Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/fcLaWJdRWTcAAdnzV1lS_RChzfk.roa
File: fcLaWJdRWTcAAdnzV1lS_RChzfk.roa (raw, json)
Hash identifier: RoUixH4rZaLLyfFH+i/Zk+ObwK9+zJstBg32lodbICo=
Subject key identifier: 7D:C2:DA:58:97:51:59:37:00:01:D9:F3:57:59:52:FD:10:A1:CD:F9
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E3672ED3C912AB6934657C4D5CEC01835
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/fcLaWJdRWTcAAdnzV1lS_RChzfk.roa
Signing time: Wed 13 Mar 2024 06:14:45 +0000
ROA not before: Wed 13 Mar 2024 06:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 45.144.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:36:72:ed:3c:91:2a:b6:93:46:57:c4:d5:ce:c0:18:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 13 06:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dc2da58975159370001d9f3575952fd10a1cdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:67:bd:62:33:71:2b:0a:92:19:70:19:6a:
f9:15:f1:b1:a5:88:25:16:fd:bb:a4:28:46:0c:f9:
0f:1c:31:3b:37:49:b4:f6:9c:0c:4d:d2:a7:d9:73:
52:8d:c9:d4:61:52:25:66:74:5f:22:07:f5:08:39:
e2:1a:e2:9a:a9:e7:ac:e2:39:a1:aa:c4:89:fb:42:
76:10:58:a9:e4:45:f1:d0:6e:23:d5:3d:d2:31:89:
0f:23:2b:e4:31:8f:e9:e5:e0:54:76:1d:95:2b:3e:
73:07:12:4e:49:48:9a:e8:31:20:d6:23:78:f7:58:
37:c3:cb:76:39:2e:85:ea:17:76:f2:05:25:03:2e:
09:24:e7:3c:33:e5:9f:c6:7e:28:72:d7:d8:1c:ec:
94:2e:2a:d2:23:f5:c9:21:cf:da:c1:fc:cd:0a:6d:
e2:90:84:31:42:db:c4:d8:0f:7e:db:e4:08:09:1e:
3d:e3:e2:80:77:58:7c:d0:43:0d:97:3a:fa:37:32:
3d:17:5b:1d:80:20:53:62:6f:66:8a:a7:3c:fd:1d:
be:c3:43:83:5a:82:ed:4b:53:08:10:d7:d7:0f:d5:
4f:37:1a:af:fa:9a:ee:a3:02:d4:1a:45:c7:2a:4b:
3e:26:ec:23:e2:43:ec:a7:b3:fe:31:83:42:5b:f3:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C2:DA:58:97:51:59:37:00:01:D9:F3:57:59:52:FD:10:A1:CD:F9
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/fcLaWJdRWTcAAdnzV1lS_RChzfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.213.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:58:de:e2:5a:41:b0:80:32:87:df:45:62:a4:f0:a9:c9:51:
ce:39:f3:eb:75:0a:05:08:14:a7:93:1a:ed:78:10:80:3d:8f:
01:98:54:b8:91:78:32:f2:0b:72:f6:3e:bc:b2:06:35:02:3f:
c5:49:c0:48:99:f5:3c:e7:19:87:a7:18:b1:25:c0:5f:38:47:
db:3e:1d:a2:ba:b7:e9:3b:77:e5:de:35:8d:0d:1d:a6:3c:72:
5c:62:67:64:5f:91:6d:6c:89:4c:4f:21:53:c0:1e:e9:cd:8d:
a2:b7:67:2e:e0:54:b4:39:c5:52:08:bc:b0:0f:67:64:9a:d1:
64:20:14:b2:8f:4e:32:d8:6c:aa:2c:87:a9:e1:0d:7a:50:8c:
e4:da:88:79:86:96:a9:87:cf:5f:80:d7:67:df:19:cd:df:54:
b5:1a:1f:fc:49:ea:5d:13:30:a3:90:69:11:e7:33:84:43:75:
95:19:57:ec:4c:d4:3f:18:7f:4e:f5:0b:9e:ee:44:5a:49:c3:
b9:2a:7f:85:36:90:b7:3e:c4:0d:0a:c2:69:39:7c:fa:ba:f4:
9e:f4:a3:40:51:cb:49:88:e3:e6:90:4d:69:7d:5f:0f:18:c9:
cb:20:fe:55:9b:30:82:51:3f:a6:4b:34:c9:52:c9:91:e5:2d:
4a:ce:22:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:05:12 2024 by rpki-client on console-ams.rpki-client.org