Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/Z6RqEs0-rABXJnEuTani739B8o8.roa
File: Z6RqEs0-rABXJnEuTani739B8o8.roa (raw, json)
Hash identifier: 7itINHzAz5u2s0+NT9bVGxUFv8Uvp3cMV4GrMv/5Ais=
Subject key identifier: 67:A4:6A:12:CD:3E:AC:00:57:26:71:2E:4D:A9:E2:EF:7F:41:F2:8F
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 0193505B703D34F1345F57EC8F10CD731935
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/Z6RqEs0-rABXJnEuTani739B8o8.roa
Signing time: Thu 21 Nov 2024 20:13:09 +0000
ROA not before: Thu 21 Nov 2024 20:13:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44382
IP address blocks: 45.87.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:5b:70:3d:34:f1:34:5f:57:ec:8f:10:cd:73:19:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Nov 21 20:13:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67a46a12cd3eac005726712e4da9e2ef7f41f28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:fe:02:90:0f:50:d2:82:fe:ba:3c:97:fa:
be:37:50:f2:a6:6a:8c:37:81:d1:9b:a2:35:ea:32:
84:03:8c:2f:e0:99:d6:6b:4f:0f:11:dd:6a:6b:7b:
9e:90:4a:da:31:8a:43:11:ba:c4:cc:09:00:b4:d6:
62:46:fa:ac:ee:8e:c0:02:5f:a5:17:57:75:03:00:
7f:11:84:91:7c:88:09:b1:6a:f5:d2:02:c6:e1:90:
15:e7:cb:ae:38:a7:83:fe:f7:cc:08:72:0a:27:d4:
47:5b:03:ae:56:96:ee:29:3c:ca:e8:55:98:cb:a3:
a8:55:17:91:af:ed:df:5c:70:d1:80:ad:a2:0a:f2:
93:72:7c:65:84:a4:3f:47:b6:ae:e9:2f:e7:ad:35:
a9:6a:c1:b8:54:dc:84:a3:cb:3e:14:76:e6:a9:e0:
32:c0:e2:dd:2c:5e:d2:ea:48:c5:2c:47:e2:77:70:
ae:5a:fd:6a:2e:cb:f6:18:6d:ab:d0:c0:de:6f:61:
5d:ef:a7:db:34:05:19:68:e3:71:9c:31:40:53:57:
fd:56:ee:89:43:b8:ec:f9:e6:a0:96:e9:80:a4:aa:
c0:26:b4:76:36:53:a0:43:55:3f:49:dc:71:4d:04:
1c:da:5c:a1:63:e0:a4:6d:0a:b1:1b:af:0a:e1:85:
9c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A4:6A:12:CD:3E:AC:00:57:26:71:2E:4D:A9:E2:EF:7F:41:F2:8F
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/Z6RqEs0-rABXJnEuTani739B8o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.161.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:c8:e7:2b:06:ac:08:75:c2:19:4a:9d:c5:b7:13:a2:3f:4c:
d1:6b:e4:de:e9:0c:98:c6:00:32:ba:24:c4:28:df:bc:51:db:
5d:8c:d5:24:92:72:bf:be:9c:45:f7:ea:44:40:a8:08:97:24:
52:68:5b:f4:96:b4:46:b0:0d:fd:78:c4:2f:3e:ed:5d:03:ac:
fd:b9:01:98:5f:e8:59:39:0d:f4:aa:38:23:78:16:eb:ae:59:
f2:6f:6f:2d:d5:10:dd:76:9c:43:85:46:e9:ba:2f:92:83:85:
33:ed:fc:5d:9f:fd:72:68:2e:89:3b:5d:3f:bf:b7:9b:0e:cc:
9d:8f:e8:6b:2d:0d:c0:08:d8:3c:ab:49:8c:3e:62:f4:fa:b1:
2a:b7:94:04:c0:90:a9:02:ae:ca:2d:73:71:32:3b:48:d3:ea:
7b:5c:16:ce:11:8d:9e:21:8a:a0:51:d0:56:9f:56:c2:3e:52:
8c:36:da:05:da:2c:ab:1d:cc:c3:98:92:2b:bb:7b:57:f2:73:
8e:5e:66:26:ad:82:bd:6b:fd:8e:e9:e0:56:77:b1:70:91:0b:
32:62:c1:a5:ce:13:3d:13:ca:0a:e8:f9:57:90:f9:6d:46:76:
8d:73:bb:d3:e9:aa:ba:ff:bf:99:b9:01:ad:8c:31:20:fc:02:
29:59:27:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:51:31 2024 by rpki-client on console-fra.rpki-client.org