Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rqfL4rScY4CR7FIKwaLgCV8nr2s.roa
File: rqfL4rScY4CR7FIKwaLgCV8nr2s.roa (raw, json)
Hash identifier: VUJqBtxcMQfAu4w1vQvpVYjCciG/feKJKaSFiAD+kcc=
Subject key identifier: AE:A7:CB:E2:B4:9C:63:80:91:EC:52:0A:C1:A2:E0:09:5F:27:AF:6B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01922CACB3F6F557C76DFB671E0DB14387BF
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rqfL4rScY4CR7FIKwaLgCV8nr2s.roa
Signing time: Thu 26 Sep 2024 04:52:48 +0000
ROA not before: Thu 26 Sep 2024 04:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60446
IP address blocks: 45.138.183.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2c:ac:b3:f6:f5:57:c7:6d:fb:67:1e:0d:b1:43:87:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 26 04:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aea7cbe2b49c638091ec520ac1a2e0095f27af6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:ec:87:c8:61:81:44:37:ae:cd:c2:fd:3c:
ed:13:d0:e2:d4:e6:53:e7:8f:ed:64:b9:40:e7:30:
8d:a3:54:e6:ee:3a:b8:cb:3a:34:df:1e:39:9d:5d:
eb:a4:82:e3:5a:9e:14:8b:7e:ef:d2:03:d6:2e:52:
49:ed:73:91:9a:4e:5d:60:de:70:b6:e1:d6:65:b0:
d9:a8:be:c8:c2:24:94:48:40:53:8a:4f:2b:9b:bb:
7d:a2:b5:98:2c:0b:b0:31:f8:b7:b2:8f:88:48:73:
93:de:b3:a4:52:27:53:fe:05:c1:e0:b9:6d:bf:80:
ab:ab:1a:0e:75:96:86:4a:c3:33:92:17:9f:23:4a:
00:8d:6b:d3:ac:c5:ea:e2:7e:8d:25:d1:e8:ae:39:
a3:82:67:f2:ec:a6:08:a3:eb:66:51:dc:95:05:fc:
23:25:ee:89:c2:c5:5d:cf:f9:04:23:42:0b:f5:47:
f7:8f:26:f0:58:29:d4:96:96:d9:e7:f0:34:7b:81:
dc:74:13:38:54:ce:cf:6e:b9:60:a3:f3:de:d2:96:
a9:52:13:61:ab:c5:33:b2:73:c9:66:3d:cf:a8:d1:
2f:4f:5e:db:73:75:9a:e9:ba:7e:b2:25:90:0b:a7:
8b:b4:b2:4c:71:e5:19:61:68:3e:41:2e:49:ed:7a:
3d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A7:CB:E2:B4:9C:63:80:91:EC:52:0A:C1:A2:E0:09:5F:27:AF:6B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rqfL4rScY4CR7FIKwaLgCV8nr2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.183.0/24
45.144.214.0/24
Signature Algorithm: sha256WithRSAEncryption
83:de:9f:bb:81:de:40:b4:a2:4d:d6:a9:ca:7a:9f:6c:47:c0:
4d:72:2a:81:95:79:96:9a:d0:d5:b0:55:df:03:a9:7b:a0:72:
2b:c3:16:ac:aa:74:e6:1b:33:28:ea:43:f7:6c:76:5a:f6:f6:
db:45:c2:cb:39:15:fd:ab:62:20:c9:e1:98:a3:fe:86:93:e2:
6d:53:58:57:5d:4d:ed:04:d1:d8:3c:f3:7f:7c:90:85:9c:9b:
e5:83:14:8f:1f:32:3a:68:8d:a9:99:5b:b7:89:5b:e6:4e:ff:
61:fa:14:c2:ab:ba:d1:2e:fe:a4:44:d7:1c:e0:ae:b0:4d:ec:
3a:89:6e:56:be:bc:dd:89:d6:49:6e:e3:30:46:97:a5:59:37:
8c:03:8e:3d:6d:41:32:f3:2b:63:a6:45:90:91:35:c2:47:25:
c5:a6:fd:42:cd:a2:be:a6:9e:bb:3a:b7:15:57:61:bd:08:29:
07:50:88:2a:91:39:3c:3f:7a:da:58:d2:b3:49:8a:8c:0c:30:
ee:a2:19:2a:84:0e:0a:b4:f7:4d:cb:bf:ce:13:58:55:bd:4c:
83:8a:e8:d4:30:a2:d4:38:bc:d5:b5:88:41:54:3c:45:45:63:
c2:31:f8:af:76:a1:92:14:6f:a1:c4:66:b7:55:ee:72:c4:c1:
a4:13:2b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:33:26 2024 by rpki-client on console-ams.rpki-client.org