Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/fxuSU7_Dl7d3UBfvTamm5kxSfJA.roa
File: fxuSU7_Dl7d3UBfvTamm5kxSfJA.roa (raw, json)
Hash identifier: ZLlmcw1g0eOQYx4Be9061L3iCCDQ49ttv4MlK+LQCGk=
Subject key identifier: 7F:1B:92:53:BF:C3:97:B7:77:50:17:EF:4D:A9:A6:E6:4C:52:7C:90
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 019010F2EF0C64E24D3C79642DD3BAEF9FEF
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/fxuSU7_Dl7d3UBfvTamm5kxSfJA.roa
Signing time: Thu 13 Jun 2024 09:34:34 +0000
ROA not before: Thu 13 Jun 2024 09:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207475
IP address blocks: 45.87.88.0/24 maxlen: 24
2a10:2f47:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:10:f2:ef:0c:64:e2:4d:3c:79:64:2d:d3:ba:ef:9f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Jun 13 09:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f1b9253bfc397b7775017ef4da9a6e64c527c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:de:b4:9a:80:5e:47:2b:49:c8:9b:f1:af:7b:
9e:81:07:08:c0:b5:cd:21:ef:31:b7:4c:d7:c2:b2:
71:4b:4a:7f:64:a8:ac:83:0e:69:e7:f7:5d:26:1f:
9d:93:af:63:fa:ff:e5:dc:e9:d8:3f:db:64:f6:5f:
23:87:36:3c:20:6a:f2:55:29:4f:40:e1:e1:29:86:
ed:63:7b:a7:54:b5:55:f0:8a:05:9e:e5:0c:31:61:
39:ac:a7:b6:c6:f8:52:64:2b:0a:78:8b:cf:c5:29:
e5:c1:5e:d9:06:f7:d8:aa:74:a4:06:42:6a:31:18:
5f:d5:4c:6b:ee:35:bb:71:bb:58:28:90:e7:d6:9b:
bb:4e:b2:72:1b:1f:9d:e8:99:7f:6c:6e:d6:a7:c1:
62:d9:ac:88:d8:5d:f3:d7:66:60:c3:52:c2:8d:7d:
b6:1b:6c:92:5e:11:97:22:1d:69:9c:ad:19:2b:3b:
a5:02:0b:85:0c:31:18:47:c3:3b:82:9f:d2:6d:34:
31:42:e7:11:6c:10:8a:60:7b:b9:6d:e0:60:47:ae:
22:05:21:c7:f3:7a:25:18:2f:27:0b:00:62:a0:8b:
5e:42:f2:c2:42:32:40:36:4a:ea:11:19:1a:6d:c0:
fa:61:82:45:cf:10:d1:21:00:a6:e2:18:e5:17:a7:
45:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1B:92:53:BF:C3:97:B7:77:50:17:EF:4D:A9:A6:E6:4C:52:7C:90
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/fxuSU7_Dl7d3UBfvTamm5kxSfJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.88.0/24
IPv6:
2a10:2f47:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
3c:44:47:55:32:59:08:09:8c:6d:5e:4a:f8:68:19:fd:da:f2:
91:69:0f:fb:17:49:a7:6d:a8:be:94:ff:0e:cb:94:55:7b:5e:
fa:a4:de:b6:77:9e:be:2b:aa:5c:ad:9a:33:94:8a:c3:d5:72:
05:17:6a:42:f9:db:83:54:aa:9a:0c:93:f7:4b:25:c7:90:f3:
25:6d:27:a2:d6:e2:2b:90:89:f2:e3:8a:df:95:9e:b9:2c:b2:
0f:b7:ca:2a:95:0e:2e:3d:9c:02:bb:4f:60:0e:6d:2e:94:b1:
61:24:4b:38:f0:ff:27:00:8f:9a:91:10:db:99:79:a2:e4:11:
b5:8a:21:dc:dc:a6:1d:6c:f6:8a:27:c0:7e:b6:58:db:bd:4e:
e4:67:3d:b5:94:19:56:70:8d:33:5d:8b:c3:a8:2d:ff:e3:04:
f4:5e:5a:ad:94:c4:0d:da:d1:97:fe:ac:7f:6a:41:1b:5a:01:
3e:93:9d:cc:2e:85:40:9f:bc:38:f6:fa:6d:a8:e4:79:ce:e4:
c6:aa:72:91:5c:7e:89:bb:b8:6d:4b:5c:d3:04:d2:c6:a1:d7:
03:18:4c:14:92:a3:ae:fc:5d:36:8a:5b:a6:17:1d:df:b5:04:
56:b6:d1:58:f5:e4:83:59:bc:98:5a:6a:ba:e7:a8:02:36:d5:
41:ba:a6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:22:05 2024 by rpki-client on console-ams.rpki-client.org