Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7tf9dJniNhVo5l7eC8jK7rcCCF8.roa
File: 7tf9dJniNhVo5l7eC8jK7rcCCF8.roa (raw, json)
Hash identifier: U5mfU8qcNVjZaRwbx/bRwJc7/dEbtFu6/Go14n/onnI=
Subject key identifier: EE:D7:FD:74:99:E2:36:15:68:E6:5E:DE:0B:C8:CA:EE:B7:02:08:5F
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E2D795A94B0EFF7AE5CB6D118E902
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7tf9dJniNhVo5l7eC8jK7rcCCF8.roa
Signing time: Tue 02 Jan 2024 08:33:13 +0000
ROA not before: Tue 02 Jan 2024 08:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.131.110.0/24 maxlen: 24
45.147.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:2d:79:5a:94:b0:ef:f7:ae:5c:b6:d1:18:e9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eed7fd7499e2361568e65ede0bc8caeeb702085f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:0a:25:06:2e:5b:6a:cc:1d:ee:e3:b6:58:
81:94:f5:c3:06:11:c3:a0:27:c3:b4:66:21:5c:39:
a0:4e:af:48:c0:ab:dc:7e:31:7b:63:eb:ea:16:35:
10:c7:44:df:dc:79:af:ae:74:b6:60:79:00:58:5b:
9a:17:a5:13:36:73:f4:a7:11:4e:c1:5e:5d:3d:a2:
9f:07:47:06:b3:07:a4:85:a0:5b:89:1e:df:15:bf:
0e:3f:fc:b9:88:04:e4:c0:4c:80:db:59:2e:7a:99:
6a:76:77:d3:9c:8e:4c:97:1e:f4:2e:de:3c:01:e9:
4b:d0:23:26:53:69:a1:35:32:bf:04:88:08:96:aa:
cd:d0:e8:7f:09:eb:9e:ef:2e:8f:42:96:54:4e:87:
f2:92:5d:9c:82:3c:d4:27:04:c1:1c:84:95:fb:09:
39:10:09:69:d2:60:25:b5:2a:81:0f:2d:60:99:1a:
fc:a8:34:db:dd:3e:30:b0:92:e9:c1:35:f1:e1:5b:
54:f3:cf:02:b7:ab:d3:15:c0:cb:52:19:5b:09:ab:
19:36:a9:3c:59:3e:20:c5:bb:3d:e1:86:a7:98:e3:
24:1b:99:65:bf:5e:4f:73:f3:05:d2:16:57:1c:f8:
4f:40:b8:72:92:2b:35:21:1c:2c:4f:22:e3:08:c2:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D7:FD:74:99:E2:36:15:68:E6:5E:DE:0B:C8:CA:EE:B7:02:08:5F
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7tf9dJniNhVo5l7eC8jK7rcCCF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.110.0/24
45.147.5.0/24
Signature Algorithm: sha256WithRSAEncryption
49:53:e0:3b:67:8f:84:ff:9e:16:f3:e6:4d:a5:8e:29:64:c5:
b9:39:7d:c4:86:c0:48:4a:dd:92:b4:1c:9b:ad:e3:a5:e8:ea:
cf:7e:91:bf:93:95:b3:ac:32:bd:9f:dc:1c:e5:ce:14:08:f1:
66:8f:e1:81:28:22:38:87:40:80:e9:61:06:3d:f3:2f:ae:57:
55:a5:1d:a1:48:6d:37:b8:e3:4d:20:c6:fd:95:13:0e:f0:71:
6d:27:42:c3:37:2c:60:1d:27:2f:ef:df:b5:ef:79:d6:60:84:
8a:56:e1:68:cd:5c:b6:75:fd:4d:76:4d:eb:33:24:ba:3e:c9:
b7:91:a1:eb:09:1b:26:fe:55:75:80:f9:a3:b1:8c:06:31:fb:
c9:c0:53:78:71:50:4b:5d:73:68:d7:71:76:48:bc:35:c9:ef:
b5:47:bb:86:ef:c9:fd:52:3a:00:70:80:39:3b:60:42:36:a1:
50:a3:4f:4c:db:1a:6c:3a:94:71:cb:06:05:e1:fa:14:96:46:
14:88:4b:63:99:19:96:46:85:d8:40:73:27:77:f0:60:9b:37:
7f:0d:a8:fa:9d:b4:f2:25:99:fa:14:e6:ba:89:d9:3d:71:9c:
ae:d2:62:7f:2f:e3:de:07:36:76:a3:5c:a3:6c:fd:80:d1:b0:
02:1b:06:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:53:01 2024 by rpki-client on console-ams.rpki-client.org