Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/deNQZFRYalvRmutmDVhvhvBVo04.roa
File: deNQZFRYalvRmutmDVhvhvBVo04.roa (raw, json)
Hash identifier: zQ8N7/WyWtO4X0BiWpnx3zXsYe5QLI0xFXTsNX7atis=
Subject key identifier: 75:E3:50:64:54:58:6A:5B:D1:9A:EB:66:0D:58:6F:86:F0:55:A3:4E
Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial: 018CC56E2E9C2ED9B21409FD27025A7D8A61
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/deNQZFRYalvRmutmDVhvhvBVo04.roa
Signing time: Mon 01 Jan 2024 14:29:41 +0000
ROA not before: Mon 01 Jan 2024 14:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398395
IP address blocks: 45.67.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:2e:9c:2e:d9:b2:14:09:fd:27:02:5a:7d:8a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Validity
Not Before: Jan 1 14:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75e3506454586a5bd19aeb660d586f86f055a34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c6:bb:41:fa:46:8c:c3:99:f7:59:50:38:41:
c7:2f:20:81:1c:a1:35:05:e7:9c:80:35:d7:9a:0b:
5c:f5:f5:ea:83:a5:28:86:2a:46:13:29:69:45:75:
f1:36:70:d0:46:6e:0d:a5:55:4f:f8:e1:80:12:db:
74:3c:66:d2:fe:b4:12:da:7c:3d:0c:4d:74:45:9c:
4b:c9:1b:6d:97:99:0f:92:11:a5:65:b3:dd:81:86:
ed:f2:24:e3:c2:c2:9d:2c:19:b6:88:ce:a0:15:8f:
41:bb:62:ed:f7:dd:72:0d:85:8b:bb:dd:05:44:78:
86:43:64:5e:9e:57:48:6e:c8:5c:46:d9:ca:1e:1f:
3d:74:66:1c:8c:f0:40:69:50:4c:98:71:67:be:5d:
b9:21:b1:6d:dc:16:80:ed:36:f4:34:b5:86:0f:a0:
f6:9e:b5:cc:07:76:56:91:16:bd:35:04:3a:ec:d8:
b4:75:b7:c7:2d:2e:00:81:51:de:55:3f:5c:8c:75:
67:a0:fd:74:e7:1c:ae:3e:f9:8e:b7:2b:19:b1:10:
6a:2a:1d:aa:56:4d:28:5f:33:5c:b4:68:42:6d:cb:
eb:5a:a3:47:1c:9d:19:1c:1a:1d:3a:8f:30:88:14:
93:40:3a:24:26:43:a3:0d:1c:88:c3:4c:af:5a:7c:
c1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E3:50:64:54:58:6A:5B:D1:9A:EB:66:0D:58:6F:86:F0:55:A3:4E
X509v3 Authority Key Identifier:
keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/deNQZFRYalvRmutmDVhvhvBVo04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.13.0/24
Signature Algorithm: sha256WithRSAEncryption
98:29:84:bf:d5:d6:64:ee:86:f9:19:ae:b7:64:81:b3:2d:63:
97:f1:4e:32:c3:f6:25:5c:7c:e5:9e:4c:4c:b3:51:46:92:f9:
00:e8:cd:24:71:ee:53:d8:b8:c1:3a:a7:15:8a:8f:47:08:5a:
66:69:9a:de:11:ad:0d:23:ba:2f:d6:dd:f4:d3:4e:18:de:b9:
07:11:91:a1:98:95:f2:c6:68:be:8f:7b:3f:47:3b:4d:1c:43:
84:50:f6:9b:ae:8a:49:af:2d:65:66:1c:10:7a:90:90:6d:a6:
c4:5d:e8:47:fb:34:65:3e:d2:d3:38:ad:c5:7c:80:38:39:1d:
68:53:93:6b:b8:6d:10:78:14:1f:b2:54:13:ce:45:df:2d:10:
23:4e:f8:6f:aa:be:3c:c0:4d:42:72:a4:f0:6b:ea:f9:90:09:
e5:99:40:85:32:ab:80:1e:8d:44:a9:03:f2:d5:e7:a4:fa:fe:
61:6d:31:ec:6a:e8:a1:18:bf:18:31:d6:76:f5:d7:6e:09:e2:
8e:0c:68:71:f9:69:f4:8e:ab:06:4c:76:83:5f:9a:1e:70:aa:
a6:5a:94:3b:07:5c:73:b5:4e:d7:2d:9c:ee:80:73:fc:56:42:
f7:68:92:a5:f4:fd:8f:0e:b4:c6:87:1d:d8:c0:93:6e:45:62:
9f:ae:30:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 21:48:30 2024 by rpki-client on console-fra.rpki-client.org