Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/dFQ7--JiATBTvBBjEAEW9REg5NE.roa
File: dFQ7--JiATBTvBBjEAEW9REg5NE.roa (raw, json)
Hash identifier: Z61SRMQcar55pH1NUjExfg1dx2+P5rXhcWxBEpi2l2g=
Subject key identifier: 74:54:3B:FB:E2:62:01:30:53:BC:10:63:10:01:16:F5:11:20:E4:D1
Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial: 018CC56E2E04515EED05221F38265CD6A9D9
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/dFQ7--JiATBTvBBjEAEW9REg5NE.roa
Signing time: Mon 01 Jan 2024 14:29:41 +0000
ROA not before: Mon 01 Jan 2024 14:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209403
IP address blocks: 45.67.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:2e:04:51:5e:ed:05:22:1f:38:26:5c:d6:a9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Validity
Not Before: Jan 1 14:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74543bfbe262013053bc1063100116f51120e4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:aa:f5:93:41:ac:8e:af:ad:a8:5b:5c:67:
ac:8f:84:05:3c:31:cf:65:41:4c:bb:a5:3e:bf:17:
4f:d3:e3:df:d2:bb:b1:fe:64:e3:b6:30:90:ac:cc:
61:64:e6:a7:4a:0a:78:86:66:e2:fa:06:fc:b6:72:
e0:8b:d8:69:32:58:29:fc:27:d9:f8:f8:05:68:41:
c3:74:11:26:68:79:37:f0:f6:3b:16:e0:20:7f:7f:
28:42:7f:79:c5:39:12:27:ae:b6:e2:ea:a7:92:86:
48:fa:dd:20:c1:c6:c4:a8:3b:4f:35:87:bf:63:d8:
3f:54:d6:6a:99:be:4d:8b:9e:ac:06:52:7a:30:5e:
4d:0b:3b:75:73:72:b1:5a:38:ec:59:11:e9:fc:80:
8d:58:d0:09:83:38:2e:a0:a5:c0:78:9d:8c:e0:03:
df:73:2c:3b:c9:79:eb:f5:07:d5:41:0c:cd:70:57:
72:2c:7a:79:d9:8e:d4:f8:54:73:80:c5:30:e2:39:
a7:67:65:0f:36:8b:6a:a2:61:8a:cb:4b:33:64:fd:
9b:b7:48:e3:17:ae:2a:46:7a:63:41:74:97:15:ac:
37:02:83:a1:2f:47:68:71:42:75:bc:96:88:d0:90:
b4:61:3a:5d:07:92:3f:2b:62:bc:b5:4e:80:0e:77:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:54:3B:FB:E2:62:01:30:53:BC:10:63:10:01:16:F5:11:20:E4:D1
X509v3 Authority Key Identifier:
keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/dFQ7--JiATBTvBBjEAEW9REg5NE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.12.0/24
Signature Algorithm: sha256WithRSAEncryption
77:27:c9:a6:dc:11:56:f6:3d:26:39:dd:b3:e3:3f:61:a1:00:
38:02:7c:ed:ca:76:84:76:b2:fb:b2:70:2d:11:52:c0:4d:dd:
13:a1:36:13:e8:55:db:9d:7b:72:64:04:51:5d:9f:41:e2:37:
9e:43:91:34:31:7c:29:09:8d:3a:a5:53:8c:15:91:a1:96:c1:
d1:c8:4b:84:56:cd:a6:76:69:64:7a:4a:b8:33:8d:4a:67:7d:
f5:4e:77:87:e3:c0:fe:6d:1f:f4:79:11:fd:18:06:b4:42:f8:
00:fa:f1:e9:d1:b0:bd:11:a0:d0:8f:8d:68:70:a0:3b:39:31:
70:a9:07:70:f3:34:84:a0:c0:20:16:dc:ee:2e:b3:55:b3:60:
23:6c:35:ef:b2:17:26:84:6a:2a:79:a6:88:c0:e0:b0:1a:15:
99:15:aa:2a:34:ca:5d:4c:db:21:43:42:63:97:6e:5e:0a:b9:
21:45:47:77:46:8a:96:a4:e7:c6:4a:ee:c0:2c:13:46:35:f9:
5e:d4:9c:4e:f9:93:b3:ff:7a:29:a0:ea:ac:06:fb:08:09:7a:
5c:39:7c:9a:6b:a2:b8:6c:ad:1e:26:3d:e2:60:d3:94:2e:c4:
8d:68:85:01:a1:44:76:1d:5d:74:1f:fb:c1:b8:47:a5:4f:f6:
a0:25:95:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:24:51 2024 by rpki-client on console-fra.rpki-client.org