Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/o3EwsAthvZwRg0u_2Tp3dFi0A4Q.roa
File: o3EwsAthvZwRg0u_2Tp3dFi0A4Q.roa (raw, json)
Hash identifier: bHJs+NnG7+dE8RHAanHbHa0f0IC9DR1RfWI6QGs2ZPk=
Subject key identifier: A3:71:30:B0:0B:61:BD:9C:11:83:4B:BF:D9:3A:77:74:58:B4:03:84
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 018CC8704AD2975BE5169A2690508472425A
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/o3EwsAthvZwRg0u_2Tp3dFi0A4Q.roa
Signing time: Tue 02 Jan 2024 04:30:51 +0000
ROA not before: Tue 02 Jan 2024 04:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211903
IP address blocks: 45.94.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:4a:d2:97:5b:e5:16:9a:26:90:50:84:72:42:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Jan 2 04:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a37130b00b61bd9c11834bbfd93a777458b40384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:77:4c:13:0f:4a:2d:6a:4e:cf:b4:64:ed:
33:fe:d2:5c:37:ce:11:2b:8e:20:d4:27:58:20:37:
12:e1:3c:99:d2:d7:ea:62:ed:10:98:a8:cb:a0:2f:
49:5b:31:59:91:e2:b9:02:79:9d:d9:95:9c:92:18:
af:2f:5d:64:01:15:8b:45:9e:48:64:f3:30:53:ec:
a4:fe:99:85:c8:cb:5d:cc:89:11:9a:bd:5f:da:19:
a7:17:d0:15:e7:9b:d3:d9:0e:af:17:82:fa:cf:92:
5e:7e:a6:c0:96:d2:9a:89:72:2d:58:3a:ba:0b:9d:
13:f5:c7:4e:be:a8:91:ef:44:47:3e:98:ea:8f:10:
ce:b2:d8:16:2a:35:5d:a8:32:72:5f:d9:b6:4c:8d:
97:36:49:19:12:c6:89:f3:0d:f3:53:6c:41:b6:08:
bc:6a:a7:43:08:86:26:53:37:cd:64:64:1e:fc:31:
68:08:8b:eb:cd:c0:21:2a:97:cd:5b:69:66:40:d6:
11:c1:8c:99:1e:67:a7:f6:91:ba:e3:78:75:94:27:
6b:7b:44:80:3a:d9:04:6d:4c:23:13:76:e0:28:e6:
49:9b:31:29:62:98:b1:ae:2b:a0:2a:57:25:fa:74:
83:b5:1a:e5:31:83:3e:7b:13:2f:04:46:d6:d9:01:
ba:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:71:30:B0:0B:61:BD:9C:11:83:4B:BF:D9:3A:77:74:58:B4:03:84
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/o3EwsAthvZwRg0u_2Tp3dFi0A4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.253.0/24
Signature Algorithm: sha256WithRSAEncryption
41:db:24:a1:e8:c9:fc:d9:9a:8e:ae:ba:0b:0d:d9:7b:4f:bc:
10:27:3d:31:4c:9a:1c:1c:94:ad:d7:7d:9b:be:53:2d:6d:fc:
06:94:4b:92:94:01:5c:23:c2:14:7d:85:25:0d:56:ed:5f:c5:
6d:87:a2:e8:f2:b5:22:13:b3:a5:31:78:8c:87:70:94:96:ea:
b9:70:66:93:19:37:fb:3c:ec:3e:a9:e0:92:5a:a4:7e:fb:a9:
44:7b:aa:f7:5a:a2:55:ac:3d:e1:e1:c3:45:8b:f1:fc:40:9e:
ab:dc:65:a2:b8:fb:e8:f7:a2:d2:1f:75:4a:17:fb:eb:41:cb:
fd:c6:10:26:c0:1c:b3:26:f2:c3:eb:52:4f:0d:fa:56:7d:cd:
a5:c2:74:f9:93:ce:e8:83:0f:48:a3:bc:2a:3e:1b:bf:22:77:
9d:b1:f0:92:5e:a4:80:52:84:c9:09:f3:40:e6:ac:53:22:38:
6e:3a:5f:af:64:01:0e:ce:b9:69:c7:60:99:df:0a:58:c1:30:
58:51:cd:ec:82:2d:7c:2d:b2:66:f7:be:67:0b:24:83:ba:eb:
7f:6d:45:3c:86:85:2d:2e:14:7b:b8:3f:9f:ba:1c:a0:98:fe:
b6:72:0b:60:36:0b:f7:59:6c:ae:24:8d:02:69:7b:c2:80:0d:
b1:b4:6b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:35:21 2024 by rpki-client on console-fra.rpki-client.org