Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/1f17xm76lUSJclYbNYDtmigLnEQ.roa
File: 1f17xm76lUSJclYbNYDtmigLnEQ.roa (raw, json)
Hash identifier: UrrEtwQGFKc3lqoaEld9XLorRAP/EcL2MrHtjmSqgp0=
Subject key identifier: D5:FD:7B:C6:6E:FA:95:44:89:72:56:1B:35:80:ED:9A:28:0B:9C:44
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 018CC72712AFAF363CD7CA403136ECD6C83C
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/1f17xm76lUSJclYbNYDtmigLnEQ.roa
Signing time: Mon 01 Jan 2024 22:31:15 +0000
ROA not before: Mon 01 Jan 2024 22:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.129.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:12:af:af:36:3c:d7:ca:40:31:36:ec:d6:c8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Jan 1 22:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5fd7bc66efa95448972561b3580ed9a280b9c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:92:1b:33:24:b5:ab:4b:78:85:6e:50:42:
1e:d5:d0:81:37:52:1f:bd:f3:80:13:97:c7:81:db:
8c:f7:2e:9a:f7:87:9d:9a:5c:b7:7b:1b:d6:00:fe:
4b:fe:d4:2a:b1:ae:a1:24:00:85:ca:3e:05:74:8e:
06:5a:7a:05:0d:e3:c0:3d:ae:63:dd:bc:4a:cd:36:
4d:d0:da:d4:0f:59:03:cb:4d:ca:fd:48:50:8e:97:
b9:44:d7:13:95:86:0f:64:13:19:42:df:ff:61:43:
1f:d2:f5:9f:51:c9:63:cb:36:17:1c:78:67:ac:97:
a7:32:3e:f3:00:97:e1:3e:6c:8a:78:ab:b3:47:f5:
9d:f0:42:af:ab:25:cd:03:b7:cd:a3:a6:bc:ac:42:
4b:59:2c:e8:92:7e:8c:75:e0:7c:cc:68:29:9b:d7:
4a:a8:35:51:e3:a9:b5:f7:5d:e5:8e:81:b5:1f:65:
4e:12:d1:6d:61:76:58:d5:c8:5f:3e:0c:0e:6d:4c:
52:00:fa:42:8c:26:50:2a:c9:49:7d:a3:eb:7e:b9:
67:38:15:ed:a1:90:30:7b:28:18:ea:e8:c6:20:4c:
67:21:26:71:4b:7d:72:c5:c3:24:22:94:1c:77:58:
44:34:4d:ee:62:57:d0:15:57:e2:65:07:75:b5:14:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FD:7B:C6:6E:FA:95:44:89:72:56:1B:35:80:ED:9A:28:0B:9C:44
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/1f17xm76lUSJclYbNYDtmigLnEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:0b:17:72:b8:3f:35:c2:3d:de:c5:45:20:09:9d:dc:64:be:
0c:8a:d9:6c:c0:0f:0d:92:f5:a2:66:bf:d9:0d:b5:77:83:90:
02:1c:0f:5f:a9:74:4c:49:21:ce:cd:5e:27:bf:ed:7a:5b:72:
3f:39:40:69:4e:45:0e:ec:24:58:9d:ad:ff:78:ea:34:ae:56:
76:7e:b2:03:fa:1c:a2:7b:ea:ff:66:f7:3b:95:d2:95:ff:06:
84:84:57:90:6b:6d:53:d6:a8:7d:db:04:02:0d:cb:9b:d7:d6:
62:70:05:da:f0:c3:f3:fe:db:b3:5a:7b:12:53:c5:e5:48:a6:
e1:e7:42:b6:a6:08:76:b5:f2:70:79:f3:a6:3e:fa:44:b2:14:
18:b1:71:04:f9:5a:12:d6:76:9c:db:52:b4:f4:a8:af:46:cf:
a5:4e:df:e0:a5:bd:7e:46:07:09:12:ac:14:df:e7:de:10:a3:
af:81:8b:1b:75:ab:78:0c:cf:2c:e2:e4:1a:f0:96:d9:43:99:
61:2e:c5:71:b2:5c:d0:8c:86:86:7a:7e:7a:6f:9b:28:0a:35:
2f:af:e3:28:d1:d4:7d:89:6a:4c:1a:c2:f1:95:c7:5d:fd:85:
d0:b0:52:ff:7b:9f:00:cb:21:6d:f0:8b:c2:89:20:77:27:1d:
cf:ec:4a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:20:02 2024 by rpki-client on console-fra.rpki-client.org