Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/z7XFN6JTz3crXxYDt1nz82APQt8.roa
File: z7XFN6JTz3crXxYDt1nz82APQt8.roa (raw, json)
Hash identifier: x+y94JiGGP2AAo4WOZX0dvMgTjwyeblKTdLba7ED66o=
Subject key identifier: CF:B5:C5:37:A2:53:CF:77:2B:5F:16:03:B7:59:F3:F3:60:0F:42:DF
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018CC5011AB9B7D10A095DC9D39C28F6C61B
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/z7XFN6JTz3crXxYDt1nz82APQt8.roa
Signing time: Mon 01 Jan 2024 12:30:33 +0000
ROA not before: Mon 01 Jan 2024 12:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199033
IP address blocks: 45.154.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:1a:b9:b7:d1:0a:09:5d:c9:d3:9c:28:f6:c6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 12:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfb5c537a253cf772b5f1603b759f3f3600f42df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:ea:7a:dc:7b:a3:bc:24:32:1e:76:ac:bc:
b2:fe:57:7e:2f:3c:ba:65:c4:45:c2:09:c6:28:d3:
26:62:4f:84:b0:7a:65:d5:1d:04:7b:c8:a0:36:95:
ba:f1:3d:0f:cc:72:80:3b:8d:f3:7a:dc:18:1e:49:
65:6f:c2:72:1d:63:7a:80:ec:48:3f:0a:7d:fb:66:
f5:a0:4a:b2:62:96:af:d1:4a:c8:61:33:a3:b2:e2:
bf:2e:f3:c3:cd:4a:e4:9b:e0:9b:44:c6:b8:be:82:
48:29:fe:db:fe:89:44:b3:ba:41:55:06:fd:6f:36:
4a:97:66:49:88:4f:61:ba:51:cc:9e:9a:94:85:f8:
4f:08:cc:20:da:3f:aa:a6:19:2d:c3:b2:95:95:f3:
47:5e:b8:b3:20:8c:a3:98:ce:62:bd:c9:9a:48:9c:
68:72:74:4e:37:9b:3a:1f:fb:2b:8f:66:d1:68:9c:
26:63:2b:cb:7b:ff:92:cc:0a:89:d0:97:21:0f:73:
4d:d8:29:95:61:49:bd:af:54:63:34:49:8e:25:55:
aa:23:d2:91:1d:71:36:08:99:ef:9a:a9:4e:68:65:
51:5f:40:75:17:e2:10:99:a2:88:a8:3a:0e:01:c4:
ee:7b:37:ec:88:fc:72:9b:e6:48:1a:1d:22:17:08:
7f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B5:C5:37:A2:53:CF:77:2B:5F:16:03:B7:59:F3:F3:60:0F:42:DF
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/z7XFN6JTz3crXxYDt1nz82APQt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.237.0/24
Signature Algorithm: sha256WithRSAEncryption
82:bf:62:cf:44:86:80:fc:ad:99:b7:f2:8f:01:a7:2c:4a:97:
50:bb:03:e2:dc:f8:c1:43:ac:a0:9d:4d:21:2d:e1:22:07:e7:
68:9b:9c:49:64:85:87:c6:18:1a:d3:f0:7b:b8:30:57:01:fa:
cd:47:d7:b2:b4:e1:70:f0:f5:23:60:5c:3d:77:69:6f:4e:72:
2f:46:f0:91:97:ba:94:85:39:04:b2:1f:c9:10:4c:42:f9:0c:
13:8b:49:c0:cf:ca:f7:a5:f6:95:5b:30:c0:81:d6:e3:87:70:
90:0a:74:67:ae:e4:33:0c:3a:2c:05:aa:af:cd:70:64:ef:2f:
87:4b:0a:84:cd:6b:ec:92:18:43:18:da:27:e0:e7:0f:9b:72:
82:8e:c5:b4:f0:c5:4a:18:3d:f7:ed:5a:9d:48:44:59:93:87:
c6:48:d2:cf:12:a1:24:f8:11:2b:6a:73:21:1b:8e:0f:63:63:
5a:bb:fc:82:61:bf:2d:52:4b:b3:38:34:a7:79:b7:00:52:a1:
f5:22:b6:c4:96:34:cd:3a:61:ba:a0:69:84:eb:3c:3f:b0:e3:
28:25:02:eb:6e:ed:3e:a2:da:91:59:d8:55:74:99:48:71:d8:
98:54:03:16:87:70:b8:74:4f:bb:bd:01:07:96:e5:39:fe:5f:
5b:e3:02:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:36:49 2024 by rpki-client on console-ams.rpki-client.org