Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/X7SaDHMSYAxujOPd3vLM49JHv-w.roa
File: X7SaDHMSYAxujOPd3vLM49JHv-w.roa (raw, json)
Hash identifier: zIEbh5pv+7ngPsqZdMDIWFwNe9IUd/HYV2ZTtm1RJnw=
Subject key identifier: 5F:B4:9A:0C:73:12:60:0C:6E:8C:E3:DD:DE:F2:CC:E3:D2:47:BF:EC
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018CC2DB36E062B2A0C526350FC8E47C301D
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/X7SaDHMSYAxujOPd3vLM49JHv-w.roa
Signing time: Mon 01 Jan 2024 02:29:55 +0000
ROA not before: Mon 01 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197071
IP address blocks: 45.65.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:36:e0:62:b2:a0:c5:26:35:0f:c8:e4:7c:30:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fb49a0c7312600c6e8ce3dddef2cce3d247bfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c0:dd:16:b3:70:7b:bf:9e:a5:29:ac:e9:cd:
11:d1:f9:1f:97:43:8d:73:9a:85:8d:8e:ce:4c:f3:
5c:ad:b6:c9:1b:0b:d6:4b:73:4f:92:a8:67:8d:46:
dd:89:55:6f:b2:ca:46:09:09:3d:43:e3:28:ab:43:
83:e5:c0:78:4f:98:3b:13:06:f8:bc:15:2f:a2:3c:
7d:61:27:90:fc:40:67:77:39:14:4f:fc:45:e6:9d:
9d:60:b1:57:b8:a6:97:a1:1c:21:1e:94:98:90:ca:
59:fd:dc:57:6a:7d:4f:ce:22:da:81:3e:45:43:70:
b2:16:47:17:f0:b3:46:84:0f:60:0a:1b:43:27:9c:
19:06:92:ff:dc:91:08:0d:2f:68:68:ba:32:87:6f:
6a:79:be:6e:84:6a:c7:d4:8c:21:b6:e5:bf:f0:62:
aa:7c:74:02:fe:73:09:ec:43:fc:26:92:19:d8:c6:
4a:bb:e5:c9:c7:3d:6b:0b:64:bf:a8:1b:f4:1f:12:
e7:36:d0:bb:b4:80:fe:57:8c:1d:f0:02:05:f2:59:
26:f0:22:d9:46:f8:2b:19:f9:f4:22:cb:0e:df:1b:
14:6a:81:0f:5e:76:d2:2a:96:fb:7e:86:bc:b5:bf:
62:d3:b9:7e:7c:ec:ba:f1:65:8f:bc:4c:ec:d1:1f:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B4:9A:0C:73:12:60:0C:6E:8C:E3:DD:DE:F2:CC:E3:D2:47:BF:EC
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/X7SaDHMSYAxujOPd3vLM49JHv-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.115.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:2f:5f:18:f8:3f:ae:bf:70:56:e2:03:83:99:07:72:a2:83:
a6:11:1e:4e:ed:ee:41:e3:80:ed:96:6f:c8:80:39:15:90:6c:
4b:ab:d7:8e:07:f7:22:c9:83:b3:ae:af:3c:04:de:87:e7:00:
9b:b1:ac:2a:92:1b:56:7b:42:b3:df:e2:6e:31:55:c2:2c:60:
30:2e:35:f3:ca:7b:29:96:d4:98:b7:48:dc:e4:4e:03:d2:1c:
1a:83:91:bd:08:fd:c0:eb:b6:f6:c9:4a:14:58:7a:45:60:6c:
dd:fc:32:84:14:51:c9:86:dc:27:67:e2:f3:96:42:3c:c4:e9:
a2:16:32:3b:fd:00:b6:ca:25:c3:84:f1:f2:54:82:0a:56:44:
48:ac:7f:44:fd:a2:ca:d0:cc:f8:8b:4d:a9:e5:a0:ca:c5:74:
2c:63:d0:8c:5e:9c:89:d9:42:ca:dc:42:04:a0:93:2d:0d:a0:
5b:9c:71:97:df:0a:6f:ad:b3:d5:db:da:be:05:63:d9:d6:b1:
db:80:f2:7f:a2:91:a4:bb:a7:33:3f:7e:dd:ce:d4:85:e1:2d:
3d:70:fe:75:7d:b6:03:e4:a6:c5:87:8f:a7:bf:35:2a:4b:b1:
82:83:74:86:14:4b:ea:43:02:54:41:9f:67:03:9d:a2:f0:c2:
f4:4f:ad:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:26:11 2024 by rpki-client on console-ams.rpki-client.org