Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/x-UxTPaQ7oStHDD6VCxKNuOIfVY.roa
File: x-UxTPaQ7oStHDD6VCxKNuOIfVY.roa (raw, json)
Hash identifier: 8+Qpo5xpj26GgJjZYG153nR4zZE/wmcironPtmlZYI0=
Subject key identifier: C7:E5:31:4C:F6:90:EE:84:AD:1C:30:FA:54:2C:4A:36:E3:88:7D:56
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 0190C59E7561907E2DED4FA3B7C75AD3F3B3
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/x-UxTPaQ7oStHDD6VCxKNuOIfVY.roa
Signing time: Thu 18 Jul 2024 11:33:34 +0000
ROA not before: Thu 18 Jul 2024 11:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.87.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c5:9e:75:61:90:7e:2d:ed:4f:a3:b7:c7:5a:d3:f3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jul 18 11:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7e5314cf690ee84ad1c30fa542c4a36e3887d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:71:3a:97:81:cd:f0:b1:aa:b5:47:59:51:
66:86:7f:6d:86:dd:c5:5c:42:36:ec:4f:4b:da:1e:
37:a9:43:ea:ca:cb:5b:7c:65:00:45:4e:5f:5b:82:
71:92:19:5d:6f:c3:64:53:68:33:c9:d0:01:a8:58:
4e:a6:63:e9:cd:98:8c:a1:e8:4b:58:cb:b6:28:53:
2e:5d:3d:fc:76:2e:7b:9c:b3:db:c5:a7:c9:b5:b5:
6a:3a:a2:9e:c0:06:b6:8a:8a:e4:af:61:0a:74:8b:
05:aa:01:d9:73:bf:e9:0a:c3:00:67:cd:91:b8:71:
56:94:5f:f3:ac:6c:c5:82:f7:1c:7c:61:36:a3:81:
0d:c5:99:42:a6:04:57:f8:0f:9b:11:e3:34:70:d3:
6a:69:84:39:d4:5c:35:33:99:d2:f2:ed:f5:8e:e1:
de:d3:52:b1:e2:79:31:e0:89:0b:fc:a0:9b:91:aa:
f2:8a:7d:59:aa:d9:9c:9b:b2:71:90:07:32:7a:77:
ca:82:94:f7:66:e9:aa:e2:73:5a:fb:50:ff:14:f0:
6b:fb:34:c8:22:c8:6f:2d:cc:2b:05:0b:43:1e:78:
17:3d:75:da:7d:ed:44:eb:19:d4:e9:72:3d:61:e3:
c2:09:4f:24:02:97:a8:6d:02:fe:1a:24:73:a9:3f:
3e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E5:31:4C:F6:90:EE:84:AD:1C:30:FA:54:2C:4A:36:E3:88:7D:56
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/x-UxTPaQ7oStHDD6VCxKNuOIfVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.163.0/24
Signature Algorithm: sha256WithRSAEncryption
23:7f:f4:57:dd:f4:e0:7d:a3:ca:e5:f1:78:e7:62:c1:e6:d4:
82:81:4a:34:22:bf:11:ee:7d:38:8d:39:9f:15:86:ab:7b:2b:
9a:bf:d6:52:13:83:a7:af:87:2f:7f:b8:15:62:1b:a1:9c:b4:
79:95:e9:d3:82:e0:9e:11:7e:fa:4a:bf:64:1c:14:dd:68:b6:
66:5c:38:4a:6b:e7:ac:dc:24:4d:76:36:07:eb:0d:7d:77:ff:
7f:02:64:a8:09:4e:55:f4:5b:26:cd:85:8a:d0:ed:49:bf:07:
77:eb:85:75:d3:b3:cf:9f:7d:1e:d3:cd:db:f0:f4:04:24:cc:
b4:10:80:9d:c3:d6:a9:68:dd:72:e6:5e:51:80:30:e9:b0:bb:
a6:07:fe:9b:f5:e2:de:d5:79:5c:36:8a:c0:d7:f5:a4:92:3d:
47:e8:a4:fb:59:b1:52:d8:de:b4:91:7b:d0:d3:61:9e:c0:d8:
d0:3c:7a:72:f9:f8:f1:ac:68:b8:77:bc:be:22:49:f4:80:33:
46:7c:93:3d:b2:b1:c2:15:63:d3:bb:a1:d2:bc:c7:f8:c5:7c:
ae:ac:09:61:f4:d5:b8:56:b1:7b:2f:00:b3:5a:8e:38:46:fd:
1e:f9:2e:03:14:54:c0:d9:86:f4:9d:70:84:56:01:70:21:1f:
e2:e0:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:49:37 2024 by rpki-client on console-ams.rpki-client.org