Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/q93oHpC2o9QqBuX4cnCslFTWVrs.roa
File: q93oHpC2o9QqBuX4cnCslFTWVrs.roa (raw, json)
Hash identifier: 2JtU856xL9iPjyw7QbEUpz7jl+rU99RhcXqX0JOFmAM=
Subject key identifier: AB:DD:E8:1E:90:B6:A3:D4:2A:06:E5:F8:72:70:AC:94:54:D6:56:BB
Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial: 018CC2DB274FAA32F983BF330F079149F424
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/q93oHpC2o9QqBuX4cnCslFTWVrs.roa
Signing time: Mon 01 Jan 2024 02:29:51 +0000
ROA not before: Mon 01 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48814
IP address blocks: 45.94.148.0/24 maxlen: 24
45.94.151.0/24 maxlen: 24
45.94.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:27:4f:aa:32:f9:83:bf:33:0f:07:91:49:f4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
Validity
Not Before: Jan 1 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abdde81e90b6a3d42a06e5f87270ac9454d656bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:db:ab:6f:9e:3c:4f:7a:f7:18:65:0e:9f:53:
51:02:85:2a:9d:f0:3c:75:d1:b1:b0:53:cb:36:0e:
6b:85:88:0e:e6:1e:f2:c6:6b:11:67:e1:a0:03:75:
9f:09:a5:d1:20:ca:22:56:4d:b9:a0:93:8c:09:a0:
80:3a:32:f9:e7:32:31:91:2b:3d:4c:8f:ca:0e:f7:
fb:98:d3:3b:1a:f3:1c:07:2d:3f:ee:08:7e:f4:c1:
b3:45:68:15:c4:17:d3:b3:b4:a5:31:5d:82:93:00:
34:81:01:02:a8:c8:94:b3:9e:08:6e:6e:fa:c2:bf:
6d:b5:e4:c4:8e:d5:c8:f6:44:a7:42:d7:6f:e0:a3:
97:91:5a:45:1f:08:66:0a:7e:e8:48:fd:13:fa:b1:
0b:24:d2:a2:d4:ed:88:db:ba:99:4b:3b:42:00:70:
08:b3:bc:78:03:ee:0f:3f:19:43:81:ee:cd:a6:49:
e0:ee:9f:22:1a:ac:9c:34:d0:ae:1b:6d:1a:ee:b9:
c4:92:bd:d1:94:4e:91:9a:67:18:ff:79:91:ce:7e:
00:d6:d2:0b:b9:94:f9:4b:38:64:fc:9a:2c:b1:15:
59:c8:af:3c:5b:1f:c0:2e:47:ce:c4:0e:73:bd:9f:
2b:6a:0a:26:b0:54:8d:8a:0c:9d:eb:bc:79:2d:c9:
9c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DD:E8:1E:90:B6:A3:D4:2A:06:E5:F8:72:70:AC:94:54:D6:56:BB
X509v3 Authority Key Identifier:
keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/q93oHpC2o9QqBuX4cnCslFTWVrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.148.0/23
45.94.151.0/24
Signature Algorithm: sha256WithRSAEncryption
66:27:7d:79:8e:d3:24:9f:c5:86:b6:9d:74:f2:25:d3:2d:63:
f2:d3:ab:7d:e1:c8:3c:f1:5f:6b:b4:70:19:fa:59:c8:c7:50:
27:2f:a0:1a:e5:08:73:58:0b:94:10:6f:00:db:1c:1d:d5:0f:
a1:f2:69:53:64:43:e3:ff:09:7e:36:5a:45:49:4e:bc:9d:60:
24:fb:62:8f:40:f8:ad:e6:3f:b4:90:dd:f4:8c:90:39:16:bf:
8c:a7:b5:10:93:28:9c:ca:b7:84:71:ea:8b:75:2d:a1:ef:00:
b8:44:61:16:ad:0d:da:b9:c8:98:9c:a1:72:cd:58:61:2d:3b:
d9:1d:11:51:79:27:c6:86:c0:38:a8:22:99:9d:5e:e7:8b:09:
c1:a1:2e:d9:be:52:ad:47:1c:60:21:77:f8:5c:07:3a:79:12:
ff:99:fe:2e:9f:bc:47:b2:e4:2f:09:c5:02:da:63:76:5f:c1:
21:42:0d:73:2b:ab:8a:2f:5b:81:dc:0d:d2:e3:37:87:51:01:
e3:4a:7e:cf:c5:f8:3a:c3:0d:b7:d1:71:82:d7:d8:9f:2f:65:
6a:ec:b7:5a:48:3a:74:63:ae:e0:06:d3:dd:cc:93:4d:fa:f0:
f1:0d:0d:67:a0:77:32:b0:f6:88:99:a7:cf:3c:f0:5c:22:b5:
45:0d:99:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 07:51:00 2024 by rpki-client on console-ams.rpki-client.org