Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/Bp7DCK2sdFA8YO4sxbthqIfiG50.roa
File: Bp7DCK2sdFA8YO4sxbthqIfiG50.roa (raw, json)
Hash identifier: 3TZW71bZ8ZQTjQA9dDVuHkIsX2mX5BOQCSB2XtPqmD8=
Subject key identifier: 06:9E:C3:08:AD:AC:74:50:3C:60:EE:2C:C5:BB:61:A8:87:E2:1B:9D
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 018CC7956BC9054772FCCF5F054B94E87F33
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/Bp7DCK2sdFA8YO4sxbthqIfiG50.roa
Signing time: Tue 02 Jan 2024 00:31:47 +0000
ROA not before: Tue 02 Jan 2024 00:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207717
IP address blocks: 45.132.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:6b:c9:05:47:72:fc:cf:5f:05:4b:94:e8:7f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 00:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=069ec308adac74503c60ee2cc5bb61a887e21b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:c8:0b:f0:f1:a0:ec:ab:8b:09:2f:76:d1:
fc:5b:68:35:9f:87:bf:45:b8:59:7d:f8:66:bb:64:
32:40:d3:f9:0c:8f:49:a7:3f:f4:ec:cb:77:40:fd:
43:96:fe:5f:f1:f8:12:7c:97:3c:05:61:38:23:a4:
51:11:ee:5f:14:c0:4f:ba:28:39:fd:de:67:18:07:
27:63:40:d4:40:ff:f0:1b:ef:c4:86:9b:a5:49:5a:
c5:30:f2:2c:c3:bc:f0:d7:4c:53:c2:34:de:ea:e6:
e0:e6:ae:e6:1e:c8:e7:c6:7e:d4:ee:6e:2c:de:55:
3d:09:af:fa:06:ba:ca:34:38:27:6c:36:6f:8a:0f:
5d:43:0e:5b:64:87:a5:80:b6:2e:be:9f:98:e6:26:
0c:73:c4:b5:02:31:7f:80:bc:f2:25:0a:40:33:d5:
93:54:8a:95:54:54:2c:80:0c:2a:1f:9a:21:94:ba:
4a:51:12:89:cf:63:7f:d6:2c:b1:b8:e2:b0:29:e5:
88:04:c7:01:94:8f:85:88:6c:e9:8a:42:41:c4:36:
69:76:2c:3d:84:62:95:5b:a8:aa:bb:20:f8:8d:77:
d5:f3:38:81:7c:d7:18:61:46:78:d4:18:b6:b5:87:
66:b5:c9:66:9e:29:bf:6c:4c:fb:e8:b6:70:58:41:
e5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9E:C3:08:AD:AC:74:50:3C:60:EE:2C:C5:BB:61:A8:87:E2:1B:9D
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/Bp7DCK2sdFA8YO4sxbthqIfiG50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.150.0/24
Signature Algorithm: sha256WithRSAEncryption
11:47:b6:25:17:38:7e:c7:35:0c:be:4a:60:4e:28:05:67:ca:
6f:50:ca:3b:cc:36:44:d3:9b:a6:ce:c2:91:8c:c2:fb:2e:b1:
a9:30:18:c6:d7:3e:02:5e:e9:d6:3f:99:d5:5a:15:c5:65:3e:
26:d5:1e:d5:17:4e:25:6e:6d:d9:3e:5c:e7:2a:ee:18:c0:8c:
0d:5b:77:9f:0a:58:36:de:73:34:a4:2b:6c:85:17:2b:2d:1d:
3b:f1:29:ea:4f:2f:d6:3f:60:53:90:29:37:9c:e5:a0:e9:b0:
79:47:36:c1:7d:bc:c4:ce:42:38:b9:8c:19:88:f0:b7:1a:17:
8d:d0:90:0f:0c:fc:da:2d:1b:b8:ee:05:88:3f:83:99:ca:f4:
e7:4c:0c:04:50:a6:1b:52:02:b8:5b:29:ef:99:ef:8f:b2:10:
48:a4:46:db:2d:79:25:ff:25:4b:79:15:11:8e:64:cd:11:e9:
36:81:eb:ee:4b:04:c7:af:b0:87:d1:1b:6c:bd:0b:71:bc:cb:
43:8a:a4:ad:e1:0b:15:c1:41:c3:91:94:5d:67:2d:9c:27:43:
56:54:af:ea:ad:10:9f:57:94:60:bd:a3:8f:86:aa:89:42:b3:
40:26:53:7f:22:6f:16:9e:75:ba:d4:72:ce:d0:67:5b:63:87:
49:8e:d5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:42 2024 by rpki-client on console-fra.rpki-client.org