Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/dW5AzCDkth1zapjkUSsbaaGQU7E.roa
File: dW5AzCDkth1zapjkUSsbaaGQU7E.roa (raw, json)
Hash identifier: aPV1UY5WaJOmG2/BN1+Yn8KtMdB+LDJeDLGjhh8kCV0=
Subject key identifier: 75:6E:40:CC:20:E4:B6:1D:73:6A:98:E4:51:2B:1B:69:A1:90:53:B1
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 018CF4C1579677D5AD3CD57DDCE4A1A16850
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/dW5AzCDkth1zapjkUSsbaaGQU7E.roa
Signing time: Wed 10 Jan 2024 19:02:40 +0000
ROA not before: Wed 10 Jan 2024 19:02:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142594
IP address blocks: 45.139.225.0/24 maxlen: 24
45.139.226.0/24 maxlen: 24
45.139.227.0/24 maxlen: 24
2a04:ff00:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f4:c1:57:96:77:d5:ad:3c:d5:7d:dc:e4:a1:a1:68:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 10 19:02:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=756e40cc20e4b61d736a98e4512b1b69a19053b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0d:b1:40:0a:c2:5e:b8:d8:df:cc:fb:28:be:
a0:d3:2e:13:3f:b9:9e:db:e9:62:9b:b0:ee:52:b2:
1b:f9:19:b8:a9:3e:0d:5d:5e:81:9e:97:57:7f:eb:
81:7e:a3:33:12:dd:e6:94:9b:ad:81:cf:e4:e5:b5:
f1:e3:81:f7:2c:fc:c8:b6:9f:c0:83:8d:71:9e:61:
3b:aa:6f:a1:63:94:77:79:14:80:26:17:da:5b:7c:
3a:38:9e:9b:a7:84:84:bf:45:99:70:05:12:34:3a:
26:d7:9f:6a:6e:88:2c:f3:2f:6e:a2:88:e2:aa:14:
a9:6f:b1:a9:45:0b:15:03:dc:da:de:1c:c2:ff:c5:
f0:34:f9:bb:94:26:4d:3a:0f:05:d0:f4:f1:9e:f7:
f2:8b:48:5d:e0:84:f1:2e:83:2d:c4:7c:5a:c1:d9:
48:d5:25:67:0e:19:59:fd:61:1a:9c:47:2a:be:44:
e0:f0:a7:79:77:f2:72:81:3d:ca:21:5b:06:1e:d6:
9c:5a:67:f1:56:00:cc:ab:a1:ad:98:d0:ad:48:fc:
19:ef:ac:f8:59:09:06:fb:5a:02:76:7b:9b:96:ef:
46:0e:31:3e:ab:d2:90:32:2e:20:0e:6c:db:f7:ad:
20:94:e1:d2:e4:e5:bb:76:cd:fc:8b:e6:b8:56:d3:
e5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6E:40:CC:20:E4:B6:1D:73:6A:98:E4:51:2B:1B:69:A1:90:53:B1
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/dW5AzCDkth1zapjkUSsbaaGQU7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.225.0-45.139.227.255
IPv6:
2a04:ff00:800::/40
Signature Algorithm: sha256WithRSAEncryption
83:80:66:11:f2:eb:cf:c2:24:b2:1e:5d:c1:da:78:28:b6:98:
42:f9:8c:d7:ac:ed:e3:24:49:18:42:cd:4a:a4:db:cf:00:d2:
d8:d7:f1:40:f2:7d:d3:8a:a6:86:7c:0f:d6:50:7f:0e:1a:fb:
af:b3:91:af:a3:4e:ac:ae:fe:a0:c0:f7:f4:12:24:cd:73:5f:
ef:4d:a9:1f:1f:1b:5a:1d:2f:68:a2:93:e5:6f:58:b2:46:33:
b2:91:e4:7d:4f:59:55:2c:54:c3:35:94:6e:3a:2e:c7:50:0e:
01:84:32:e8:b6:48:38:35:34:30:2e:8a:a6:5f:e3:40:c6:55:
45:e7:f9:11:91:16:a5:94:b4:ee:f7:fd:37:7f:04:49:c9:06:
e1:bb:94:ea:3f:78:d3:86:fb:af:28:63:cb:4d:1c:ba:9d:98:
5e:3d:5c:f0:83:0d:77:8b:c3:b3:62:e9:79:13:ba:7a:52:9c:
d7:7f:fe:65:04:e8:39:17:10:d9:4f:e0:b2:a2:20:04:08:b1:
b4:0a:e2:69:66:4d:51:05:a1:26:73:15:80:4d:f4:93:8f:95:
5c:45:d7:f6:e5:47:31:86:27:b7:b5:3f:49:31:61:82:99:14:
ea:ec:c1:5e:cd:32:2b:d7:d5:44:24:e9:cb:8b:f7:7a:89:b4:
53:7d:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:50:18 2024 by rpki-client on console-fra.rpki-client.org