Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/_WpCG7RBPMJvYQimdYCF1zGOczk.roa
File: _WpCG7RBPMJvYQimdYCF1zGOczk.roa (raw, json)
Hash identifier: FruKV4nsIUYfeaA98UE5kKBsaRoJxHQgfbq6MZM4X1s=
Subject key identifier: FD:6A:42:1B:B4:41:3C:C2:6F:61:08:A6:75:80:85:D7:31:8E:73:39
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 018CC8017A2806D7C061564CD420DD497749
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/_WpCG7RBPMJvYQimdYCF1zGOczk.roa
Signing time: Tue 02 Jan 2024 02:29:49 +0000
ROA not before: Tue 02 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 45.148.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7a:28:06:d7:c0:61:56:4c:d4:20:dd:49:77:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jan 2 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd6a421bb4413cc26f6108a6758085d7318e7339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2d:50:78:69:11:c6:3a:a4:ad:73:49:2a:3b:
82:91:6c:60:62:e2:01:cd:85:da:0e:eb:19:d9:e6:
53:59:de:71:14:a2:8c:2b:cc:d0:d5:6a:40:1f:1b:
66:25:5d:e1:6a:e8:34:eb:9b:29:e9:f7:ed:4d:db:
e8:1f:73:63:c6:97:d6:15:d6:83:d8:be:9a:93:6a:
b0:10:e2:48:56:fc:7d:e1:1e:83:c5:67:13:48:02:
99:98:36:4b:a2:a9:52:72:37:59:2c:1a:5c:4c:4b:
57:a9:e2:50:8c:00:a4:92:68:00:e0:96:67:3c:75:
a3:53:d7:c1:6a:9c:a2:ac:e6:f1:26:af:4b:04:c5:
41:09:54:07:63:b4:e6:b1:60:e8:9a:85:d3:4f:8e:
1d:3d:ee:17:53:ca:ce:ac:6c:85:1d:fe:0d:d7:f9:
64:aa:e5:75:a0:f5:bb:a5:03:71:3b:66:c5:32:35:
a8:60:2a:0e:ae:41:43:87:c5:f2:04:cd:13:c1:af:
a0:48:db:ab:97:55:26:f2:f1:e3:7f:6c:7b:66:96:
da:3c:6b:b9:21:54:d8:1d:9b:d7:e5:82:bf:c0:1f:
30:80:17:ee:eb:c5:48:bd:07:9b:1a:b2:cb:e7:4a:
92:73:6f:dc:c0:27:09:c5:09:89:42:2d:ec:2f:c8:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6A:42:1B:B4:41:3C:C2:6F:61:08:A6:75:80:85:D7:31:8E:73:39
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/_WpCG7RBPMJvYQimdYCF1zGOczk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.135.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:40:53:3c:7b:c4:bc:ab:3e:fe:03:76:12:9c:5f:a0:96:83:
77:00:1b:f4:02:ea:41:90:95:9e:6d:a2:27:c5:6f:d5:27:6a:
20:01:1e:0c:73:96:95:26:fc:5e:46:76:39:d5:80:24:41:20:
7b:a5:77:10:6c:25:58:7b:fb:6d:12:47:23:c4:81:07:3a:6b:
2b:53:be:3e:8b:2a:c3:67:f2:9d:25:b9:b2:ac:a4:97:07:c3:
1c:f3:b1:fc:e8:b9:ed:f3:ef:84:d5:22:46:b9:74:80:d9:d1:
10:37:ca:2d:fc:59:6c:99:f9:59:b8:a7:e5:8c:a9:fb:69:07:
1c:5b:f3:b9:98:5a:1d:2f:3a:0e:4f:4e:ba:c6:f8:25:3a:f7:
e4:99:6a:4b:69:6a:6e:57:bf:df:84:b8:f0:98:eb:a8:e5:07:
8e:f3:b3:fb:f9:fb:a3:27:d9:0b:3d:d3:6a:c4:47:3b:53:d9:
ed:68:e7:37:35:04:d9:a2:f9:5f:5e:29:bb:54:51:6e:b7:1c:
c9:26:f1:49:c2:67:37:a9:db:68:ce:bb:04:60:dd:b7:c4:53:
d8:b5:83:d8:74:e8:04:94:6a:29:30:1b:98:0e:ec:b6:3b:91:
47:98:4a:e4:88:9a:4c:53:11:3e:69:35:fa:bc:7a:5d:9d:13:
94:36:4f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:30:10 2024 by rpki-client on console-fra.rpki-client.org