Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/1blf8158mJoLCEQYDpmIeLb4IHQ.roa
File: 1blf8158mJoLCEQYDpmIeLb4IHQ.roa (raw, json)
Hash identifier: YMJARZ/YvxA+yc+6Vd8/pTVYwGE4+TPQloK1HEObWhU=
Subject key identifier: D5:B9:5F:F3:5E:7C:98:9A:0B:08:44:18:0E:99:88:78:B6:F8:20:74
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 018CC94CDA3EB6BEFD888D6C0356FFBD62DF
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/1blf8158mJoLCEQYDpmIeLb4IHQ.roa
Signing time: Tue 02 Jan 2024 08:31:45 +0000
ROA not before: Tue 02 Jan 2024 08:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213217
IP address blocks: 45.143.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:da:3e:b6:be:fd:88:8d:6c:03:56:ff:bd:62:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: Jan 2 08:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5b95ff35e7c989a0b0844180e998878b6f82074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:27:69:4d:c2:0f:13:14:39:0d:ce:d1:78:
7e:7e:0f:ba:af:52:36:7b:5d:77:8a:6a:14:2e:64:
90:6a:96:4c:4e:39:f0:19:0d:7e:14:ad:28:e8:3a:
21:6a:0d:f7:fc:4c:93:45:b0:7e:52:ff:42:7a:e8:
71:42:a3:53:cd:f2:6b:66:c2:d4:7b:66:28:a6:07:
14:62:31:c4:5d:cb:55:6a:e9:2a:f2:d4:e0:39:07:
f6:57:e5:35:06:cc:7b:87:54:2e:a6:e2:7b:95:5c:
d8:91:8b:d9:09:9c:30:e2:ae:4a:86:19:7d:98:38:
b5:82:51:95:45:82:89:27:60:ab:16:19:82:ea:79:
01:03:fc:e7:71:e3:c3:cf:cb:bb:bb:ab:1e:77:e8:
fc:86:4d:95:5a:05:31:16:5f:0f:4c:20:0c:cb:03:
db:82:06:c0:ce:5b:1e:ee:bf:34:12:56:6d:48:1d:
86:a6:48:66:7d:f1:c0:98:c7:6e:30:15:5e:c5:cb:
f0:63:44:f7:16:a2:28:4a:d3:2b:30:40:1e:ac:4e:
27:1b:ac:50:c3:87:24:bb:5e:ee:16:4f:fe:12:bc:
10:e1:83:07:d9:78:f9:30:7d:4e:18:81:ac:50:aa:
49:d9:70:6d:f1:c3:39:f1:da:f9:e5:90:33:ef:8f:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B9:5F:F3:5E:7C:98:9A:0B:08:44:18:0E:99:88:78:B6:F8:20:74
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/1blf8158mJoLCEQYDpmIeLb4IHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.88.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9e:60:32:d2:39:d4:08:67:ba:ae:16:bd:24:93:3d:f5:36:
46:02:80:e0:6a:cd:a3:89:63:25:53:45:1d:70:18:b7:df:45:
0e:e5:a9:b5:99:f0:1f:78:20:3b:c8:e1:77:68:ac:22:07:50:
b4:0a:f5:36:73:85:f4:60:06:29:1d:56:34:75:fe:25:a2:48:
e5:e5:f5:cf:9a:22:7f:50:e6:fa:1a:f2:52:63:f4:f2:58:45:
e7:8c:63:c0:3a:4a:0d:a1:89:23:a6:88:ee:85:46:f6:19:ab:
6c:ba:25:cc:4a:2d:68:bb:ec:f0:dd:52:d8:8a:4d:b2:cf:96:
1d:bd:8d:3d:0b:70:d5:25:c7:57:a8:3d:3f:4c:38:b9:d0:2e:
96:d9:af:a7:8f:94:5b:a2:61:8d:5f:82:e6:ee:e6:61:5a:d8:
f9:57:84:11:43:bf:cb:d8:2c:17:fd:52:55:a8:b6:f8:81:95:
8e:81:00:a1:06:5f:97:13:73:4e:07:15:a4:69:c5:c2:4c:dc:
74:cf:12:b2:23:fd:91:e8:cc:fd:62:b1:28:b1:59:63:5a:88:
24:9e:aa:cc:01:98:bf:c5:ba:f8:20:48:69:d3:6f:82:68:35:
b6:aa:fe:3d:38:de:c6:f7:67:5a:b0:8d:ab:c4:73:71:a2:ba:
7e:d9:85:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 03:29:40 2024 by rpki-client on console-fra.rpki-client.org