Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/79nlrqZrbuPqgSPHsc_fnLbyPZo.roa
File: 79nlrqZrbuPqgSPHsc_fnLbyPZo.roa (raw, json)
Hash identifier: 3YgnQs0xlGZem/ninRi0GjZaS6/yxHMb1V+J0hVua18=
Subject key identifier: EF:D9:E5:AE:A6:6B:6E:E3:EA:81:23:C7:B1:CF:DF:9C:B6:F2:3D:9A
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 019294EF1EA31AB506C60EC2B164DB9120CD
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/79nlrqZrbuPqgSPHsc_fnLbyPZo.roa
Signing time: Wed 16 Oct 2024 10:45:51 +0000
ROA not before: Wed 16 Oct 2024 10:45:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.93.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:ef:1e:a3:1a:b5:06:c6:0e:c2:b1:64:db:91:20:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Oct 16 10:45:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efd9e5aea66b6ee3ea8123c7b1cfdf9cb6f23d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:a2:75:55:c8:13:44:b2:9e:6b:de:7b:8e:
ca:d6:b5:7e:e8:60:8c:88:56:72:c6:f6:8c:df:ad:
b9:9e:19:b5:2f:83:04:ef:1c:95:dd:36:d1:c9:5a:
0e:f5:3f:63:ba:5f:d8:0f:34:3c:b7:ad:5b:9e:ce:
70:8a:b1:2e:71:fc:83:3d:22:3d:85:a3:b9:67:cc:
ba:54:08:39:d7:02:50:34:ab:61:52:cd:b9:eb:a2:
72:87:18:2e:0b:24:7c:59:9b:b5:2a:fb:f3:6a:fb:
bf:f2:4d:8f:35:64:6d:38:84:ca:aa:cb:9e:08:5d:
c5:b8:bd:f3:da:3c:8a:4e:06:da:e7:81:66:31:6f:
c6:a4:31:c1:b6:56:25:00:37:52:17:80:1d:a9:f2:
e8:51:60:e1:94:49:4c:c0:4f:2b:dd:ad:06:96:68:
17:d2:2c:f7:9f:1d:ee:25:8d:7e:a6:d3:2e:92:bd:
39:3c:d1:ab:d4:1f:01:22:29:76:2d:04:77:b6:0b:
18:37:e7:4c:31:48:bf:32:78:8e:0e:3f:f7:e0:95:
b4:81:8b:53:8c:5d:7c:18:bf:2f:ba:76:fd:93:7b:
7f:f1:c6:fb:70:76:c9:3a:1c:d5:c3:9c:03:96:52:
dd:c6:ee:0f:35:da:0b:6d:1a:da:f5:37:b4:21:d9:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D9:E5:AE:A6:6B:6E:E3:EA:81:23:C7:B1:CF:DF:9C:B6:F2:3D:9A
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/79nlrqZrbuPqgSPHsc_fnLbyPZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:e5:af:81:f2:b4:eb:ce:c7:12:55:85:92:34:52:05:9f:38:
73:7f:00:22:3d:07:fa:49:9f:c5:c5:1c:ff:56:ea:71:9c:37:
33:bd:75:bd:72:10:57:97:70:d4:2e:8f:c8:7d:70:01:41:0f:
8a:38:28:d2:81:07:4b:b6:7f:a4:55:a3:63:47:3d:a0:b9:2c:
86:91:cb:f9:e6:c3:ed:74:52:a3:9e:c0:ff:b5:33:75:91:85:
c2:28:06:21:95:1e:51:b4:9e:fd:9a:28:5c:88:de:e7:62:9e:
c4:05:96:78:95:d6:b5:39:df:12:c4:fb:8f:bb:2e:06:21:bf:
de:f6:e5:a0:ca:90:8d:ec:6e:2f:46:34:b1:b1:aa:18:39:55:
95:b6:77:67:fe:9e:9f:0e:3c:0a:25:62:e2:14:a5:cc:c8:43:
29:16:2e:28:69:32:bc:12:57:3a:51:ea:13:99:89:c4:7f:77:
c4:fb:e0:86:3b:48:3e:7f:c5:96:a4:cb:f9:7f:7e:78:06:cf:
57:85:d7:94:f6:7b:6a:13:83:cb:c6:0b:4c:03:41:cf:c3:6d:
ce:29:ca:45:a2:12:64:57:e6:ee:c1:ff:49:4c:61:37:55:8b:
8e:cb:61:a9:e7:2d:2f:3e:9b:05:ae:65:4c:02:34:e6:ac:b2:
35:8f:e2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:24:58 2024 by rpki-client on console-ams.rpki-client.org