Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/74J1m55l2XnKoKD1gOwKCYWw0zw.roa
File: 74J1m55l2XnKoKD1gOwKCYWw0zw.roa (raw, json)
Hash identifier: 7+yirSNIowOU3pZMAlNMUf0eUXPDA+4YpnyncYpMyek=
Subject key identifier: EF:82:75:9B:9E:65:D9:79:CA:A0:A0:F5:80:EC:0A:09:85:B0:D3:3C
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 018CC2DB4F7246D9BA94B845956C64895359
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/74J1m55l2XnKoKD1gOwKCYWw0zw.roa
Signing time: Mon 01 Jan 2024 02:30:01 +0000
ROA not before: Mon 01 Jan 2024 02:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49544
IP address blocks: 45.147.87.0/24 maxlen: 24
2a13:3ec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4f:72:46:d9:ba:94:b8:45:95:6c:64:89:53:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Jan 1 02:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef82759b9e65d979caa0a0f580ec0a0985b0d33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:f4:57:c8:c8:f8:5f:3c:ce:a5:a3:83:a3:
01:6e:73:02:c9:6f:a3:a8:c8:bf:d9:74:ab:38:74:
08:ab:da:1d:41:19:b2:31:1c:b1:27:df:5c:5b:a1:
a6:03:0b:8b:29:3c:a1:2c:47:41:2d:0b:dc:e7:b1:
82:e2:1b:2a:80:74:e1:90:16:52:12:1b:b9:03:8a:
84:1f:e7:11:2e:7b:7d:5f:6b:8e:bd:c8:51:ac:69:
24:1e:84:01:12:dd:ff:4b:0e:25:53:3c:ea:53:1d:
95:b0:fc:26:71:11:e6:e7:fb:6e:fd:0b:57:9a:10:
f3:b0:62:5c:78:02:07:04:da:4f:b3:7d:68:85:36:
5a:fb:6b:d7:45:7c:7b:ab:6c:6e:66:2a:eb:ef:99:
54:10:69:1a:81:1e:10:f0:46:00:34:35:04:0c:eb:
06:96:58:66:45:30:30:f5:8b:bf:74:c9:10:5d:a4:
cd:01:c7:80:a8:4c:4c:f7:46:04:dd:48:b6:f9:c8:
fe:d1:0b:32:41:29:44:d6:09:70:13:ad:c5:29:b6:
8e:3e:df:81:bf:a7:04:06:fc:d9:cd:23:21:c6:87:
5d:5a:1b:10:6c:2c:58:69:b7:34:d0:08:f5:d1:47:
12:82:e4:cc:fc:e2:af:89:96:e1:f3:c6:a4:b9:b6:
ca:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:82:75:9B:9E:65:D9:79:CA:A0:A0:F5:80:EC:0A:09:85:B0:D3:3C
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/74J1m55l2XnKoKD1gOwKCYWw0zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.87.0/24
IPv6:
2a13:3ec0::/29
Signature Algorithm: sha256WithRSAEncryption
60:a4:c2:58:45:15:55:af:60:97:9c:9a:2c:c1:54:52:e5:4a:
19:09:b5:01:88:a2:78:d7:3a:7d:bd:6c:c3:e1:a4:a7:c9:91:
c2:67:a8:16:fe:10:61:82:70:0b:cd:ec:82:de:7d:0d:71:b7:
16:50:c2:44:8f:61:21:ba:e9:ed:a6:0a:19:c0:4d:af:ea:1d:
67:42:5b:a3:b1:c0:a2:69:fd:29:9d:53:42:f7:5f:76:1a:ad:
51:a0:8f:df:08:d6:3c:64:a4:5d:87:83:ea:ce:4d:ca:0a:fa:
c8:7a:51:e1:7b:b7:a1:56:46:73:45:5f:3b:3e:7f:95:12:cf:
3e:2d:4c:fa:f4:d3:04:47:47:52:2b:2e:45:ec:cb:02:3c:16:
14:f4:f0:ad:63:bd:b0:45:9c:df:bb:d3:3e:62:3e:f2:60:d3:
12:63:25:2a:52:07:4f:33:16:fa:e2:6f:c9:d1:09:c7:03:77:
cc:42:55:e0:7c:7a:4e:f3:9b:79:e6:1e:38:07:1b:64:66:84:
b0:8b:e3:1b:e8:ea:1e:ae:a0:de:df:36:70:f4:37:6b:92:c8:
10:88:63:96:1b:87:5b:f0:be:32:1a:5f:d5:a3:b0:98:96:1b:
7c:81:7a:2e:9e:e1:8c:bd:36:5e:0e:8e:d8:bf:69:e3:14:35:
eb:a1:3e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:34:26 2024 by rpki-client on console-ams.rpki-client.org