Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/MdTPb9F6a7RjB2T9bd3L8jD03yE.roa
File: MdTPb9F6a7RjB2T9bd3L8jD03yE.roa (raw, json)
Hash identifier: UyWJZqPYFGySfxDqxJPvDm0N29Ll2gPDmBiJOS8Xahk=
Subject key identifier: 31:D4:CF:6F:D1:7A:6B:B4:63:07:64:FD:6D:DD:CB:F2:30:F4:DF:21
Certificate issuer: /CN=f457bc193a595948a7b7a096b710bb5262830f41
Certificate serial: 018F0520C016521767976082926B9B95FD2D
Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/MdTPb9F6a7RjB2T9bd3L8jD03yE.roa
Signing time: Mon 22 Apr 2024 09:26:23 +0000
ROA not before: Mon 22 Apr 2024 09:26:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208724
IP address blocks: 45.87.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:20:c0:16:52:17:67:97:60:82:92:6b:9b:95:fd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41
Validity
Not Before: Apr 22 09:26:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31d4cf6fd17a6bb4630764fd6dddcbf230f4df21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:35:a8:45:e9:1c:dc:d1:7b:fa:a5:ed:c4:4c:
ba:a9:d5:c5:81:25:d1:6f:51:e6:3b:3e:db:f0:64:
e5:3c:39:bc:77:fd:3d:89:14:57:3a:21:70:d0:f9:
f8:f6:0a:37:f3:25:24:50:9b:03:9a:48:57:0a:32:
d6:12:22:bd:e8:59:1b:a4:fd:10:8b:85:2b:b9:30:
44:8c:f7:9c:a4:2c:a9:d6:65:9c:2b:5a:5a:26:01:
00:b5:51:3b:8b:0d:5f:e6:19:88:ca:67:7d:42:ea:
4b:58:5f:95:c1:bd:0b:4e:f3:4d:8e:80:0f:32:07:
cc:4f:d6:39:15:6e:f4:8d:f0:56:c1:86:fb:39:7d:
4d:c9:58:0a:19:19:31:58:92:fb:e3:55:d5:1f:84:
67:3e:f4:17:4f:12:72:a6:f8:37:83:0a:cc:af:fe:
5f:6b:af:c4:6d:2e:2d:33:1e:90:03:81:d0:69:68:
b3:a8:38:74:7c:1d:e9:c1:58:43:7e:a2:10:88:8f:
f5:70:99:c3:a4:12:3b:ee:61:a6:b7:3d:f7:9a:3d:
47:b0:67:30:76:0c:fd:8a:49:c2:ab:63:11:1c:08:
df:22:96:bb:ff:ca:6f:3a:ae:e9:8e:8d:c5:09:7b:
58:38:ad:0d:61:0a:b2:11:03:25:9c:49:14:90:43:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D4:CF:6F:D1:7A:6B:B4:63:07:64:FD:6D:DD:CB:F2:30:F4:DF:21
X509v3 Authority Key Identifier:
keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/MdTPb9F6a7RjB2T9bd3L8jD03yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.96.0/22
Signature Algorithm: sha256WithRSAEncryption
36:b2:ca:16:c0:a1:22:39:8b:84:99:64:89:4d:e7:db:cc:2c:
8c:b5:75:b5:a7:f2:54:3e:41:d0:b0:91:18:22:90:6c:74:6d:
55:06:f6:19:28:7d:e1:a6:54:bf:14:86:7c:7e:a3:86:b4:1e:
b7:f6:88:ee:f2:52:02:38:e2:6f:7c:c9:64:af:4b:ff:02:e7:
ca:e6:d7:7c:1f:a0:d9:da:b0:ea:bc:5b:ae:fc:d6:7b:80:b8:
33:5b:bc:e8:56:05:9d:e1:68:3e:cb:0a:53:c1:62:de:1f:a7:
5f:d6:82:f3:ba:f7:08:36:95:4a:ff:38:9e:2e:56:72:47:fd:
9f:0f:e1:bd:7f:8a:b1:65:11:17:57:2c:9c:7e:58:a1:f2:a4:
22:28:3a:06:f3:9e:24:75:e6:4e:7d:eb:f6:38:1f:c2:b6:dc:
af:7a:cf:5c:6f:ee:b8:fe:98:68:53:e5:eb:f5:9d:e5:54:7d:
4c:7c:73:30:7e:44:ae:70:f5:b4:ff:63:91:19:5b:9d:63:f8:
0e:8e:b6:c8:72:f2:64:b1:0c:43:33:6f:34:e6:63:91:2e:02:
f7:04:0c:9e:fe:25:88:f0:f4:7a:0e:7d:0a:32:78:66:ef:e7:
7b:14:ec:04:d1:ec:ad:df:75:1f:49:7f:0b:74:df:dc:bb:e2:
dd:b5:e8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:32:03 2024 by rpki-client on console-fra.rpki-client.org