Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/arPmcy2TNegZT6aKHptURdXhRpU.roa
File: arPmcy2TNegZT6aKHptURdXhRpU.roa (raw, json)
Hash identifier: rJKbsDYWUsB7rYCYJ3zOS1eS9E/1FsJLNCYQ5urJ7P8=
Subject key identifier: 6A:B3:E6:73:2D:93:35:E8:19:4F:A6:8A:1E:9B:54:45:D5:E1:46:95
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 018CC7271318F4D96A75AB52B3B46971C96B
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/arPmcy2TNegZT6aKHptURdXhRpU.roa
Signing time: Mon 01 Jan 2024 22:31:15 +0000
ROA not before: Mon 01 Jan 2024 22:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 45.129.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:13:18:f4:d9:6a:75:ab:52:b3:b4:69:71:c9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Jan 1 22:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ab3e6732d9335e8194fa68a1e9b5445d5e14695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:18:92:f3:b6:04:1a:b6:c1:48:4b:25:a5:63:
29:64:53:7e:bd:2a:2c:5b:60:33:d9:c6:ad:98:38:
fb:44:3f:2c:a0:06:4b:0b:25:bd:b0:75:ed:58:e8:
3f:42:2e:98:cd:79:1d:b3:b7:ef:cf:8b:73:50:29:
ae:db:94:2c:c0:48:42:02:95:f7:7d:40:36:07:52:
69:eb:38:4a:d8:38:c7:75:59:cd:e4:50:32:72:89:
71:23:81:75:48:87:27:4c:6e:6c:88:34:93:51:9d:
51:3f:4f:13:c4:70:bb:43:cf:39:2d:02:cc:45:58:
42:4a:99:87:a1:94:75:01:00:19:49:12:f5:fa:45:
1d:0a:c1:98:5b:a4:48:9a:65:da:fa:72:55:d5:1b:
37:3a:67:33:94:21:d3:74:45:f1:83:21:48:86:22:
6f:15:a7:d3:08:97:4c:7e:49:82:06:d1:a2:ed:be:
e1:d4:59:6d:a1:83:8e:2f:a1:02:27:89:94:00:f2:
7d:70:e3:18:b6:da:b9:bc:e5:12:b1:f5:a4:40:44:
8a:1f:14:fd:6a:86:7a:c2:50:da:8d:71:54:f1:64:
31:bd:7e:5b:02:69:a1:e6:0a:69:5a:be:28:3a:25:
f2:ee:e7:d6:7a:d8:dc:21:67:1b:03:6a:80:5b:a1:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B3:E6:73:2D:93:35:E8:19:4F:A6:8A:1E:9B:54:45:D5:E1:46:95
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/arPmcy2TNegZT6aKHptURdXhRpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.192.0/24
Signature Algorithm: sha256WithRSAEncryption
92:8e:89:11:d2:2e:6d:61:98:e4:75:23:47:38:b8:bc:08:cb:
67:11:85:61:18:17:85:8e:f1:08:e6:3f:fa:28:5e:5d:57:14:
3d:d2:14:a8:fd:1c:9e:a6:72:55:ec:46:cf:86:75:8a:7a:85:
12:de:eb:2b:6d:78:09:4f:69:c9:22:0b:60:86:db:c8:9f:e9:
04:90:3c:cf:ce:e9:36:24:b9:6f:e2:6f:66:fd:53:8a:5d:25:
46:5a:af:90:9a:0e:0e:f6:03:77:35:49:e9:a7:a0:df:c6:b3:
90:80:14:1c:ca:ea:49:d2:c2:84:c6:14:f4:f7:f4:0a:22:d5:
62:9f:0f:6c:87:5d:ef:04:42:92:c4:b2:e7:b0:2d:54:62:e0:
9f:4a:be:f8:d1:fb:ff:61:88:8f:a5:ae:79:c3:26:79:7f:da:
57:b9:1d:06:65:f6:7f:66:c7:7b:44:ff:da:4b:13:c9:e1:55:
50:8b:d0:0f:32:23:ca:a4:a5:45:52:bc:b5:1a:4f:b5:e9:03:
ea:44:cf:0c:05:26:5a:db:57:4b:98:50:28:de:19:7c:0a:20:
92:35:62:06:12:4b:9b:ee:51:90:6c:1f:35:01:61:a9:8a:98:
5d:b0:a9:03:1b:49:f8:11:8d:82:dc:ee:82:96:f4:2f:ad:78:
68:2b:31:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:54 2024 by rpki-client on console-ams.rpki-client.org