Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/h2vjCdp0v4RAgXlKWSo7PfDtmdM.roa
File: h2vjCdp0v4RAgXlKWSo7PfDtmdM.roa (raw, json)
Hash identifier: khZl28GfZy3jKWBUtUSnZ+7Ib1+vqEbbM2ugPA+dXPg=
Subject key identifier: 87:6B:E3:09:DA:74:BF:84:40:81:79:4A:59:2A:3B:3D:F0:ED:99:D3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193076024DD4A7836344B538E63B8AFB291
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/h2vjCdp0v4RAgXlKWSo7PfDtmdM.roa
Signing time: Thu 07 Nov 2024 16:06:01 +0000
ROA not before: Thu 07 Nov 2024 16:06:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214114
IP address blocks: 45.144.173.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:07:60:24:dd:4a:78:36:34:4b:53:8e:63:b8:af:b2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 7 16:06:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=876be309da74bf844081794a592a3b3df0ed99d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4a:2b:28:a1:76:de:41:35:91:db:cc:cb:66:
c4:d7:e1:8d:52:ab:8f:21:06:3b:cc:44:a9:dc:e7:
b8:ee:5d:2a:2f:07:cc:c6:85:25:f9:4f:bb:6a:c7:
43:14:ae:c3:e9:05:65:58:7d:1a:5b:8c:8b:9d:09:
3b:a0:0f:42:4b:12:73:3a:f9:37:b1:4c:02:29:a8:
a3:84:09:67:e1:a9:a3:a2:4c:86:82:a7:e6:f0:81:
4f:d8:7d:d9:bd:60:3f:78:04:15:84:62:8e:77:a4:
93:81:bb:e7:c1:f3:f2:2d:a7:e7:24:6e:00:a8:2b:
6e:2e:2e:00:df:82:d4:35:1a:29:39:71:9a:cc:24:
99:17:15:65:26:3f:1f:b7:e7:03:8f:38:10:2b:f2:
72:d0:28:7d:2d:6b:e6:73:99:68:41:7f:62:f8:21:
d6:19:43:eb:43:1f:92:ca:57:b5:8b:3c:47:d6:91:
95:e6:72:47:8a:04:5c:c3:d0:5b:92:a7:ee:e5:ec:
97:92:dc:92:d0:88:36:0d:46:25:88:0e:c9:15:14:
8e:83:98:5c:65:eb:f6:43:d0:a8:3f:90:69:f0:30:
f3:4c:7c:88:cd:67:a5:b3:73:bb:22:6d:4e:7d:ed:
f0:6b:0c:f2:98:c4:d5:25:e4:e8:9c:25:2d:31:79:
f2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6B:E3:09:DA:74:BF:84:40:81:79:4A:59:2A:3B:3D:F0:ED:99:D3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/h2vjCdp0v4RAgXlKWSo7PfDtmdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.173.0/24
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
83:89:68:1b:c4:4c:ae:d5:0a:fb:bb:94:71:36:81:f7:aa:a3:
3e:ef:1a:43:17:9d:6b:06:8e:45:58:44:cb:7d:2d:d9:ac:c3:
2e:32:f4:94:14:8b:41:f2:38:4b:5c:0d:8b:eb:58:d4:58:ed:
40:84:b6:16:28:3d:9c:c6:59:00:8c:2c:15:1b:7d:9d:44:42:
ec:5d:c5:c8:d7:17:b4:06:84:4b:59:dc:46:da:44:d3:90:b9:
b9:ac:86:63:69:fd:f1:75:61:4a:3c:34:57:74:c0:fc:23:73:
19:eb:05:8c:1f:0e:50:17:60:4a:02:a7:58:78:de:c0:89:ab:
97:95:81:bc:c9:37:da:54:d0:3a:36:85:fc:e3:c2:39:45:d5:
ed:33:26:00:fe:bc:d6:8c:4a:48:62:fd:ab:08:f9:51:2f:4a:
06:4b:3e:ed:ac:b8:8d:e7:ec:45:72:94:35:c2:25:f9:e7:e2:
50:bd:90:fc:60:ed:0a:4b:f8:37:0a:f4:59:79:26:ea:33:c6:
af:c0:c3:56:3e:93:7c:16:57:3d:c2:b1:c4:00:9f:e9:47:a5:
ed:c8:c7:42:34:c0:ae:c4:ba:70:cf:d2:35:57:ef:d6:2c:84:
3a:08:cc:c9:89:fb:bc:f1:4f:68:5d:c0:33:3f:50:a5:71:75:
f4:c7:26:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:27:05 2024 by rpki-client on console-ams.rpki-client.org