Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/necFGuNZAP_WKooxGWHAXhHuevE.roa
File: necFGuNZAP_WKooxGWHAXhHuevE.roa (raw, json)
Hash identifier: ma8oj1n83FLYwNZsJAOiAhwj7leQT5zaVhfP/vW2v0E=
Subject key identifier: 9D:E7:05:1A:E3:59:00:FF:D6:2A:8A:31:19:61:C0:5E:11:EE:7A:F1
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E35781620C304D3A9F676A3E57691
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/necFGuNZAP_WKooxGWHAXhHuevE.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49697
IP address blocks: 45.11.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:35:78:16:20:c3:04:d3:a9:f6:76:a3:e5:76:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9de7051ae35900ffd62a8a311961c05e11ee7af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:31:71:bd:a5:5d:59:31:58:22:6a:e5:38:
c7:cf:b1:12:d1:c9:fc:fd:2c:b8:a7:bd:37:1e:ae:
fa:01:7e:db:c1:cf:87:dc:d4:c2:eb:86:0c:7f:a8:
b4:8b:b0:e1:37:2d:e6:a1:2b:30:47:d7:5c:2c:92:
1b:e4:93:a2:5a:9f:00:e0:a5:7c:a8:ae:8d:40:64:
12:60:63:e4:55:6e:16:2e:ce:a0:83:79:d7:d8:37:
e9:53:80:c5:67:fc:cd:50:7c:e5:4e:19:30:7b:68:
c5:27:85:d0:7f:b5:1f:20:a1:22:e3:5e:3e:66:6e:
dd:2c:9b:f1:38:c1:37:b0:a2:5c:06:97:76:d9:8f:
4c:31:44:17:00:51:97:c8:3e:d5:b0:ce:84:c0:2e:
69:a3:92:bf:d9:ef:93:6c:bf:af:5e:c1:10:49:e0:
e7:4b:6f:d0:a6:be:67:75:4f:07:f2:14:20:98:b1:
34:dc:65:0e:bb:02:fb:9d:65:8d:7c:71:aa:49:25:
39:cc:98:14:e9:0e:17:fe:56:2f:09:87:c8:c8:46:
14:b4:ca:ec:bf:73:e4:48:51:98:f0:dd:9d:3a:37:
af:0f:e6:20:73:55:73:27:0c:a2:b8:0f:d1:81:c9:
76:a8:40:8c:cd:22:10:f8:7c:b9:86:7e:79:94:73:
45:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E7:05:1A:E3:59:00:FF:D6:2A:8A:31:19:61:C0:5E:11:EE:7A:F1
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/necFGuNZAP_WKooxGWHAXhHuevE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:9d:7c:de:02:5f:2e:c9:3f:66:77:e2:8a:fb:5d:c5:74:33:
7d:f9:bc:77:e0:44:fa:59:96:1e:6d:c0:ac:37:15:8d:f6:02:
ec:eb:9d:0d:9b:38:83:4a:30:98:62:2b:d3:5c:c3:fd:27:f5:
b9:71:e9:8a:fe:e5:6c:98:f9:40:ac:e0:d5:c2:f5:e7:48:b7:
a0:a1:b9:07:88:58:2a:9d:43:b7:7a:96:d9:55:a7:6c:92:56:
0c:6a:be:c8:49:56:23:54:39:52:1f:04:52:8d:af:1d:a5:dc:
39:72:76:76:95:19:3d:a2:0c:c4:4d:df:e0:77:95:9c:88:7d:
41:cb:78:7c:39:da:ba:f5:b7:db:d6:e3:6d:e4:1c:62:30:3c:
9c:4d:5c:4c:fc:e8:3c:f9:1a:ed:46:f6:c1:3b:1d:c5:8b:ec:
08:9c:2f:f2:c5:34:1f:77:41:e1:a1:e4:b5:64:0b:d2:3b:cd:
0b:d1:4f:59:ce:73:f5:6f:cd:cd:d6:f1:37:f5:5b:e1:2f:3d:
6e:0e:6c:c7:fb:dd:89:80:f9:7f:b6:9d:3a:4e:bd:ba:93:85:
e9:55:72:1a:f1:cc:e7:d8:d6:5b:0c:01:4d:21:96:44:b5:60:
0c:a0:cb:88:70:aa:b7:ce:9f:22:81:2f:75:88:df:b6:cd:f5:
ee:d8:d6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:19:21 2024 by rpki-client on console-fra.rpki-client.org