Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Jt4dpvW2r5NxkI_KP6A7KkOwN6I.roa
File: Jt4dpvW2r5NxkI_KP6A7KkOwN6I.roa (raw, json)
Hash identifier: X5EH0liCLW91/utmrsa8JxKIM4hvq5hoRgufhr6T/EA=
Subject key identifier: 26:DE:1D:A6:F5:B6:AF:93:71:90:8F:CA:3F:A0:3B:2A:43:B0:37:A2
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018D83E4F05C793A19A5B4E502B9F2FF53D6
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Jt4dpvW2r5NxkI_KP6A7KkOwN6I.roa
Signing time: Wed 07 Feb 2024 14:07:15 +0000
ROA not before: Wed 07 Feb 2024 14:07:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216332
IP address blocks: 147.45.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:83:e4:f0:5c:79:3a:19:a5:b4:e5:02:b9:f2:ff:53:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 7 14:07:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26de1da6f5b6af9371908fca3fa03b2a43b037a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:07:06:32:5e:45:d6:ae:81:d6:d4:c0:4b:74:
ff:a4:10:26:7f:2e:33:fa:52:e7:eb:a1:38:63:ab:
45:0b:1c:a5:5f:7c:13:43:06:b4:40:8f:d5:08:c5:
92:52:d2:34:60:48:9d:f7:bd:61:ae:78:7d:55:f9:
8e:45:f7:d2:31:3a:bf:58:19:65:de:ff:a2:9e:77:
b3:d9:d6:53:3b:c3:9a:d8:dc:46:cd:7a:50:c1:1d:
d2:6f:1d:40:2a:31:77:9a:bd:20:e9:b8:70:f5:05:
02:b8:0e:64:4b:f7:d2:58:b6:48:92:d4:e2:60:dc:
38:48:72:e1:ef:a6:8e:38:11:54:7c:12:df:36:5f:
20:fe:99:81:a4:5b:0a:38:06:59:3d:41:dd:47:31:
4d:9a:2b:bc:e5:2c:1c:59:b3:42:e0:ad:4a:22:aa:
1c:c5:0f:71:dd:f0:f7:a3:34:ed:a2:41:ab:90:14:
46:0b:a1:d7:71:25:17:98:a3:ad:83:ed:0b:f3:66:
dd:16:55:bf:b8:45:40:43:f3:5e:ab:33:36:63:28:
6e:fc:2f:08:9a:07:63:fc:fc:6a:ce:95:1c:4e:2a:
af:a0:80:58:c3:ec:66:68:c7:c9:0f:8c:5e:f8:49:
09:c5:c8:da:8a:12:c2:80:22:8e:d8:e0:b2:a1:23:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DE:1D:A6:F5:B6:AF:93:71:90:8F:CA:3F:A0:3B:2A:43:B0:37:A2
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Jt4dpvW2r5NxkI_KP6A7KkOwN6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.37.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:36:7c:e4:26:16:53:77:b6:f6:2b:e2:bb:10:9e:c7:77:9d:
50:ce:87:7e:6e:44:73:5e:7a:8d:92:33:33:bd:a3:cf:b4:7d:
20:1c:02:22:3f:ca:f3:d1:ec:7b:e2:fa:ab:6f:c1:f1:62:7f:
a4:b9:32:f9:50:89:a2:6f:60:e6:45:89:d2:25:8c:70:fa:41:
95:79:46:ab:f4:74:e4:d7:49:9e:7c:e9:06:bf:00:da:df:2b:
d7:43:91:ce:6a:79:a4:6c:82:76:75:b8:6d:18:1a:57:07:3d:
4f:0e:4f:49:ab:8b:c2:04:2e:90:0d:9d:3d:3c:9a:9b:6f:7c:
87:0f:b8:d5:c9:db:6f:89:a7:68:f4:57:b0:e9:fd:a4:f3:26:
6c:f4:e2:c0:c8:8c:e4:c8:e6:12:29:8b:8e:0d:d4:29:48:56:
51:35:fc:55:e4:ea:e6:43:a5:f1:22:b0:75:15:c8:2a:a4:ca:
9c:d6:dd:b2:90:a7:d7:66:85:f9:f8:20:6a:3d:8a:ed:31:97:
8f:cb:43:bf:5b:9a:51:5e:0a:64:e2:7f:b3:a6:d8:13:65:cb:
77:3d:ce:1a:f3:5e:3a:13:30:c6:3b:99:72:8f:16:04:f9:a0:
3d:29:0d:4e:a3:a8:ac:79:f1:e3:fb:6a:80:6e:6e:77:8f:73:
bc:9a:dd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:16:14 2024 by rpki-client on console-ams.rpki-client.org