Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/r__Bd6b-dLuOXtLyvpUlyJ1fOTE.roa
File: r__Bd6b-dLuOXtLyvpUlyJ1fOTE.roa (raw, json)
Hash identifier: D6zDBUjRl7BHGOK46FGTHIXZnjHp3HMQPBV+wt1KWuk=
Subject key identifier: AF:FF:C1:77:A6:FE:74:BB:8E:5E:D2:F2:BE:95:25:C8:9D:5F:39:31
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018EA078E2023888A5919A4950A732B45405
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/r__Bd6b-dLuOXtLyvpUlyJ1fOTE.roa
Signing time: Tue 02 Apr 2024 20:21:00 +0000
ROA not before: Tue 02 Apr 2024 20:21:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216068
IP address blocks: 147.45.114.0/24 maxlen: 24
147.45.176.0/24 maxlen: 24
147.45.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a0:78:e2:02:38:88:a5:91:9a:49:50:a7:32:b4:54:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 2 20:21:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afffc177a6fe74bb8e5ed2f2be9525c89d5f3931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:93:07:9e:84:87:67:eb:a4:91:36:6c:5b:af:
7e:fc:46:00:a1:9e:88:ce:3c:72:48:0f:da:02:29:
41:f1:0b:89:cd:3a:af:32:35:30:39:cd:f4:94:f1:
59:5f:b8:51:91:4d:a7:f6:5c:c8:30:49:e2:5c:ec:
c9:52:22:77:e2:05:6d:08:70:b9:df:2d:46:06:82:
70:ff:47:88:bc:2d:7f:6e:28:b7:b4:dd:72:b6:c1:
94:6f:f4:b9:d4:10:a7:6b:4b:18:01:0d:6e:1a:c1:
de:56:28:3e:38:55:5b:53:3a:36:fb:1d:a4:5a:9b:
7a:fe:1a:da:2f:6b:dc:f0:f4:ff:94:60:9f:31:fb:
55:1e:46:1d:a4:e2:c4:33:f7:6a:22:8a:78:d2:1a:
01:93:80:11:ef:06:b9:a8:32:3d:91:f5:24:b6:9f:
8a:15:ee:ca:05:5f:5a:2f:e1:9f:3b:55:26:77:86:
7f:ab:59:a9:64:f3:99:98:ee:3e:fa:08:4b:6a:fa:
9a:4c:1d:21:3b:7a:d5:51:35:92:46:f5:09:46:16:
14:62:40:b7:30:ab:03:99:65:d9:b9:9d:4f:dc:66:
d6:1f:81:17:ab:61:f1:dc:65:39:5b:ad:b1:78:81:
7b:6a:68:f5:8c:29:80:6a:53:9d:7b:01:70:b1:7d:
5e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FF:C1:77:A6:FE:74:BB:8E:5E:D2:F2:BE:95:25:C8:9D:5F:39:31
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/r__Bd6b-dLuOXtLyvpUlyJ1fOTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.114.0/24
147.45.176.0/24
147.45.188.0/24
Signature Algorithm: sha256WithRSAEncryption
09:90:78:74:e8:da:f0:b3:94:c9:eb:96:9d:3e:b2:3c:c4:77:
79:3d:db:15:a2:63:b2:fe:93:4f:16:1e:f4:3b:d5:12:92:fd:
41:56:e3:cc:f3:30:e1:9a:97:9c:ed:ab:75:d0:5f:78:17:22:
19:d7:39:5c:41:bc:78:af:bf:28:29:b3:2f:01:cf:70:4c:ad:
d1:d6:94:2b:2f:4b:22:11:ad:ec:b6:01:84:3d:81:49:92:93:
87:f6:c6:df:f0:14:b1:f8:5b:4c:f3:33:99:b5:70:83:9e:fd:
a2:03:aa:07:8a:59:30:c0:9a:b9:1d:ea:97:78:df:11:f2:7d:
d2:88:f9:ac:e0:29:e6:0a:4d:9f:14:ad:66:85:af:eb:fc:41:
a1:1d:6b:8c:68:84:c2:6d:a9:0b:d1:eb:4e:d9:25:8e:33:28:
18:08:d9:11:cf:5e:6f:f6:c3:f6:d7:e6:3c:0e:32:e1:58:b9:
e9:6f:84:ab:55:af:bc:44:32:ed:6b:6b:7b:07:30:8e:e5:4b:
ae:21:a5:c9:a8:d0:6c:74:f4:2c:7c:fb:93:96:9b:91:aa:8d:
5a:22:61:c5:c7:89:cd:86:2b:68:32:cb:28:66:b0:7a:33:82:
44:fc:42:f7:11:1d:e7:d3:d1:8f:1d:f7:e4:78:65:14:62:5a:
6b:df:5d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:16:14 2024 by rpki-client on console-ams.rpki-client.org