Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/7LYicOgPqptnUsNjvWRlrz3QNys.roa
File: 7LYicOgPqptnUsNjvWRlrz3QNys.roa (raw, json)
Hash identifier: 1h7RZDTmaIRonrdTaVOSq4Kj8NeVIVunHSU8m7HnM0Y=
Subject key identifier: EC:B6:22:70:E8:0F:AA:9B:67:52:C3:63:BD:64:65:AF:3D:D0:37:2B
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 018CC7944FCFB9AF0FFB19510087E8F6E677
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/7LYicOgPqptnUsNjvWRlrz3QNys.roa
Signing time: Tue 02 Jan 2024 00:30:34 +0000
ROA not before: Tue 02 Jan 2024 00:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399045
IP address blocks: 45.143.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:4f:cf:b9:af:0f:fb:19:51:00:87:e8:f6:e6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jan 2 00:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecb62270e80faa9b6752c363bd6465af3dd0372b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3c:85:a6:73:9c:cd:4f:12:ca:70:97:0d:b7:
ce:de:f0:f6:ea:67:07:23:f9:2e:33:eb:9c:7a:45:
f8:72:16:dd:2a:ed:16:e3:00:2b:7a:99:c7:52:7f:
df:3f:4b:55:ca:52:0d:b0:09:bc:36:05:8c:ed:08:
af:bb:4f:64:fb:a8:d2:a0:28:91:20:4e:73:9c:3b:
a5:ad:51:4a:ad:69:77:7c:08:d9:76:5f:0a:f5:94:
02:96:38:12:87:c6:b2:6f:9f:38:fd:0d:14:61:fa:
6b:e9:af:7f:45:58:63:9d:5b:ef:e9:14:54:70:9f:
f3:65:91:6a:ca:2c:bd:45:40:fa:24:32:0b:c1:e5:
65:aa:7c:51:44:b3:17:c2:a4:3a:f0:b0:c0:22:d7:
35:32:38:1f:d1:03:f0:10:34:fe:50:f6:6d:ad:57:
c8:44:89:62:2f:cd:c9:7f:a0:6b:cc:f9:e3:d8:90:
62:45:28:ee:d1:88:b8:e0:be:e9:04:e6:bf:ce:66:
8e:8d:e0:f3:9c:e6:ff:2a:14:be:55:ce:25:d3:6a:
e0:eb:3c:78:b2:b6:34:ec:93:f1:ac:b0:b1:1b:60:
97:83:81:e6:d2:ac:55:4f:d5:81:a0:59:c6:3f:1a:
ea:69:cd:fa:ed:25:0b:99:a7:cf:fe:b3:d3:56:ff:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B6:22:70:E8:0F:AA:9B:67:52:C3:63:BD:64:65:AF:3D:D0:37:2B
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/7LYicOgPqptnUsNjvWRlrz3QNys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.9.0/24
Signature Algorithm: sha256WithRSAEncryption
65:7c:ce:68:ea:20:b6:de:e7:58:01:63:c8:46:bd:da:31:1d:
f3:16:78:e7:d5:30:28:aa:6e:18:bc:58:90:d5:18:18:30:f8:
63:a0:86:b1:7c:14:b1:dd:ea:fa:a0:7a:e7:12:3f:91:cf:54:
1b:7b:36:19:60:6d:d4:d6:7b:cc:a4:9f:b6:db:90:85:bd:ce:
be:af:96:83:05:7c:e2:8e:38:ed:a5:97:86:fe:87:31:28:c5:
5d:38:13:3e:4d:e5:eb:23:72:e8:20:73:ba:33:d0:87:c6:31:
96:c1:84:e5:9b:0b:eb:cb:69:e8:61:da:c8:28:46:7e:90:3c:
99:b3:e5:28:ed:2c:bf:7d:71:6a:4e:08:27:f2:84:1d:c1:e3:
db:8d:03:8d:37:18:e9:5f:ff:be:ac:22:2a:04:40:7a:19:10:
5a:7f:ca:4d:e3:05:1a:d8:74:9f:ea:e5:2c:c7:f6:93:88:1e:
50:e5:c2:96:a9:aa:53:86:85:d3:cf:5b:4a:1d:e4:ef:14:84:
a9:fd:8c:df:8e:25:77:7b:dd:93:9d:c2:47:13:e0:ab:fc:87:
f4:6d:29:1b:a1:4c:c3:d8:80:20:16:78:c7:16:c7:ed:e0:81:
f5:ca:dc:da:c7:36:9e:f2:4e:83:fc:e1:70:36:01:8f:ad:db:
d4:cc:16:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:11:08 2024 by rpki-client on console-fra.rpki-client.org