Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/pht9bvQnAkU9bYicTm7hbhn7C0Y.roa
File: pht9bvQnAkU9bYicTm7hbhn7C0Y.roa (raw, json)
Hash identifier: N5PUg8u1mzWGo3KkK80S9P+xRcja7IyUlGu7WvjMnwQ=
Subject key identifier: A6:1B:7D:6E:F4:27:02:45:3D:6D:88:9C:4E:6E:E1:6E:19:FB:0B:46
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018FDF48E75124A3FDB4B1F511B899D40E54
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/pht9bvQnAkU9bYicTm7hbhn7C0Y.roa
Signing time: Mon 03 Jun 2024 18:07:27 +0000
ROA not before: Mon 03 Jun 2024 18:07:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211270
IP address blocks: 147.45.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Jun 2024 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:df:48:e7:51:24:a3:fd:b4:b1:f5:11:b8:99:d4:0e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 3 18:07:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a61b7d6ef42702453d6d889c4e6ee16e19fb0b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:55:35:9b:51:3d:1a:60:75:da:b9:81:83:
d4:45:f2:2e:11:b5:01:5a:7a:46:83:6c:95:29:bf:
f8:02:2c:e5:59:5e:3f:01:89:44:fa:16:e1:5d:c8:
be:ec:d7:63:d4:b7:b9:96:23:74:74:ad:a8:79:c9:
db:57:ec:50:25:5b:73:06:e1:41:b0:02:91:17:ea:
60:68:34:3e:33:dc:93:4f:bb:79:92:b1:20:db:0c:
40:66:cc:7c:6e:29:74:02:59:85:e3:b6:79:53:5d:
f0:0d:f6:ba:be:95:11:7f:59:d1:d3:9e:8f:79:f7:
93:eb:94:e3:91:5f:96:72:68:56:10:f5:06:25:0c:
70:c0:54:ee:6f:09:10:e5:b7:57:b1:11:07:7a:2c:
3c:20:44:4d:b9:db:1f:50:a2:8f:c8:bb:1a:17:b3:
04:59:91:28:6f:99:54:4e:b0:04:1b:2a:79:61:85:
ec:a1:bd:4c:f8:82:fe:e6:b1:4d:54:e9:d8:e6:7d:
89:8e:2a:9c:d7:f0:8d:42:8c:95:37:c0:85:c0:4e:
b9:c3:3b:7a:96:b2:11:2a:0c:f9:ee:8e:07:d6:50:
90:6e:b9:28:f9:d2:2f:b6:a1:56:9b:12:08:9c:02:
60:40:ca:e5:45:b2:b8:c6:9a:90:45:d3:ea:ca:65:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1B:7D:6E:F4:27:02:45:3D:6D:88:9C:4E:6E:E1:6E:19:FB:0B:46
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/pht9bvQnAkU9bYicTm7hbhn7C0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.112.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f6:c0:57:15:2f:6b:c4:ac:71:b9:32:d1:68:b9:ea:ba:21:
df:9b:a4:ce:49:c4:af:42:3f:eb:74:88:be:87:bd:65:03:c6:
f9:85:c7:a6:3d:7d:0f:21:31:5d:06:8c:02:ad:f2:a1:f0:8d:
16:bf:a5:0d:d5:c7:8f:70:e9:03:99:41:1b:7a:86:3d:e8:19:
5b:22:57:c7:cb:1f:e8:59:87:df:54:b2:c1:f8:c5:e2:f0:77:
a0:6f:20:28:22:0f:a1:7f:9a:32:67:96:91:6d:a3:46:11:54:
91:45:36:d6:1e:5a:c3:ac:6c:52:18:75:d4:c8:13:b6:68:6a:
58:f2:4d:c0:47:8b:48:5b:1a:95:80:b3:25:ab:9f:dc:c3:bb:
91:5e:4b:20:9c:76:b8:67:fe:a5:79:aa:c0:8e:46:69:26:df:
ed:9c:ef:5e:13:ef:c4:14:15:cb:8b:34:ae:2c:52:f7:2c:0d:
28:67:77:13:9f:be:e5:63:eb:1c:b5:d4:2d:0d:ab:e0:e5:3a:
8f:5c:fe:b8:13:c7:1a:4b:8b:04:90:2e:8d:44:52:75:61:19:
31:e9:fc:fc:e0:d1:eb:33:6f:91:01:d5:6c:3b:a7:1b:9e:a3:
e9:38:a2:7a:d1:c4:a0:76:66:a1:aa:c9:39:3a:a4:14:75:8b:
0a:61:c1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 16:44:58 2024 by rpki-client on console-fra.rpki-client.org