Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/0PhYFHzwZFAmIgTZfiN2_x4rBz8.roa
File: 0PhYFHzwZFAmIgTZfiN2_x4rBz8.roa (raw, json)
Hash identifier: aGfAYEhNk29+Cn7cR2shUOkRIBEQcugGMJ0yWkpvjUc=
Subject key identifier: D0:F8:58:14:7C:F0:64:50:26:22:04:D9:7E:23:76:FF:1E:2B:07:3F
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0190B5FE84502E6B0A44676AB2AB6D784F5B
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/0PhYFHzwZFAmIgTZfiN2_x4rBz8.roa
Signing time: Mon 15 Jul 2024 10:44:34 +0000
ROA not before: Mon 15 Jul 2024 10:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.150.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b5:fe:84:50:2e:6b:0a:44:67:6a:b2:ab:6d:78:4f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jul 15 10:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0f858147cf06450262204d97e2376ff1e2b073f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d6:94:af:c9:7b:f5:43:5d:01:7b:d3:72:31:
db:69:5d:33:c6:9c:64:a0:6a:75:e2:b3:26:03:f1:
8f:53:48:28:3b:14:26:f2:fb:f3:44:19:d2:65:eb:
a3:39:4c:3d:c8:62:ac:3b:4b:26:18:56:1f:54:d5:
38:3e:91:d2:07:28:18:6e:36:06:3e:c2:3f:16:4d:
ab:1a:54:ca:5c:e6:54:cb:77:5b:c9:5b:fc:4e:19:
f9:8e:e6:40:e5:6b:e4:42:83:e7:e2:d7:ff:67:96:
64:04:8e:b5:6a:b5:d6:62:bc:76:b1:b4:a4:25:ac:
d4:ea:b4:00:93:46:f3:d0:50:3b:06:86:f0:f1:7d:
c3:ef:06:be:6d:f0:95:46:ee:95:af:9b:6f:5a:a2:
e3:08:76:06:75:99:62:c8:a1:25:87:63:99:fc:d8:
2a:0f:43:c9:07:d9:00:e6:1e:b7:a6:b5:0d:44:9e:
6e:9d:ba:f0:cd:b7:40:d0:44:79:ee:9f:75:3f:25:
00:c3:e8:b5:25:0a:1a:1f:a3:01:2d:11:36:93:70:
a1:8b:1e:78:85:7b:4a:b4:b0:f0:99:8b:cb:09:0e:
ce:04:3b:b9:89:78:3e:1b:94:54:bf:ee:0e:a8:71:
f4:e7:2b:bf:7b:1a:a3:47:4a:43:4e:f2:fc:da:a4:
2e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F8:58:14:7C:F0:64:50:26:22:04:D9:7E:23:76:FF:1E:2B:07:3F
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/0PhYFHzwZFAmIgTZfiN2_x4rBz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.175.0/24
Signature Algorithm: sha256WithRSAEncryption
33:cd:d4:32:d1:c4:f1:89:02:c1:ff:0a:90:2c:8d:db:ef:08:
0c:2a:85:9e:56:4e:df:29:37:ed:a1:61:09:74:6e:ec:1b:21:
a4:62:c8:5b:b2:22:97:b8:eb:49:c2:10:8f:43:93:25:94:06:
0a:53:7c:da:ba:86:69:27:fd:b0:26:16:36:5c:29:97:b2:2a:
7a:b8:2d:e9:bc:5d:25:5e:62:9d:82:da:1e:36:c9:53:1f:a2:
26:38:37:c6:f9:19:9f:bd:33:2e:ae:64:2a:1c:fb:93:4f:5f:
78:05:28:e7:00:6c:ad:77:1e:7d:95:f3:00:85:f8:d9:ef:c9:
91:2b:de:e3:85:50:f4:88:cf:82:59:62:bd:5f:87:a0:39:b9:
ef:da:95:76:36:b5:6b:2f:ef:f3:23:7f:9f:c7:01:68:1b:3c:
9d:a0:a7:8b:24:8b:13:dc:99:c1:5c:f3:2c:27:8d:45:2f:ea:
13:35:a9:30:a1:2c:ed:ca:42:e9:1d:fe:2d:c5:29:9c:e4:f8:
ec:35:46:bf:36:d7:c1:61:fc:53:ed:9a:e7:fc:1d:2c:8b:39:
6e:cf:c5:cf:30:d5:e4:30:e4:a1:c8:37:de:3f:3a:97:f9:2c:
de:39:af:f9:b7:09:3b:08:bc:49:83:87:33:6b:64:5e:94:16:
b6:d7:ee:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:59:52 2024 by rpki-client on console-ams.rpki-client.org