Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/t7gXwxyMutoLxVZVBNQXXRhN5O0.roa
File: t7gXwxyMutoLxVZVBNQXXRhN5O0.roa (raw, json)
Hash identifier: +eYrm1+9FzY2qfww2FvocGWskktBs6M8H/IF5tO/nao=
Subject key identifier: B7:B8:17:C3:1C:8C:BA:DA:0B:C5:56:55:04:D4:17:5D:18:4D:E4:ED
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 018CF9EFF198312E77415DCBE975292980A2
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/t7gXwxyMutoLxVZVBNQXXRhN5O0.roa
Signing time: Thu 11 Jan 2024 19:11:40 +0000
ROA not before: Thu 11 Jan 2024 19:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 45.87.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f9:ef:f1:98:31:2e:77:41:5d:cb:e9:75:29:29:80:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jan 11 19:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7b817c31c8cbada0bc5565504d4175d184de4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:f7:4e:91:29:a7:99:ab:dd:46:80:cc:ef:
ca:db:92:7f:e6:a8:4e:68:64:f1:8f:4d:81:9e:74:
94:7b:d0:8a:d4:aa:c0:f9:fe:67:9a:ce:57:26:d1:
d6:57:e8:46:54:c2:ad:26:98:99:cb:b6:24:3b:ce:
9c:5c:4f:8e:af:b8:52:4c:a6:0e:6a:b4:4e:05:f1:
78:76:8a:68:d1:ce:23:f6:13:d5:fd:d4:56:8e:3f:
67:b1:0f:5a:42:8a:ad:1d:45:9b:ac:38:fb:66:ec:
0a:e6:6f:89:2e:59:e1:30:fc:65:ab:81:6e:d0:f3:
4b:59:3a:c6:60:f3:6d:fa:10:98:bf:b7:87:0f:89:
b7:7e:33:e8:69:0a:4c:0a:ac:d0:ec:e2:e2:8d:84:
ba:a2:d9:8f:08:60:cf:29:b7:ea:f2:1b:30:d3:f0:
32:65:79:c9:6b:c1:f5:71:34:92:2c:59:bc:42:91:
0d:a8:8d:6e:b8:40:33:70:3a:ac:22:07:5d:04:84:
b6:fb:8e:44:27:1b:01:6e:5d:07:8f:2d:7c:ee:84:
5e:69:e6:1c:b8:44:69:42:f2:0c:50:77:4a:8b:0f:
67:a9:ee:80:24:72:9d:d2:b8:16:eb:6a:dd:29:f8:
8f:38:f4:c8:c2:46:2e:14:1a:4e:2d:b9:9a:d6:00:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B8:17:C3:1C:8C:BA:DA:0B:C5:56:55:04:D4:17:5D:18:4D:E4:ED
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/t7gXwxyMutoLxVZVBNQXXRhN5O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.160.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:1b:77:7d:43:c5:dc:34:ff:45:43:98:40:e6:3d:eb:eb:04:
00:3d:5c:88:24:1d:32:72:9f:a0:91:6e:1a:1f:30:18:fd:d7:
31:53:91:97:d1:78:b8:03:65:c2:65:c0:47:7f:8a:c2:b0:4f:
a9:af:a6:35:9b:d5:45:28:04:8a:f5:1d:ec:e1:96:d2:36:8b:
b0:08:9a:2c:d9:6c:0c:a6:74:ec:1a:4a:9e:2e:3c:14:65:73:
0f:26:6a:85:cf:8a:c6:e3:fd:e8:ca:76:6e:fe:2d:95:90:00:
62:a1:ef:b9:36:71:82:0b:0a:8f:8c:48:78:37:e4:f7:b8:cd:
0c:62:93:be:81:40:c4:dd:3e:1e:4b:97:98:e9:e0:ef:1d:31:
bd:ac:34:1a:60:40:7c:ca:78:62:af:d4:98:12:8c:b1:cc:f5:
d3:78:f0:02:af:d6:37:36:bc:d3:78:7c:70:fd:80:25:43:6a:
13:3e:e8:7e:e8:15:b9:1c:d9:d6:de:d7:5b:9f:80:28:8b:fa:
ea:e7:df:68:16:f4:7b:dd:8a:44:46:d8:78:f1:41:2e:a4:be:
4c:77:ce:46:99:1d:2f:0e:9c:04:92:a6:7b:d7:12:f5:ee:47:
41:61:5c:d0:b5:21:39:88:0d:fa:ab:39:19:0f:e9:87:ac:f0:
9e:3e:10:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:12:48 2024 by rpki-client on console-fra.rpki-client.org