Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/L_Al-dqIIqO-vF45nBgJcKGuuuM.roa
File: L_Al-dqIIqO-vF45nBgJcKGuuuM.roa (raw, json)
Hash identifier: 28IKE0qOf4L6LosUCDoayu7ZaCtNZH5bO0guzbaMN2s=
Subject key identifier: 2F:F0:25:F9:DA:88:22:A3:BE:BC:5E:39:9C:18:09:70:A1:AE:BA:E3
Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial: 018CC5DC341553734A9E4E395A1E5DD9227B
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/L_Al-dqIIqO-vF45nBgJcKGuuuM.roa
Signing time: Mon 01 Jan 2024 16:29:51 +0000
ROA not before: Mon 01 Jan 2024 16:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198385
IP address blocks: 45.147.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:34:15:53:73:4a:9e:4e:39:5a:1e:5d:d9:22:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Validity
Not Before: Jan 1 16:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ff025f9da8822a3bebc5e399c180970a1aebae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:95:87:5c:f2:33:d1:03:da:51:e3:8e:fc:
ec:1d:27:53:e4:74:7e:90:b6:eb:b5:47:70:a2:f1:
56:5f:2b:d7:5a:39:58:93:fb:39:54:8b:8d:a3:c8:
bb:e5:b5:be:8f:83:ed:b2:1d:95:d4:25:dd:2b:29:
c7:91:02:25:26:06:8e:44:0c:02:7c:aa:ec:6b:32:
58:08:70:a1:0a:d9:3c:8f:58:65:ab:32:84:a5:bd:
e3:ae:70:ca:f5:16:74:b5:07:00:a8:f0:21:e9:d6:
9c:95:40:a6:ad:34:d4:10:77:ce:c1:69:27:ac:f2:
82:14:01:34:d0:da:e9:9b:50:ad:7a:2d:7e:79:5f:
32:28:60:0a:8a:cc:4f:8c:f1:da:20:c0:30:b5:11:
70:45:78:9e:94:b3:8d:1a:f6:11:ab:50:f6:b0:25:
93:32:1d:5a:bc:b6:bf:5b:4a:1c:a7:4d:82:28:da:
21:50:82:fd:57:98:db:f8:7b:b5:52:02:41:e2:53:
9a:d6:4a:a4:6f:fe:61:29:d9:0b:93:1c:29:b7:ae:
02:0e:fd:89:bc:6f:39:54:7b:1e:23:7c:c0:ed:99:
b9:92:53:78:27:f7:bb:eb:7b:1b:fa:4f:86:84:de:
72:7d:f4:4c:f5:c8:63:80:e8:99:f4:09:85:63:99:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F0:25:F9:DA:88:22:A3:BE:BC:5E:39:9C:18:09:70:A1:AE:BA:E3
X509v3 Authority Key Identifier:
keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/L_Al-dqIIqO-vF45nBgJcKGuuuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.41.0/24
Signature Algorithm: sha256WithRSAEncryption
71:8b:6d:5e:75:88:f2:bf:b9:9a:c2:21:ec:b1:13:d6:2b:37:
7c:2a:31:33:75:41:02:8f:d8:14:0c:f5:85:6c:d9:7c:6b:23:
d8:af:d1:0c:c5:07:e0:a6:1d:50:18:2f:f5:95:6b:fa:89:da:
64:eb:b6:7e:a3:16:e1:1e:c0:30:0b:a4:55:f8:27:a9:dd:9a:
a8:78:ce:c7:73:73:ca:93:2b:10:67:08:58:a7:f4:6c:a2:70:
26:52:f1:4f:1f:57:13:fd:0b:77:73:fd:b5:43:43:b7:cb:7b:
f6:8f:6c:64:3a:55:89:15:d9:d9:3e:e7:65:ac:38:b3:07:0b:
04:ef:8d:b4:79:d6:2d:a3:40:fd:e0:20:9a:e1:f8:00:e6:38:
a3:04:87:54:93:c6:e7:e3:b0:6b:53:cf:0f:6e:35:32:2f:0c:
37:65:3d:f9:0a:e3:d2:ab:29:88:2f:05:aa:cb:ad:3b:10:c8:
33:ba:31:91:6d:19:0a:e6:d4:bd:07:e8:6b:94:18:a6:be:b3:
38:b0:a4:e6:80:70:f2:a3:dd:b6:4d:54:3f:39:06:32:a0:74:
11:b9:1e:5a:04:94:f9:a9:d1:bc:a6:4b:f8:5f:d6:d6:14:ac:
3e:3a:d8:8c:33:c8:43:7d:c7:a0:3c:8b:ed:40:5a:12:8e:92:
20:8b:a9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:26 2024 by rpki-client on console-fra.rpki-client.org