Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_cFBx77tSRURpgsi3y4340Wxwsk.roa
File: _cFBx77tSRURpgsi3y4340Wxwsk.roa (raw, json)
Hash identifier: R1fb2LnOX9WWitceMai1yyyFzWyUIEl0KzirNEzsW+0=
Subject key identifier: FD:C1:41:C7:BE:ED:49:15:11:A6:0B:22:DF:2E:37:E3:45:B1:C2:C9
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB382D8E005927D9F7A9495C2B0830
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_cFBx77tSRURpgsi3y4340Wxwsk.roa
Signing time: Mon 01 Jan 2024 02:29:55 +0000
ROA not before: Mon 01 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206847
IP address blocks: 45.143.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:38:2d:8e:00:59:27:d9:f7:a9:49:5c:2b:08:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdc141c7beed491511a60b22df2e37e345b1c2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:fe:b1:42:97:91:77:4d:4e:85:70:aa:25:
78:15:dd:05:5f:95:19:cb:91:2c:0b:6f:a1:d5:96:
c6:e0:7a:f2:27:02:36:1c:12:22:ad:2c:cb:b7:b7:
7f:0a:68:b0:48:7f:37:b5:62:78:3b:a4:15:37:c9:
55:a3:0d:77:a4:65:51:d2:72:08:16:ce:ee:07:65:
25:0d:ce:21:54:ec:3d:60:31:f2:d4:a6:8f:0c:b8:
26:60:70:2f:4e:81:26:40:b8:d4:0d:e1:36:f6:be:
78:99:ac:86:69:68:a2:b4:f3:a2:47:06:c6:a6:87:
85:86:a4:09:7d:a4:36:8e:1c:28:8a:0d:73:61:e4:
c1:05:7b:bf:a2:c6:57:8e:82:46:10:32:7c:95:69:
b1:54:e8:01:48:0e:4f:9f:80:03:30:8c:5b:dd:05:
87:df:b6:9d:3a:ff:12:5b:c6:4f:05:19:9a:8e:3b:
72:8c:bf:1e:bd:b6:d0:17:23:d8:99:51:f8:51:b4:
08:b5:84:2c:64:12:6d:07:2c:ad:25:c1:f9:b3:8d:
a7:32:18:93:6e:a1:9b:2c:a9:db:a0:04:14:68:36:
9f:2b:35:9c:6d:b6:22:8b:6d:6c:88:99:8b:36:10:
8d:c3:34:bb:15:4e:08:68:f7:b6:21:50:d9:5e:1b:
f7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C1:41:C7:BE:ED:49:15:11:A6:0B:22:DF:2E:37:E3:45:B1:C2:C9
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_cFBx77tSRURpgsi3y4340Wxwsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.252.0/22
Signature Algorithm: sha256WithRSAEncryption
78:de:79:8b:eb:ce:50:c5:59:3a:c6:4c:95:a8:04:00:67:9c:
2a:5d:b6:04:3c:41:5d:ec:38:7a:2f:e5:0a:eb:68:c0:25:9c:
78:ed:5d:6d:ea:ae:c4:f5:d3:38:ac:4a:ff:80:6b:da:be:52:
78:1b:8b:34:fa:d7:6e:4b:a6:1a:63:61:08:0b:21:8c:98:c0:
36:13:0f:8c:18:15:1a:bd:85:49:aa:8d:20:3a:80:88:f2:56:
bc:50:a3:e0:d5:eb:78:61:5d:8d:e7:e6:ec:a7:08:96:90:38:
a7:f8:a4:e7:97:14:b1:c4:d3:e5:3f:18:42:5e:0f:14:4e:f7:
a6:4a:bf:64:8a:44:63:7e:d2:c8:e5:93:f6:ec:70:0b:b3:53:
9b:b4:14:94:67:a4:d5:79:42:bf:33:a7:06:b9:2c:6c:7c:95:
54:a0:a1:f5:66:e6:8d:98:6d:b5:f9:e2:b7:d3:ec:d7:07:7b:
97:e0:77:89:0e:01:c7:9c:36:f1:e5:35:75:2a:eb:14:e7:a2:
5b:bd:ee:3b:21:09:6b:52:d8:37:3c:42:65:2d:70:e7:55:a2:
95:9d:20:f9:da:16:d8:5d:c3:6d:36:bf:0c:f3:c0:91:cc:1b:
b9:f0:f7:28:29:60:d6:04:e6:d7:ff:45:b4:d5:f0:86:da:c1:
54:d0:d3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:46:23 2024 by rpki-client on console-fra.rpki-client.org