Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/AqtEsioZmFkOBTAqs6tFEjZlCmM.roa
File: AqtEsioZmFkOBTAqs6tFEjZlCmM.roa (raw, json)
Hash identifier: USb3NZwETylxmxVVZOZ/d2rnpIyfMBb3uaii0t8elvo=
Subject key identifier: 02:AB:44:B2:2A:19:98:59:0E:05:30:2A:B3:AB:45:12:36:65:0A:63
Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial: 018CC56E2D7A849EE80D7643A1EDA81620DC
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/AqtEsioZmFkOBTAqs6tFEjZlCmM.roa
Signing time: Mon 01 Jan 2024 14:29:41 +0000
ROA not before: Mon 01 Jan 2024 14:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142594
IP address blocks: 45.67.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:2d:7a:84:9e:e8:0d:76:43:a1:ed:a8:16:20:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Validity
Not Before: Jan 1 14:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02ab44b22a1998590e05302ab3ab451236650a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:05:1d:5a:72:c7:3e:75:d1:a2:b6:f6:fd:11:
57:00:c6:66:6b:35:17:ee:21:68:df:30:4e:65:a3:
bb:17:b6:66:86:f4:64:e7:86:60:81:9b:3f:02:3e:
a3:1f:8a:e3:85:41:41:0b:4c:40:b4:e1:8f:5c:f5:
9e:6d:af:23:60:72:62:60:79:30:28:e9:34:84:3f:
7b:5c:0f:5f:07:71:4d:22:1d:de:76:bc:3e:78:de:
67:1e:71:70:06:24:02:1c:8b:97:6b:23:2f:07:7a:
7b:79:a2:c2:24:31:f1:9b:e4:24:f9:d1:ae:c0:21:
53:1f:93:18:53:4c:1f:1e:3b:90:6f:0f:99:f7:aa:
52:b8:ee:dc:77:cb:28:63:65:bf:c3:f3:e4:cf:76:
b0:9f:ca:c2:5b:37:2f:60:81:59:32:ea:31:55:8e:
9d:e2:8e:6c:7f:77:2d:e2:b4:7b:6b:71:4e:c5:f5:
40:a7:f5:a0:3b:7c:a9:ea:df:18:c6:13:f6:9e:ab:
5b:76:91:05:57:b7:23:d7:e1:8e:83:a7:37:d8:48:
3a:6e:06:03:59:75:ef:39:e2:c6:b5:f0:8d:18:71:
c2:95:cb:7f:f9:01:c4:ab:1c:75:f0:77:7d:8e:5c:
e1:33:d4:44:9f:d4:6f:30:6c:33:b4:6a:36:fa:78:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AB:44:B2:2A:19:98:59:0E:05:30:2A:B3:AB:45:12:36:65:0A:63
X509v3 Authority Key Identifier:
keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/AqtEsioZmFkOBTAqs6tFEjZlCmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.15.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:4e:5f:d2:e2:6c:ed:4c:2b:f6:ce:f4:38:01:a1:b6:c5:a5:
7c:34:45:c4:71:b3:f5:9f:a2:42:1f:69:16:a7:12:9b:91:ff:
d8:65:a3:d8:34:1a:3f:dc:e7:a7:0f:6c:c5:43:e0:f0:b5:96:
34:b5:7a:cc:9d:b5:cd:f1:8f:74:41:f9:d5:0e:59:5c:e1:75:
37:8e:7b:96:70:b0:fc:a5:45:ea:0c:fe:a4:1c:46:d7:68:9a:
61:b1:50:3a:a7:24:b6:1d:43:c8:5b:81:65:0c:8a:3d:1c:67:
06:20:7b:44:b6:72:25:4e:77:5f:73:58:4a:c4:f8:4e:4e:7d:
e5:58:b7:ae:42:ae:1f:8b:78:99:f4:f0:50:3e:a6:b3:94:37:
9d:e9:6d:b8:e8:84:58:9a:bf:d7:d0:2f:92:f6:2d:9f:f3:b0:
d3:29:54:80:d8:a4:49:62:53:94:23:d8:db:bc:f4:c3:8a:86:
86:ea:20:47:b1:31:2e:c6:a9:06:1b:10:b3:a2:7c:8e:09:88:
22:8c:0f:c4:b5:8c:cd:b0:72:fe:c3:d0:1e:fd:b5:23:a5:83:
ea:b4:fa:bc:eb:04:5c:ed:f8:86:df:0c:03:d1:a0:74:cd:d8:
8d:e3:10:34:e0:34:eb:03:33:91:7c:ac:af:a2:46:59:f6:e0:
95:5a:1c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:20:52 2024 by rpki-client on console-fra.rpki-client.org