Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/98iPjzwSmaUqRgvwqgEFBTIDU8Y.roa
File: 98iPjzwSmaUqRgvwqgEFBTIDU8Y.roa (raw, json)
Hash identifier: UP7ScV1Z7NYgOMOMyxdemP8a4q38jNqxR18iXZh0LRA=
Subject key identifier: F7:C8:8F:8F:3C:12:99:A5:2A:46:0B:F0:AA:01:05:05:32:03:53:C6
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 018CC7270BF4B03AACDB3CDA14CF4BCAA768
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/98iPjzwSmaUqRgvwqgEFBTIDU8Y.roa
Signing time: Mon 01 Jan 2024 22:31:14 +0000
ROA not before: Mon 01 Jan 2024 22:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44218
IP address blocks: 145.14.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:0b:f4:b0:3a:ac:db:3c:da:14:cf:4b:ca:a7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Jan 1 22:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7c88f8f3c1299a52a460bf0aa010505320353c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:82:c0:d3:ca:b0:8b:d4:9e:a3:3b:be:e1:
84:fa:a1:37:fc:be:12:07:3b:47:5b:59:57:97:02:
be:51:e8:9d:2e:fd:f1:ed:77:59:eb:6b:9e:3b:5e:
a2:3a:ce:d7:80:b9:72:84:25:2f:8a:7a:08:36:44:
37:cc:ca:c8:10:37:ce:32:4b:87:f7:30:08:66:cc:
1f:b2:bc:cb:4c:ff:59:b8:43:d7:5e:6d:c3:30:dc:
6e:51:c1:e5:b9:12:c6:86:ba:5c:96:37:13:3d:92:
18:fd:5f:77:cb:4f:be:9d:2a:40:9e:25:06:f2:1d:
52:cb:74:ad:c0:b3:79:32:7a:4d:1a:95:fa:87:02:
d9:d4:56:c4:59:38:d1:e0:91:72:76:03:b7:3b:5b:
ea:22:ad:30:eb:6b:49:4a:e2:42:cf:ec:b1:a8:db:
f6:b3:54:b4:06:ad:54:3e:ce:b1:4c:0d:cf:73:23:
96:64:b5:1e:9a:19:ac:97:c6:53:56:09:44:ff:20:
ff:52:3f:f3:c3:91:de:64:c7:de:e2:73:3d:d1:97:
8c:60:37:a0:5a:33:11:40:11:b8:09:8e:c1:b5:e3:
b8:28:6d:f2:64:68:6c:82:3b:d6:8d:45:18:d1:1d:
dc:94:5e:da:84:75:32:60:18:b3:5f:44:e9:81:02:
46:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C8:8F:8F:3C:12:99:A5:2A:46:0B:F0:AA:01:05:05:32:03:53:C6
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/98iPjzwSmaUqRgvwqgEFBTIDU8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.14.94.0/24
Signature Algorithm: sha256WithRSAEncryption
80:39:53:6e:f8:52:cc:df:4d:9c:d4:f1:67:f0:0d:20:d8:73:
3f:5b:9c:00:da:52:4f:90:87:32:02:fe:e3:81:8e:44:ab:49:
e3:7d:55:66:7f:4c:7c:3c:35:cc:c1:78:37:3c:e6:3a:51:81:
84:ea:35:8a:b3:4f:cb:d3:a7:2a:b1:22:d7:c1:62:88:f6:97:
f9:35:d6:cd:0b:08:b5:9c:ea:74:f8:1d:a2:8a:c7:a7:4e:d6:
fe:e7:ea:68:52:59:14:50:41:9d:4e:2e:2c:c1:ee:0f:b8:ac:
5c:f9:0d:7c:b1:67:12:61:18:8e:9d:d8:c8:9a:cc:8d:bb:84:
ea:b3:74:b6:de:40:04:14:dd:f5:49:03:45:db:cb:65:1f:b0:
b9:c1:5f:5f:8a:6c:31:b4:48:b9:5c:e9:b4:12:16:05:c8:73:
3f:66:44:c7:51:ca:80:14:b8:0f:dd:a0:fe:d0:7a:01:48:b5:
eb:ea:f8:3e:67:9d:11:5c:2d:d4:92:fd:88:9a:c3:e2:20:83:
9d:ae:d0:a3:11:66:2c:8f:65:71:3d:d6:a4:7e:b0:ba:13:1d:
1b:c5:76:7a:26:c7:98:86:e5:5c:c9:50:0f:69:db:ca:58:35:
b8:51:0b:1d:76:34:60:3b:b8:a8:60:10:61:f3:f9:e2:0d:e0:
4b:91:a6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:52:57 2024 by rpki-client on console-ams.rpki-client.org