Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/tf1tM38U7NR9GFX75EyvVqGJpVY.roa
File: tf1tM38U7NR9GFX75EyvVqGJpVY.roa (raw, json)
Hash identifier: zd1yn2/edtcR0uuLgCfQMAqwVXvJI8DiK8yN8hl7Vwc=
Subject key identifier: B5:FD:6D:33:7F:14:EC:D4:7D:18:55:FB:E4:4C:AF:56:A1:89:A5:56
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 018CC725A8BFB77AA943D06D4DA1FAFB02AA
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/tf1tM38U7NR9GFX75EyvVqGJpVY.roa
Signing time: Mon 01 Jan 2024 22:29:43 +0000
ROA not before: Mon 01 Jan 2024 22:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42280
IP address blocks: 45.87.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:a8:bf:b7:7a:a9:43:d0:6d:4d:a1:fa:fb:02:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Jan 1 22:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5fd6d337f14ecd47d1855fbe44caf56a189a556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:87:b9:36:06:73:c6:ff:78:90:ef:ee:ad:
80:61:8b:15:9b:d9:5a:ca:b0:17:28:7a:99:21:c5:
aa:f8:e3:38:b6:8c:c2:80:07:73:62:82:ed:cc:b2:
39:8c:d7:44:a0:8f:03:b2:af:61:4d:47:d1:34:5d:
b6:b6:66:c9:cb:da:91:44:3c:6e:df:fc:4f:81:9d:
f7:03:c0:e9:28:89:3a:f3:a4:d1:19:77:60:e3:90:
6b:b5:c7:4c:15:df:ea:4e:fa:c3:47:c0:52:32:3d:
18:78:0c:65:7a:82:c4:6b:9d:4e:2b:6e:df:72:9a:
8c:95:92:2a:81:d5:cc:ed:67:64:f9:23:aa:6b:93:
a0:07:81:1a:43:a1:64:44:aa:21:d0:8a:ce:58:3e:
63:44:18:33:fb:35:10:9f:d6:96:16:3f:90:39:da:
b9:bd:75:2b:85:d3:79:17:0f:bc:39:60:a1:a1:09:
16:6c:29:17:fa:ef:9d:b8:7b:59:8b:48:ca:52:4a:
40:02:db:5a:5c:27:62:4d:a0:00:9f:da:bd:77:f8:
61:4d:df:7d:b1:1c:68:8b:64:3c:00:29:cb:b2:26:
86:84:9c:80:8b:04:16:cb:1a:e3:3a:15:24:8a:cd:
5b:c0:c4:fd:91:5b:59:51:aa:17:4e:3f:83:02:05:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FD:6D:33:7F:14:EC:D4:7D:18:55:FB:E4:4C:AF:56:A1:89:A5:56
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/tf1tM38U7NR9GFX75EyvVqGJpVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.122.0/24
Signature Algorithm: sha256WithRSAEncryption
37:35:2e:12:e6:18:90:38:00:99:ff:f3:dd:a7:92:f9:a4:c7:
e2:48:bb:bd:4a:89:09:8e:3a:63:0a:73:e5:bb:b8:df:48:02:
d6:91:2a:d2:7c:98:e2:e7:7f:f8:d5:9e:6a:69:e6:90:fa:47:
c2:ca:f5:62:50:94:15:fe:e1:58:65:10:49:26:63:88:4b:59:
66:77:dd:0b:0c:3e:a5:94:f7:51:f9:46:3c:15:50:b9:cd:c0:
6d:9b:bd:c2:e0:49:fc:83:19:2d:bb:63:94:4c:f9:95:ae:ee:
47:e3:4d:c8:77:81:49:37:b9:e2:43:03:d5:d3:43:ae:66:0e:
f1:96:e3:c9:77:fd:fa:e9:82:17:05:32:86:73:e0:ed:f3:60:
57:77:08:66:2a:a2:2f:7c:2e:48:dc:8d:2d:18:03:e2:d7:ec:
14:ca:9d:d3:65:ba:7f:20:76:28:70:08:44:4f:bc:9c:57:76:
5f:7e:3d:fe:3e:a6:db:6a:bb:d2:b5:f4:73:42:e0:e5:94:1c:
07:33:26:70:61:3b:c8:34:50:c5:87:ff:f5:34:23:ff:67:e6:
9c:73:32:04:58:b5:a7:f4:27:83:e4:97:95:5e:20:4d:56:9f:
75:f2:3a:96:f2:f5:07:71:20:fe:2c:7e:5d:a8:7f:85:fd:a7:
90:6e:37:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:07:06 2024 by rpki-client on console-ams.rpki-client.org