Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/TmufkcF5LEbRcZEiq_u-wURnubw.roa
File: TmufkcF5LEbRcZEiq_u-wURnubw.roa (raw, json)
Hash identifier: rhcpe5hhNAppJauapVWtuSipXRgWv6+ueBw8SPgTjq4=
Subject key identifier: 4E:6B:9F:91:C1:79:2C:46:D1:71:91:22:AB:FB:BE:C1:44:67:B9:BC
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018CC2DB3624C2BCE3BF9CA88F7BC67AA603
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/TmufkcF5LEbRcZEiq_u-wURnubw.roa
Signing time: Mon 01 Jan 2024 02:29:55 +0000
ROA not before: Mon 01 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60721
IP address blocks: 45.154.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:36:24:c2:bc:e3:bf:9c:a8:8f:7b:c6:7a:a6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e6b9f91c1792c46d1719122abfbbec14467b9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ac:93:e8:41:ac:74:ba:cf:88:6f:d8:b3:b3:
e4:9a:b5:5b:7d:84:6a:c7:43:cc:48:4b:51:e7:60:
5e:9c:5c:98:bb:41:1d:5b:09:a0:f7:e7:2c:60:6e:
ce:63:c5:fe:d7:46:6a:0f:ef:a9:c9:a5:74:79:67:
9e:c6:8e:69:86:1c:4c:2a:cb:ca:42:32:fc:9b:ae:
95:74:ad:e4:43:92:94:02:96:4c:7e:c0:64:6a:7e:
f5:87:fc:30:05:6a:f9:5e:e4:bd:f1:8a:30:8b:4f:
7b:46:4a:c9:f6:f3:7a:9c:08:23:14:de:b2:47:78:
07:12:d5:14:88:b1:4e:8b:3b:1d:9a:3b:5e:09:5a:
e1:f3:2d:c2:2a:30:76:da:1e:5d:4e:6f:6b:1f:6c:
04:f4:92:c9:7e:0c:13:22:d7:81:09:09:04:34:86:
50:27:84:c3:eb:c2:8c:83:80:b8:7f:91:82:71:4c:
b3:ec:20:44:98:0e:8d:6a:c5:01:d5:8b:9f:e1:36:
48:c8:be:96:8f:32:08:ad:62:0a:3b:1f:54:40:ae:
9f:a4:b3:18:36:3f:2d:e0:83:50:87:83:3d:0c:4a:
9c:d3:d2:06:58:b3:e6:4f:32:f0:6a:e5:16:4a:27:
77:43:d1:da:0b:f2:29:5c:51:ef:45:c3:d1:65:e1:
ff:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6B:9F:91:C1:79:2C:46:D1:71:91:22:AB:FB:BE:C1:44:67:B9:BC
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/TmufkcF5LEbRcZEiq_u-wURnubw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.159.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f3:e4:fa:a6:10:e2:ea:08:ae:e7:8c:c9:1e:00:03:e0:a2:
41:9d:61:f8:a0:b0:5a:af:f6:dd:57:eb:79:3a:c3:6d:94:cd:
90:ee:fa:97:ce:d3:c9:93:50:28:56:71:00:85:6c:2c:39:3c:
12:cd:b4:50:f4:aa:ed:65:fb:16:0c:0a:67:5e:f2:69:ed:2f:
0f:13:1a:2b:87:12:26:96:2c:cc:78:47:c4:89:0e:d6:1a:24:
93:9b:b8:e5:a6:95:95:c2:b0:a0:68:53:69:1a:a0:59:77:8a:
d5:94:13:2c:bd:9c:94:07:8d:42:7c:84:87:cf:2d:bb:63:04:
c0:6a:26:ad:3b:44:af:3a:56:0e:94:11:d3:b6:5c:71:12:7b:
cd:eb:9e:c9:4d:4b:a0:f5:a1:43:e6:5c:e5:36:4b:85:ba:d4:
63:11:02:88:52:da:cc:b8:3a:80:a4:b4:f3:59:58:2a:fa:0f:
bb:b9:59:01:ab:43:17:46:44:fe:c4:2f:88:98:02:76:58:40:
61:64:12:16:97:9d:e2:9f:25:7d:66:5a:8a:11:38:14:ab:72:
de:d4:ce:76:ab:b5:c9:55:bb:50:72:db:9f:4f:1b:ed:61:f7:
db:c1:32:98:7f:2c:5b:3c:f7:bd:36:a1:02:4a:24:8c:f7:21:
ad:22:c5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:30:12 2024 by rpki-client on console-fra.rpki-client.org