Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/oe1YDq7zn5NP1JsHqEH-dgGexlM.roa
File: oe1YDq7zn5NP1JsHqEH-dgGexlM.roa (raw, json)
Hash identifier: TkM5ePM8T8vEqzM3lRpat/W033Lx5UrE9CdKP1z/noc=
Subject key identifier: A1:ED:58:0E:AE:F3:9F:93:4F:D4:9B:07:A8:41:FE:76:01:9E:C6:53
Certificate issuer: /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial: 01928FC42EAC0048F8A2C3033EABC71164F5
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/oe1YDq7zn5NP1JsHqEH-dgGexlM.roa
Signing time: Tue 15 Oct 2024 10:40:51 +0000
ROA not before: Tue 15 Oct 2024 10:40:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56902
IP address blocks: 45.159.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:c4:2e:ac:00:48:f8:a2:c3:03:3e:ab:c7:11:64:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Validity
Not Before: Oct 15 10:40:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1ed580eaef39f934fd49b07a841fe76019ec653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:74:09:84:18:1f:ce:65:da:0f:86:d3:0d:
84:8b:a1:97:0f:7f:fe:b9:63:2a:a4:e1:a7:c6:d5:
7a:3b:2d:28:02:80:05:74:89:68:6e:e2:f4:de:b0:
35:50:45:67:f4:11:ca:df:4c:8e:08:06:82:42:9e:
1f:80:98:46:27:fd:5f:43:a8:84:e0:92:39:4d:04:
4f:a3:47:06:8d:71:13:d4:42:dd:15:cd:c0:93:5f:
12:9b:9b:21:12:6c:36:14:c9:59:89:5b:59:07:e9:
92:88:85:42:93:a3:5b:c8:2a:28:b1:90:c5:ac:ca:
97:aa:37:ca:ca:a1:ac:11:ca:7f:71:2f:0d:37:e1:
e2:41:e5:22:92:42:a5:c6:89:07:47:9c:d8:be:f2:
5d:50:35:a1:02:67:fd:41:cf:75:95:68:03:27:7c:
65:e2:e1:70:39:20:5e:87:5f:2a:0c:1b:50:9c:11:
4d:02:45:97:12:ca:ef:0e:58:24:1e:7b:b7:5d:c8:
47:e8:ec:93:63:9a:9b:cf:d5:72:bb:73:ef:50:8a:
d2:f4:16:24:21:50:98:8b:d9:6d:cc:77:a9:63:40:
b8:16:f9:75:e5:e2:f9:93:d5:54:26:79:7e:73:63:
5a:a1:72:ad:57:1f:3f:dc:e6:3e:49:c9:f7:3e:be:
7f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:ED:58:0E:AE:F3:9F:93:4F:D4:9B:07:A8:41:FE:76:01:9E:C6:53
X509v3 Authority Key Identifier:
keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/oe1YDq7zn5NP1JsHqEH-dgGexlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.187.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b4:c4:dc:84:5a:1c:90:e6:73:48:02:da:09:08:1d:a8:4a:
9c:b4:d9:be:9b:44:6f:e8:73:6f:79:77:dd:1c:22:ed:a0:4e:
9d:ff:77:23:fc:da:89:7b:b9:c6:73:56:71:92:55:0a:ed:bb:
c5:87:b7:e1:59:c3:2b:ae:42:fd:21:9a:14:23:3b:b3:92:68:
7e:1e:61:d4:ed:e4:d5:7a:1c:99:7a:7c:93:5a:8a:c1:25:65:
eb:3e:9b:d8:df:eb:4f:97:9e:28:f3:82:9c:ec:f5:c6:7e:64:
f4:77:2b:bf:ea:bf:b8:f0:ed:07:54:8d:1a:1a:e1:f4:c2:9c:
f3:23:2d:41:01:3e:25:29:4b:6e:bc:75:ed:a0:a2:9c:15:5c:
8c:14:81:c5:1e:24:c0:e7:c0:fe:35:8b:6a:2a:78:70:75:71:
06:43:e0:51:fd:c4:f1:2c:5e:d9:59:e0:e7:f3:97:69:ef:fd:
ca:72:bc:16:a8:e4:59:31:3d:ab:76:4c:db:da:4b:06:fa:9d:
12:e4:43:46:a3:bd:a1:6d:4a:d5:9a:45:b4:06:0e:00:22:98:
04:67:7c:79:d7:a0:81:fd:8b:86:cd:fd:1d:08:93:d4:ea:a8:
c1:9d:df:65:f1:b3:d3:c9:46:9d:f0:fb:ae:32:3e:1f:f3:31:
95:8b:6c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:11:16 2024 by rpki-client on console-fra.rpki-client.org