKvrlPAffJc49hEeJYtYA-g.roa
File: TJdnNKvrlPAffJc49hEeJYtYA-g.roa (raw, json)
Hash identifier: d5Y8Y1koHls4WI3DTw15ZSJfrTytZ+oEZI7L9/KMg7U=
Subject key identifier: 4C:97:67:34:AB:EB:94:F0:1F:7C:97:38:F6:11:1E:25:8B:58:03:E8
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 018E8055B81C030177D21326C8C9C1452229
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/TJdnNKvrlPAffJc49hEeJYtYA-g.roa
Signing time: Wed 27 Mar 2024 14:34:45 +0000
ROA not before: Wed 27 Mar 2024 14:34:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 45.150.56.0/24 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:55:b8:1c:03:01:77:d2:13:26:c8:c9:c1:45:22:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Mar 27 14:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c976734abeb94f01f7c9738f6111e258b5803e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:96:6f:a3:84:07:1a:bb:a9:01:d4:1f:c5:82:
ee:b1:00:f7:0b:69:0b:20:dd:3e:e4:8c:a0:2f:23:
14:68:13:4d:ce:1e:f8:ae:4f:fd:83:19:21:dc:e0:
85:fc:55:0a:29:58:0d:e4:a6:7d:ef:23:f7:3e:b0:
46:83:cd:93:b5:92:3f:94:6a:eb:59:bc:8a:b6:fc:
eb:9b:dd:0b:be:fb:40:71:bf:bb:dd:12:58:fa:9b:
a6:bb:a8:79:e1:c9:79:a9:ef:45:76:2d:6a:9d:19:
f9:82:9b:68:93:76:10:5e:ee:bc:ad:18:25:ed:dc:
cc:2e:01:5f:f0:62:ba:9a:f8:c4:84:1c:c4:fa:26:
6d:03:48:80:39:3d:bb:3c:bd:da:14:e0:c1:fb:3d:
31:53:e8:06:80:df:7b:7d:d6:4e:8f:7c:5b:65:9f:
b8:70:e9:ea:18:9f:4d:77:09:15:49:9e:0c:28:0b:
73:4b:31:d1:58:c8:26:0c:bd:a3:30:05:3b:3a:12:
5b:65:78:6a:19:18:83:be:43:4a:9b:40:e3:48:4c:
dd:4f:b6:63:54:ad:f7:37:4d:d3:eb:d7:fc:f7:65:
70:8d:b7:03:6a:c0:40:c7:f1:e9:f7:5b:23:49:f5:
be:e2:e4:b6:27:2f:bd:5a:c4:61:56:2f:44:7a:cb:
f0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:97:67:34:AB:EB:94:F0:1F:7C:97:38:F6:11:1E:25:8B:58:03:E8
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/TJdnNKvrlPAffJc49hEeJYtYA-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:91:5e:84:00:25:78:cd:f5:32:0c:9e:81:d5:89:ab:0a:95:
60:7f:d7:6c:b9:8a:a6:c2:c9:f8:8b:f3:56:02:09:32:5c:f7:
0d:75:5d:49:d5:57:64:7e:55:28:cb:de:ac:11:b9:a1:45:ca:
1b:9b:1d:92:6e:67:8c:c2:65:60:06:e1:2a:51:0e:e4:a9:cd:
17:a2:8e:bc:4b:07:98:60:82:e5:21:0c:fc:e6:8a:3c:69:12:
f3:25:a5:67:8a:8c:52:e3:8c:fa:cc:9d:84:fd:1b:94:4e:f8:
eb:12:ce:dc:24:34:e4:7f:fd:4c:15:cd:4a:5d:9c:14:9e:2b:
cf:e1:6d:13:42:6f:53:76:f5:9e:fe:83:8b:6f:e8:bf:70:e1:
e5:a8:8b:43:aa:09:13:a6:14:bd:db:de:a2:90:7a:22:ce:2b:
04:54:d0:6f:97:5f:3f:a6:cf:82:fb:94:d8:d4:52:d1:5f:bd:
6e:05:ff:0e:8c:24:50:4b:59:91:31:bd:7b:3e:7f:d6:65:76:
11:9f:f7:22:4e:7d:09:5d:1e:44:e3:a2:49:81:39:c0:3a:3e:
55:c0:aa:90:aa:ed:d9:cb:3f:22:8b:a6:da:91:af:13:40:29:
28:20:f0:f8:c9:77:cd:d0:3a:bf:58:9a:e8:56:ef:10:b9:61:
0b:95:71:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:25:58 2024 by rpki-client on console-fra.rpki-client.org