Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/P-rhVZRhgtN_rfFm6rGQOKlNmHU.roa
File: P-rhVZRhgtN_rfFm6rGQOKlNmHU.roa (raw, json)
Hash identifier: gy9InDllLYOgj1Wda+p39o+o7L9Anyp/yXakSkBjvYc=
Subject key identifier: 3F:EA:E1:55:94:61:82:D3:7F:AD:F1:66:EA:B1:90:38:A9:4D:98:75
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018D46C25E215830BF923F6CB36687E9F03E
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/P-rhVZRhgtN_rfFm6rGQOKlNmHU.roa
Signing time: Fri 26 Jan 2024 17:12:39 +0000
ROA not before: Fri 26 Jan 2024 17:12:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215789
IP address blocks: 147.45.44.0/24 maxlen: 24
147.45.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 22:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:46:c2:5e:21:58:30:bf:92:3f:6c:b3:66:87:e9:f0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 26 17:12:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3feae155946182d37fadf166eab19038a94d9875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:27:f0:2f:ab:54:a1:1c:33:01:53:d1:55:b0:
1f:ff:a3:5c:47:45:d0:f1:18:29:a6:73:97:79:9b:
6b:08:7c:e7:b3:6b:d3:e7:aa:58:8c:46:cb:d7:a8:
aa:70:16:4e:47:23:27:d7:39:74:cc:ae:c6:b9:ee:
14:1f:6d:aa:e5:24:fc:cf:33:04:14:9e:79:97:d0:
85:df:18:af:a2:e1:de:d3:bc:3e:c7:8d:66:21:52:
a2:d5:8c:02:7b:9a:67:8e:8e:55:6b:2c:ed:4e:20:
8c:70:06:6a:f9:08:e6:65:05:7d:39:69:65:24:6d:
09:6b:07:9d:59:d4:b7:6f:ef:09:75:39:6c:35:c4:
76:21:11:c9:5c:c6:50:3a:2d:b3:f7:60:f7:01:81:
3b:ae:19:32:d1:58:f8:d8:1e:0f:be:75:47:fd:81:
93:8f:20:2b:70:22:08:ba:ea:b8:e4:1e:c2:41:c7:
28:8c:af:6b:d0:95:03:76:fe:3b:15:05:2f:ce:6f:
e8:6d:51:18:8c:36:77:f8:05:bb:b4:06:cd:dd:75:
f4:e4:0b:93:13:fa:41:89:1b:8e:02:13:1c:22:ff:
2c:9e:b5:2e:32:ea:6d:86:07:84:1d:17:ab:f1:43:
97:db:68:83:c4:38:e5:5d:ed:34:ce:aa:a8:cd:47:
64:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EA:E1:55:94:61:82:D3:7F:AD:F1:66:EA:B1:90:38:A9:4D:98:75
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/P-rhVZRhgtN_rfFm6rGQOKlNmHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.44.0/24
147.45.47.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f7:5a:d2:84:e5:1f:ef:8b:88:7b:b2:f0:ca:06:5c:32:3f:
13:41:f6:30:fc:2a:46:bc:68:d4:b2:66:40:9d:8d:95:54:23:
12:4d:d1:ac:3f:1e:f0:9e:1e:55:fb:05:ab:16:36:3c:d7:fe:
28:e7:b7:cc:53:7e:b6:ac:ef:48:1d:13:ae:3a:92:60:a7:8f:
5d:89:f6:02:3a:d9:ce:56:de:af:a8:5e:3d:3f:f6:00:93:cb:
83:a1:b2:e4:13:3b:c3:9d:c9:f4:4e:2b:a9:b6:f7:ee:ab:96:
dd:ab:91:cc:4a:4d:e0:7e:2f:7f:4d:a4:13:e1:f4:d7:9e:74:
dd:5b:0e:cb:81:81:39:16:76:95:e8:da:0b:82:0d:15:9d:ec:
3b:29:ed:6b:80:96:1f:3b:48:1e:fc:8c:58:18:b7:89:3a:1b:
fb:28:ae:aa:fe:02:ab:a2:90:bb:fd:91:1c:3c:f7:69:ac:6e:
94:cb:69:48:23:02:dd:17:f8:c6:6c:c1:d6:8a:2e:99:87:84:
9f:38:eb:8b:41:5d:cd:15:f0:f4:fb:a5:c5:ac:18:4e:ea:c0:
b6:d1:20:a1:b4:c3:e3:fa:a4:82:ac:e9:e0:ce:2d:4b:ac:1c:
4f:c7:5b:ca:ca:d9:41:f7:d2:cb:84:2e:fd:09:32:f2:f6:08:
e1:cb:cc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:05:05 2024 by rpki-client on console-fra.rpki-client.org